last executing test programs: 5m30.546292324s ago: executing program 2 (id=3): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 5m30.412398846s ago: executing program 2 (id=6): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x103fe, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x10}) 5m28.20491325s ago: executing program 3 (id=17): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m27.114039816s ago: executing program 3 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 5m26.975073158s ago: executing program 3 (id=25): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m26.84133598s ago: executing program 2 (id=27): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5m25.948171374s ago: executing program 32 (id=27): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5m25.886776625s ago: executing program 3 (id=30): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f0000001040)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 5m25.671331038s ago: executing program 3 (id=33): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x8) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x220c01, 0x0) pidfd_getfd(r1, r0, 0x0) mlockall(0x1) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x20) mlockall(0x7) 5m24.288376389s ago: executing program 3 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5m23.862922436s ago: executing program 33 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4m29.163214821s ago: executing program 6 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x700, 0x0, 0x8, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x64, 0x0, 0xe, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x2, [{@broadcast, 0x10001}]}, @noop, @ssrr={0x89, 0x7, 0x96, [@multicast1]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000002c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) getpid() openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 4m27.668287944s ago: executing program 6 (id=176): syz_open_dev$loop(0x0, 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4m25.9175754s ago: executing program 6 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 4m25.740472023s ago: executing program 6 (id=187): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000021c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x20c, &(0x7f0000001f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000007000000028000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 4m25.387931338s ago: executing program 6 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4m24.250843666s ago: executing program 6 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 4m23.145313903s ago: executing program 34 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 12.4560032s ago: executing program 7 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 10.278348183s ago: executing program 5 (id=896): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 10.275472293s ago: executing program 1 (id=897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x18, r3, 0x333, 0x0, 0xffffffff, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0xa60d000000000000, 0x0, 0x4000001}, 0x80) 10.118803035s ago: executing program 7 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001f40)='./file1\x00', 0x2, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 10.096266426s ago: executing program 5 (id=900): socket$nl_xfrm(0x10, 0x3, 0x6) inotify_init1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x2000000000000003}, 0x0, &(0x7f00000002c0)={0x3df, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 10.032095337s ago: executing program 0 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 8.808920335s ago: executing program 1 (id=902): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) unshare(0x400) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000000180)) syncfs(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 7.618390783s ago: executing program 0 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6eafe621d11f40f8, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 6.668184898s ago: executing program 7 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2e) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) 6.593333529s ago: executing program 0 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 6.592669499s ago: executing program 5 (id=907): syz_open_dev$loop(0x0, 0x10, 0x4a003) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) 6.592290089s ago: executing program 4 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 6.340063743s ago: executing program 1 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 4.611638519s ago: executing program 0 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 4.611116029s ago: executing program 7 (id=911): setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='\x00', 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.520628871s ago: executing program 5 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 4.520374981s ago: executing program 4 (id=913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r6, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400fe880000000000000000000000000001060001000a0000000800060001"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24004800) 4.223427635s ago: executing program 7 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 4.222151545s ago: executing program 0 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x24}}, 0x4) 4.221389465s ago: executing program 1 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 3.009432354s ago: executing program 5 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001f40)='./file1\x00', 0x2, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvdpJsGtpfcvhB0dPqTRBpKoJ6SigVijloZfHfxcWmWrNrIYsL6SGbvSjFk+JF0JO3HvTYs3gQ8ebBqxakKl7sRQoNjuzu7OxsdqPJYWOLn88hfPN97zvvzcwjMwnJy2vt2Lg4G5du374V8/OlmFk5uxJ3SrEUxyKJvp2Y6P25yXkA4B53J03j97Tvn3t/uDCIPPsB4P7Ve/6/cXKYKB+i+NqJaUwJAJiyA37//9zE7JWpTQsAmKKx5//DI817fsw/k/9OAABw/3rh5VeeXV2LuFCpzEc03mtVW9V4eti+eikuRz3W43Qsxm5E/0Wh/7bQ/fjM+bVzpytdPy9FtVvRqkY02q1q/01hNYnLaT3KsRyLsZTVp3l90q1f7tVXImKn3Rs/GqVWdTYWsvF/WIj1OBOL8f+x+ojza+fOVLIDVBuD+nZEJ+YHJ9GdfxKL8d3rcSXqcTG6tcP5by9XKmfTtZH61vVyrx8AAAAAAAAAAAAAAAAAAAAAAEzDY5XcUr7/Tdpot969MNLhZtY/3x+n2v882x+o098fKC0Pdue5luzdH2h0f55WdSaO/WtnDQAAAAAAAAAAAAAAAAAAAPeW5tZc1Or19c3m1tWNYtAuZN7+5vOvjsegaSYrfSsZVkWWXN9szuZHHnQsHDmJfIg0L0+TkT5ZkEQMOu/Urt/IZ1zsU87HGivvBuWxplI2p1q9fvKhnz6ZVPVnN9jpZZIYuyyjQSkbv9DU+F83MR8Ru/tV7R+UJ9+LPPgjTdP9yrc/Hq+KUsRMHHoaBwi+vvXmA483Tz3Ry3yZbfrwyKOLL/740We/btTq0elfmXp9brO5m04+zoni3enOdbxPUlg/pew6lyashMlBZ5jpbDa3asn3v7304Aff7umcTF4/aTHzzv5jfbE3M9cPShFLg4vwd1OdnbD4u8GTo7fy6kbt1bv56j38jTv16UrtxvbNXw5aVfgiYaMOAAAAAAAAAAAAAAAAAAA4EoU/MD6Ep56f3owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN//9/IeiMZQ4S3G3HeFN5fbO57+DHj/RUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/srAAD//xu8baw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 3.009224684s ago: executing program 4 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) 2.994044364s ago: executing program 1 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) 1.400319498s ago: executing program 4 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6eafe621d11f40f8, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 1.361008919s ago: executing program 0 (id=920): socket$nl_xfrm(0x10, 0x3, 0x6) inotify_init1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x2000000000000003}, 0x0, &(0x7f00000002c0)={0x3df, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.236442641s ago: executing program 1 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.236118011s ago: executing program 7 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 1.231767661s ago: executing program 5 (id=923): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8000, &(0x7f0000000340), 0x80, 0x62d, &(0x7f00000032c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x1, "007c4de20278"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendto$inet6(r0, &(0x7f0000847fff)="f8", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) 1.187440282s ago: executing program 4 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 0s ago: executing program 4 (id=926): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x2, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): :aa:aa:3f) already exists on: batadv_slave_1 [ 42.021065][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.024535][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.027819][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.030692][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.033770][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.042019][ T4303] device veth1_vlan entered promiscuous mode [ 42.057943][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.060656][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.063184][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.067641][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.070125][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.080017][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.082219][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.085082][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.088134][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.090462][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.092749][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.102099][ T4300] device veth0_vlan entered promiscuous mode [ 42.109725][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.112305][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.120585][ T4302] device veth0_macvtap entered promiscuous mode [ 42.133121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.137057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.139916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.151989][ T4300] device veth1_vlan entered promiscuous mode [ 42.155439][ T4302] device veth1_macvtap entered promiscuous mode [ 42.168932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.169047][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.171529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.173221][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.176279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.179869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.182512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.203391][ T4303] device veth0_macvtap entered promiscuous mode [ 42.213439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.217329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.231135][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.234052][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.238074][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.241003][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.244898][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.250454][ T4303] device veth1_macvtap entered promiscuous mode [ 42.257416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.260039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.262883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.281926][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.284850][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.288311][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.291264][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.295078][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.300879][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.303199][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.304452][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.315323][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.318774][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.321687][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.324282][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.328224][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.332494][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.334911][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.339476][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.342163][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.345020][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.348493][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.355596][ T4300] device veth0_macvtap entered promiscuous mode [ 42.362208][ T4300] device veth1_macvtap entered promiscuous mode [ 42.370989][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.373725][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.377086][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.391704][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.395460][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.401444][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.404320][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.407818][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.410667][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.413169][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.416830][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.422332][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.431798][ T4302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.434454][ T4379] loop2: detected capacity change from 0 to 256 [ 42.434835][ T4302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.439701][ T4302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.442118][ T4302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.450780][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.455521][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.459677][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.462194][ T4379] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.472696][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.475372][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.488878][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.503508][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.505745][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.509225][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.512076][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.515193][ T4296] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 42.519056][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.519126][ T4296] FAT-fs (loop2): Filesystem has been set read-only [ 42.522388][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.523835][ T4296] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 42.538314][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.541244][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.543785][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.550215][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.552838][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.555764][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.559478][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.562309][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.569083][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.572917][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.575295][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.595510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.599024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.601830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.621657][ T4303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.624095][ T4303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.629041][ T4303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.631578][ T4303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.637660][ T4300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.640055][ T4300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.642412][ T4300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.644791][ T4300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.861319][ T509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.864312][ T509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.901119][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.958023][ T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.960278][ T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.963251][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.018148][ T509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.020525][ T509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.032992][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.037858][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.040170][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.043229][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.087963][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.090260][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.093201][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.102872][ T4394] loop1: detected capacity change from 0 to 128 [ 43.114459][ T4394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.122198][ T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.124515][ T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.151089][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.304767][ T4302] EXT4-fs (loop1): unmounting filesystem. [ 43.453643][ T4404] loop3: detected capacity change from 0 to 512 [ 43.484220][ T4404] EXT4-fs: Ignoring removed orlov option [ 43.491866][ T4404] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 43.509636][ T4404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 43.538825][ T4404] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.9: corrupted in-inode xattr [ 43.543071][ T4404] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.9: couldn't read orphan inode 15 (err -117) [ 43.548839][ T4404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.641227][ T4303] EXT4-fs (loop3): unmounting filesystem. [ 43.693044][ T4413] loop1: detected capacity change from 0 to 1024 [ 43.726569][ T4413] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.729336][ T4413] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.732760][ T4413] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.13: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.747019][ T4413] EXT4-fs (loop1): 1 orphan inode deleted [ 43.748608][ T4413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.836255][ T4417] binder: 4415:4417 tried to acquire reference to desc 0, got 1 instead [ 43.838770][ T4417] binder: 4415:4417 ioctl c0306201 200003c0 returned -14 [ 43.842169][ T4417] binder: 4415:4417 got transaction with invalid offsets ptr [ 43.844308][ T4417] binder: 4415:4417 transaction call to 4415:0 failed 5/29201/-22, size 4216-24 line 3585 [ 43.929360][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.040069][ T4424] loop4: detected capacity change from 0 to 1024 [ 44.065600][ T4309] Bluetooth: hci3: command 0x040f tx timeout [ 44.067626][ T4309] Bluetooth: hci2: command 0x040f tx timeout [ 44.671410][ T4424] hfsplus: request for non-existent node 65536 in B*Tree [ 44.673587][ T4424] hfsplus: request for non-existent node 65536 in B*Tree [ 44.676451][ T4424] hfsplus: failed to load root directory [ 44.681553][ T4309] Bluetooth: hci0: command 0x040f tx timeout [ 44.683231][ T4309] Bluetooth: hci4: command 0x040f tx timeout [ 44.712281][ T4302] EXT4-fs (loop1): unmounting filesystem. [ 44.762295][ T4420] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.002181][ T4429] binder: 4428:4429 tried to acquire reference to desc 0, got 1 instead [ 45.031189][ T4429] binder: 4428:4429 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.036652][ T4429] binder: 4429 RLIMIT_NICE not set [ 45.038212][ T4429] binder: 4429 RLIMIT_NICE not set [ 45.747253][ T4429] binder: 4428:4429 got reply transaction with bad transaction stack, transaction 10 has target 4428:4429 [ 45.750487][ T4429] binder: 4428:4429 transaction reply to 0:0 failed 11/29201/-71, size 0-0 line 2970 [ 45.780028][ T4344] binder: release 4428:4429 transaction 10 out, still active [ 45.782453][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 45.795893][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.805731][ T4344] binder: release 4428:4429 transaction 10 in, still active [ 45.808274][ T4344] binder: send failed reply for transaction 10, target dead [ 46.106286][ T4307] Bluetooth: hci2: command 0x0419 tx timeout [ 46.108246][ T4307] Bluetooth: hci3: command 0x0419 tx timeout [ 46.737409][ T4309] Bluetooth: hci4: command 0x0419 tx timeout [ 46.919567][ T4309] Bluetooth: hci0: command 0x0419 tx timeout [ 47.047720][ T4465] loop3: detected capacity change from 0 to 2048 [ 47.048896][ T177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.070215][ T4465] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.074990][ T4462] loop0: detected capacity change from 0 to 1024 [ 47.126466][ T4462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.230059][ T177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.240072][ T4469] loop4: detected capacity change from 0 to 256 [ 47.254666][ T4469] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.264608][ T4469] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 47.284830][ T4303] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 47.286358][ T4469] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 47.289543][ T4303] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 47.302050][ T4309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.306270][ T4309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.309038][ T4309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.312385][ T4309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.315123][ T4309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 47.318228][ T4312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.378514][ T177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.541878][ T177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.177950][ T4470] chnl_net:caif_netlink_parms(): no params data found [ 49.375888][ T4307] Bluetooth: hci1: command 0x0409 tx timeout [ 50.233004][ T4521] loop1: detected capacity change from 0 to 512 [ 50.246135][ T4307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.249417][ T4307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.252077][ T4307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.255619][ T4309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.259746][ T4309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.261890][ T4309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.307681][ T4521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.311259][ T4521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.370179][ T4521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c099, mo2=0082] [ 50.372447][ T4521] System zones: 1-12 [ 50.396945][ T4521] EXT4-fs (loop1): 1 truncate cleaned up [ 50.398560][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.438164][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.445695][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.456652][ T4470] device bridge_slave_0 entered promiscuous mode [ 50.507638][ T4302] EXT4-fs (loop1): unmounting filesystem. [ 50.556208][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.559559][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.562573][ T4470] device bridge_slave_1 entered promiscuous mode [ 50.672148][ T4470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.674938][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 50.689902][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 50.770409][ T4520] loop4: detected capacity change from 0 to 32768 [ 50.782135][ T4520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.41 (4520) [ 50.820639][ T4470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.835067][ T4520] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.838243][ T4520] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 50.840620][ T4520] BTRFS info (device loop4): using free space tree [ 50.957073][ T4560] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 50.963285][ T4470] team0: Port device team_slave_0 added [ 50.968431][ T4470] team0: Port device team_slave_1 added [ 51.094745][ T4520] BTRFS info (device loop4): enabling ssd optimizations [ 51.133027][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.135105][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.161502][ T4470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.212615][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.214624][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.234639][ T4470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.292515][ T4300] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.326022][ T4519] chnl_net:caif_netlink_parms(): no params data found [ 51.457574][ T4309] Bluetooth: hci1: command 0x041b tx timeout [ 51.542266][ T4589] loop1: detected capacity change from 0 to 4096 [ 51.555583][ T4589] NILFS (loop1): unrecognized mount option "p±'L7žS#L7Öaşöršaşń.ĺď Ëmv™nbMíÖ—?Ö6®S»a­ţŹŻłk†ŤŮŮ•˙äK>ŰSÍľvuáĄkŞ(°ĺ>=™wńI’´éŕňmđőčz°"7\çfÜł°9­ĄŤ÷Vţçťç‡-°ÓźĺWůď޲ĆaëěÖOSiWůĚĂń8ÂxŻßďY^<Ń챞ݎ# Ëń…nőŰázlT·úÇĎĹnőĄś—×áD·â{:" [ 51.708294][ T4589] overlayfs: failed to get inode (-116) [ 51.712310][ T4589] overlayfs: failed to get inode (-116) [ 52.085367][ T4598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 52.755798][ C0] sched: RT throttling activated [ 52.790634][ T4309] Bluetooth: hci3: command 0x0409 tx timeout [ 53.750440][ T4309] Bluetooth: hci1: command 0x040f tx timeout [ 54.327680][ T4470] device hsr_slave_0 entered promiscuous mode [ 54.477432][ T4470] device hsr_slave_1 entered promiscuous mode [ 54.528777][ T4470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.530917][ T4470] Cannot create hsr debugfs directory [ 54.542484][ T4614] netlink: 165 bytes leftover after parsing attributes in process `syz.4.58'. [ 54.713751][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.716002][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.718690][ T4519] device bridge_slave_0 entered promiscuous mode [ 54.817654][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 55.429521][ T4634] loop4: detected capacity change from 0 to 512 [ 55.463902][ T4634] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 55.725055][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.727373][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.730056][ T4519] device bridge_slave_1 entered promiscuous mode [ 55.741464][ T4636] netlink: 'syz.0.62': attribute type 1 has an invalid length. [ 55.759600][ T4643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 55.775953][ T4309] Bluetooth: hci1: command 0x0419 tx timeout [ 55.792687][ T4519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.798956][ T4519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.869962][ T177] device hsr_slave_0 left promiscuous mode [ 55.904486][ T177] device hsr_slave_1 left promiscuous mode [ 55.917507][ T4648] loop4: detected capacity change from 0 to 4096 [ 55.941925][ T4648] NILFS (loop4): unrecognized mount option "p±'L7žS#L7Öaşöršaşń.ĺď Ëmv™nbMíÖ—?Ö6®S»a­ţŹŻłk†ŤŮŮ•˙äK>ŰSÍľvuáĄkŞ(°ĺ>=™wńI’´éŕňmđőčz°"7\çfÜł°9­ĄŤ÷Vţçťç‡-°ÓźĺWůď޲ĆaëěÖOSiWůĚĂń8ÂxŻßďY^<Ń챞ݎ# Ëń…nőŰázlT·úÇĎĹnőĄś—×áD·â{:" [ 56.033241][ T4648] overlayfs: failed to get inode (-116) [ 56.035017][ T4648] overlayfs: failed to get inode (-116) [ 56.102112][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.104348][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.110801][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.112933][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.187067][ T4654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'. [ 56.211132][ T177] device bridge_slave_1 left promiscuous mode [ 56.319646][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.628485][ T177] device bridge_slave_0 left promiscuous mode [ 56.647067][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.895890][ T4312] Bluetooth: hci3: command 0x040f tx timeout [ 56.925755][ T4659] loop1: detected capacity change from 0 to 256 [ 56.956730][ T4659] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.959782][ T4659] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 56.981644][ T4659] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 57.693615][ T177] device veth1_macvtap left promiscuous mode [ 57.695586][ T177] device veth0_macvtap left promiscuous mode [ 57.698108][ T177] device veth1_vlan left promiscuous mode [ 57.699853][ T177] device veth0_vlan left promiscuous mode [ 59.098564][ T4309] Bluetooth: hci3: command 0x0419 tx timeout [ 60.152171][ T4671] loop0: detected capacity change from 0 to 32768 [ 60.183631][ T4671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (4671) [ 60.210466][ T4671] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 60.216726][ T4671] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 60.222575][ T4671] BTRFS info (device loop0): using free space tree [ 60.304317][ T4671] BTRFS info (device loop0): enabling ssd optimizations [ 60.405483][ T4295] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.232518][ T4713] binder: 4712:4713 tried to acquire reference to desc 0, got 1 instead [ 61.243829][ T4713] binder: 4712:4713 got new transaction with bad transaction stack, transaction 16 has target 4712:0 [ 61.247117][ T4713] binder: 4712:4713 transaction call to 4712:0 failed 17/29201/-71, size 0-48 line 3114 [ 61.250679][ T4585] binder: release 4712:4713 transaction 16 out, still active [ 61.252823][ T4585] binder: undelivered TRANSACTION_COMPLETE [ 61.254560][ T4585] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.320238][ T4714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.76'. [ 61.949628][ T4585] binder: send failed reply for transaction 16, target dead [ 62.266757][ T4725] loop0: detected capacity change from 0 to 512 [ 63.044100][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.151814][ T4725] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.80: inode #64: comm syz.0.80: iget: illegal inode # [ 63.164431][ T177] team0 (unregistering): Port device team_slave_1 removed [ 63.168868][ T4725] EXT4-fs (loop0): Remounting filesystem read-only [ 63.170740][ T4725] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.80: error while reading EA inode 64 err=-117 [ 63.175245][ T4725] EXT4-fs (loop0): Remounting filesystem read-only [ 63.177488][ T4725] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.80: inode #64: comm syz.0.80: iget: illegal inode # [ 63.181640][ T4725] EXT4-fs (loop0): Remounting filesystem read-only [ 63.183525][ T4725] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.80: error while reading EA inode 64 err=-117 [ 63.189025][ T4725] EXT4-fs (loop0): Remounting filesystem read-only [ 63.267321][ T4725] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.80: invalid size [ 63.271963][ T4725] EXT4-fs (loop0): Remounting filesystem read-only [ 63.314827][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 63.327662][ T177] team0 (unregistering): Port device team_slave_0 removed [ 63.487676][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.510925][ T4743] loop0: detected capacity change from 0 to 1024 [ 63.547385][ T4743] JBD2: no valid journal superblock found [ 63.549308][ T4743] EXT4-fs (loop0): error loading journal [ 63.666604][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.497871][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499929][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.069419][ T177] bond0 (unregistering): Released all slaves [ 66.291962][ T4735] netlink: 'syz.4.81': attribute type 4 has an invalid length. [ 66.324962][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 66.329961][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 66.556282][ T4742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.567697][ T4519] team0: Port device team_slave_0 added [ 66.644967][ T4519] team0: Port device team_slave_1 added [ 66.734019][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.746863][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.756485][ T4519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.766439][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 66.781524][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.783592][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.799136][ T4519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.860404][ T4519] device hsr_slave_0 entered promiscuous mode [ 66.906169][ T4519] device hsr_slave_1 entered promiscuous mode [ 66.936294][ T4771] loop1: detected capacity change from 0 to 512 [ 66.946172][ T4519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.948331][ T4519] Cannot create hsr debugfs directory [ 66.975391][ T4470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.003423][ T4771] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 67.010340][ T4771] EXT4-fs (loop1): 1 truncate cleaned up [ 67.017639][ T4470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.023708][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.142585][ T4470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.206330][ T4771] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz.1.89: lblock 0 mapped to illegal pblock 4 (length 1) [ 67.220272][ T4771] EXT4-fs (loop1): Remounting filesystem read-only [ 67.914274][ T4470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.953298][ T4302] EXT4-fs (loop1): unmounting filesystem. [ 68.117764][ T4786] binder: 4785:4786 tried to acquire reference to desc 0, got 1 instead [ 68.122767][ T4786] binder: 4785:4786 ioctl c0306201 200003c0 returned -14 [ 68.143020][ T4786] binder: 4785:4786 got transaction with out-of-order buffer fixup [ 68.163564][ T4786] binder: 4785:4786 transaction call to 4785:0 failed 22/29201/-22, size 104-24 line 3461 [ 68.180299][ T4786] binder: 4785:4786 ioctl c0306201 200001c0 returned -14 [ 68.193277][ T4585] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.277328][ T4470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.313954][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.316801][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.352490][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.412271][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.415298][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.420376][ T4484] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.422379][ T4484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.441324][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.444167][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.459738][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.464523][ T4484] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.466636][ T4484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.473161][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.477239][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.482153][ T4519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.514630][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.519626][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.524720][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.533595][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.541711][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.823001][ T177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.831538][ T4519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.878614][ T4519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.907614][ T4519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.951291][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.954147][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.959640][ T4812] loop0: detected capacity change from 0 to 1024 [ 68.964837][ T4470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.969584][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.043425][ T177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.067178][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.069885][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.184079][ T177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.196280][ T4484] hfsplus: b-tree write err: -5, ino 8 [ 69.264786][ T4823] binder: 4822:4823 tried to acquire reference to desc 0, got 1 instead [ 69.272793][ T4823] binder: 4822:4823 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.306010][ T4823] binder: 4823 RLIMIT_NICE not set [ 69.307507][ T4823] binder: 4823 RLIMIT_NICE not set [ 69.309792][ T176] binder: release 4822:4823 transaction 27 out, still active [ 69.311840][ T176] binder: undelivered TRANSACTION_COMPLETE [ 69.376666][ T176] binder: release 4822:4823 transaction 27 in, still active [ 69.378776][ T176] binder: send failed reply for transaction 27, target dead [ 70.192076][ T7] cfg80211: failed to load regulatory.db [ 70.207807][ T177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.298841][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 70.351043][ T4519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.546237][ T4519] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.557799][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.560435][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.430818][ T4470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.431104][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.431584][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.431843][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.431892][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.432194][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.432317][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.432417][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.432832][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.433086][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.433122][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.433690][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.486024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.488941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.491801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.495311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.537435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.593173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.613493][ T4519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.632396][ T4519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.641170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.643775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.653463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.666632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.669285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.691849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.966678][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.968944][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.974711][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.993099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.996538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.104200][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.107788][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.111715][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.127033][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.131883][ T4470] device veth0_vlan entered promiscuous mode [ 72.193931][ T4470] device veth1_vlan entered promiscuous mode [ 72.234962][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.238770][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.241858][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.245714][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.320926][ T4470] device veth0_macvtap entered promiscuous mode [ 72.335408][ T4470] device veth1_macvtap entered promiscuous mode [ 72.358987][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.361916][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.364564][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.375850][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.378640][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.381456][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.384031][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.394612][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.399734][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.469094][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.471924][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.474639][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.477849][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.482148][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.485002][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.488253][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.491185][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.493769][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.497896][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.500600][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.503495][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.513517][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.576144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.579110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.586059][ T4470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.588504][ T4470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.590860][ T4470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.593146][ T4470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.623355][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.629729][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.735387][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.739438][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.807350][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.810073][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.824530][ T4519] device veth0_vlan entered promiscuous mode [ 72.834821][ T4519] device veth1_vlan entered promiscuous mode [ 72.919644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.922379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.924934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.929031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.970807][ T4519] device veth0_macvtap entered promiscuous mode [ 72.975738][ T4519] device veth1_macvtap entered promiscuous mode [ 72.992744][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.995187][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.001437][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.004701][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.008946][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.027868][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.030260][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.030555][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.036875][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.043552][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.046674][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.049410][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.052173][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.054833][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.058186][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.060881][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.063714][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.067872][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.070054][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.072698][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.075465][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.084171][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.089606][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.092351][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.095252][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.098341][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.101234][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.103907][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.108055][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.110711][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.113733][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.117927][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.443060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.446409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.452426][ T4519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.454826][ T4519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.460056][ T4519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.462598][ T4519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.274272][ T4901] mmap: syz.5.28 (4901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.623888][ T177] device hsr_slave_0 left promiscuous mode [ 74.656634][ T177] device hsr_slave_1 left promiscuous mode [ 74.766066][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.768234][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.770798][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.772878][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.775366][ T177] device bridge_slave_1 left promiscuous mode [ 74.777273][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.816831][ T177] device bridge_slave_0 left promiscuous mode [ 74.818737][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.996080][ T177] device veth1_macvtap left promiscuous mode [ 74.997841][ T177] device veth0_macvtap left promiscuous mode [ 74.999504][ T177] device veth1_vlan left promiscuous mode [ 75.001088][ T177] device veth0_vlan left promiscuous mode [ 76.879200][ T177] team0 (unregistering): Port device team_slave_1 removed [ 77.077909][ T177] team0 (unregistering): Port device team_slave_0 removed [ 77.277682][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.517363][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.041197][ T177] bond0 (unregistering): Released all slaves [ 80.266168][ T4656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.268518][ T4656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.286258][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.309863][ T4729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.312120][ T4729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.320190][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.464194][ T4309] Bluetooth: hci4: hardware error 0x09 [ 81.124442][ T4927] loop0: detected capacity change from 0 to 131072 [ 82.281029][ T4927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.314545][ T4927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.531702][ T4956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.104'. [ 82.544648][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 82.623360][ T4961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.102'. [ 82.746342][ T4309] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 83.626961][ T4964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.630222][ T4964] bond1: (slave bond2): Enslaving as an active interface with an up link [ 84.948255][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 85.014141][ T4958] bond1 (unregistering): (slave bond2): Releasing backup interface [ 85.188592][ T4958] bond1 (unregistering): Released all slaves [ 87.708823][ T4989] loop6: detected capacity change from 0 to 32768 [ 87.720953][ T5022] loop4: detected capacity change from 0 to 512 [ 87.724703][ T4989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.107 (4989) [ 87.742395][ T5022] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.745084][ T4989] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.750355][ T4989] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 87.754214][ T4989] BTRFS info (device loop6): using free space tree [ 87.759056][ T5022] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.124: invalid indirect mapped block 2185560079 (level 0) [ 87.767187][ T5022] EXT4-fs (loop4): Remounting filesystem read-only [ 87.771686][ T5022] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.124: invalid indirect mapped block 2683928664 (level 1) [ 87.902328][ T5022] EXT4-fs (loop4): Remounting filesystem read-only [ 87.906264][ T5022] EXT4-fs (loop4): 1 truncate cleaned up [ 87.908106][ T5022] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.809287][ T4989] BTRFS error (device loop6): open_ctree failed: -12 [ 88.870904][ T5022] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.124: unexpected EA_INODE flag [ 88.892234][ T5022] EXT4-fs (loop4): Remounting filesystem read-only [ 88.946965][ T5060] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.124: unexpected EA_INODE flag [ 88.956091][ T27] audit: type=1326 audit(88.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 88.962257][ T27] audit: type=1326 audit(88.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.043636][ T4914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (4914) [ 89.044617][ T27] audit: type=1326 audit(88.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.058730][ T27] audit: type=1326 audit(88.910:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.134590][ T27] audit: type=1326 audit(88.910:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.147507][ T5060] EXT4-fs (loop4): Remounting filesystem read-only [ 89.401368][ T27] audit: type=1326 audit(88.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.615813][ T27] audit: type=1326 audit(88.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.682966][ T5022] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.124: unexpected EA_INODE flag [ 89.792835][ T27] audit: type=1326 audit(88.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.824441][ T27] audit: type=1326 audit(88.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.850507][ T5022] EXT4-fs (loop4): Remounting filesystem read-only [ 89.871050][ T5067] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.124: unexpected EA_INODE flag [ 89.884793][ T27] audit: type=1326 audit(88.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5a7a8 code=0x7fc00000 [ 89.891309][ T5067] EXT4-fs (loop4): Remounting filesystem read-only [ 89.893295][ T5060] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.124: unexpected EA_INODE flag [ 91.400326][ T5060] EXT4-fs (loop4): Remounting filesystem read-only [ 91.402561][ T5073] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.124: unexpected EA_INODE flag [ 91.432368][ T5073] EXT4-fs (loop4): Remounting filesystem read-only [ 91.523605][ T5082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.160869][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 93.217004][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.138'. [ 93.227692][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.138'. [ 94.246227][ T5097] Zero length message leads to an empty skb [ 95.479181][ T5095] loop1: detected capacity change from 0 to 32768 [ 95.485534][ T5095] XFS: ikeep mount option is deprecated. [ 95.491765][ T5095] XFS: ikeep mount option is deprecated. [ 95.574574][ T5095] XFS (loop1): Mounting V5 Filesystem [ 95.682341][ T5095] XFS (loop1): Ending clean mount [ 95.892083][ T4302] XFS (loop1): Unmounting Filesystem [ 101.526215][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 105.468585][ T5314] device ip6tnl1 entered promiscuous mode [ 105.635622][ T5320] lo speed is unknown, defaulting to 1000 [ 105.652562][ T5320] lo speed is unknown, defaulting to 1000 [ 105.655082][ T5320] lo speed is unknown, defaulting to 1000 [ 105.771972][ T5051] lo speed is unknown, defaulting to 1000 [ 105.785893][ T5320] infiniband sz1: set active [ 105.787595][ T5320] infiniband sz1: added lo [ 105.868360][ T5320] RDS/IB: sz1: added [ 105.877123][ T5327] netlink: 'syz.4.179': attribute type 5 has an invalid length. [ 105.882343][ T5320] smc: adding ib device sz1 with port count 1 [ 105.884285][ T5320] smc: ib device sz1 port 1 has pnetid [ 105.899903][ T4342] lo speed is unknown, defaulting to 1000 [ 105.920069][ T5320] lo speed is unknown, defaulting to 1000 [ 106.928784][ T5320] lo speed is unknown, defaulting to 1000 [ 107.001593][ T4347] kernel write not supported for file bpf-prog (pid: 4347 comm: kworker/0:7) [ 107.192906][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 107.192942][ T27] audit: type=1326 audit(107.160:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7fc00000 [ 107.220729][ T5320] lo speed is unknown, defaulting to 1000 [ 107.267353][ T5354] loop6: detected capacity change from 0 to 256 [ 107.369571][ T5320] lo speed is unknown, defaulting to 1000 [ 107.463937][ T5320] lo speed is unknown, defaulting to 1000 [ 108.366358][ T27] audit: type=1326 audit(108.340:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5341 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9a35a7a8 code=0x7fc00000 [ 108.573143][ T5369] netlink: 'syz.5.191': attribute type 39 has an invalid length. [ 109.718308][ T5366] loop4: detected capacity change from 0 to 32768 [ 109.765351][ T5366] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.804147][ T5366] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 109.825887][ T5366] BTRFS info (device loop4): using free space tree [ 109.930896][ T4350] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.332117][ T5366] BTRFS info (device loop4): enabling ssd optimizations [ 111.443468][ T4312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.447980][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.455068][ T4312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.726527][ T4307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.850555][ T4350] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.151276][ T4307] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 112.155152][ T4307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.192583][ T5435] loop5: detected capacity change from 0 to 512 [ 112.194868][ T5435] EXT4-fs: inline encryption not supported [ 112.217387][ T5435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.203: inode #1: comm syz.5.203: iget: illegal inode # [ 112.226233][ T5435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.203: error while reading EA inode 1 err=-117 [ 112.240976][ T5435] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.246112][ T5435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.203: inode #1: comm syz.5.203: iget: illegal inode # [ 112.251646][ T5435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.203: error while reading EA inode 1 err=-117 [ 112.274037][ T4300] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.298270][ T5435] EXT4-fs (loop5): 1 orphan inode deleted [ 112.299948][ T5435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 112.498631][ T4350] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.105118][ T4913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4913) [ 114.176359][ T4470] EXT4-fs (loop5): unmounting filesystem. [ 114.256008][ T4309] Bluetooth: hci3: command 0x0409 tx timeout [ 114.351890][ T4350] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.134059][ T5419] lo speed is unknown, defaulting to 1000 [ 115.159915][ T5480] netlink: 'syz.4.211': attribute type 13 has an invalid length. [ 116.336142][ T4309] Bluetooth: hci3: command 0x041b tx timeout [ 117.335456][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.339045][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.421339][ T4307] Bluetooth: hci3: command 0x040f tx timeout [ 118.465040][ T5519] loop5: detected capacity change from 0 to 256 [ 118.474674][ T5519] ======================================================= [ 118.474674][ T5519] WARNING: The mand mount option has been deprecated and [ 118.474674][ T5519] and is ignored by this kernel. Remove the mand [ 118.474674][ T5519] option from the mount to silence this warning. [ 118.474674][ T5519] ======================================================= [ 118.537302][ T5519] FAT-fs (loop5): Directory bread(block 64) failed [ 118.539391][ T5519] FAT-fs (loop5): Directory bread(block 65) failed [ 118.546322][ T5519] FAT-fs (loop5): Directory bread(block 66) failed [ 118.548316][ T5519] FAT-fs (loop5): Directory bread(block 67) failed [ 118.556460][ T5519] FAT-fs (loop5): Directory bread(block 68) failed [ 118.558562][ T5519] FAT-fs (loop5): Directory bread(block 69) failed [ 118.560344][ T5519] FAT-fs (loop5): Directory bread(block 70) failed [ 118.562077][ T5519] FAT-fs (loop5): Directory bread(block 71) failed [ 118.563860][ T5519] FAT-fs (loop5): Directory bread(block 72) failed [ 118.565640][ T5519] FAT-fs (loop5): Directory bread(block 73) failed [ 118.700399][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.730935][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.623293][ T4309] Bluetooth: hci3: command 0x0419 tx timeout [ 120.704498][ T5480] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.711947][ T5480] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.714391][ T5480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.717342][ T5480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.402651][ T5499] device wlan1 entered promiscuous mode [ 121.428591][ T5533] loop4: detected capacity change from 0 to 2048 [ 121.469042][ T5533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.175659][ T5563] loop1: detected capacity change from 0 to 2048 [ 123.222013][ T5563] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 123.224272][ T5563] UDF-fs: Scanning with blocksize 512 failed [ 123.263601][ T5563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.775365][ T5551] loop0: detected capacity change from 0 to 8192 [ 123.801414][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 123.837085][ T5419] chnl_net:caif_netlink_parms(): no params data found [ 123.884920][ T5551] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.884975][ T5551] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 123.885662][ T5551] REISERFS (device loop0): using ordered data mode [ 123.885677][ T5551] reiserfs: using flush barriers [ 123.906064][ T5551] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.906393][ T5551] REISERFS (device loop0): checking transaction log (loop0) [ 124.067529][ T5576] syz.4.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 124.847289][ T5576] loop4: detected capacity change from 0 to 1024 [ 125.055504][ T5551] REISERFS (device loop0): Using tea hash to sort names [ 125.057228][ T5584] loop5: detected capacity change from 0 to 256 [ 125.059931][ T5584] exfat: Deprecated parameter 'namecase' [ 125.065363][ T5551] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 125.393846][ T5551] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 125.750814][ T5584] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 125.881381][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.883575][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.891449][ T5419] device bridge_slave_0 entered promiscuous mode [ 125.907995][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.910197][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.912822][ T5419] device bridge_slave_1 entered promiscuous mode [ 125.928336][ T5419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.932836][ T5419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.959880][ T5419] team0: Port device team_slave_0 added [ 125.965162][ T5419] team0: Port device team_slave_1 added [ 125.979254][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.981311][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.988913][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.990752][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.023107][ T5419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.332867][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.342071][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.354172][ T5419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.933830][ T5419] device hsr_slave_0 entered promiscuous mode [ 128.140750][ T5419] device hsr_slave_1 entered promiscuous mode [ 128.176074][ T5419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.178123][ T5419] Cannot create hsr debugfs directory [ 128.832557][ T5623] loop4: detected capacity change from 0 to 2048 [ 128.926493][ T5623] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 128.928656][ T5623] UDF-fs: Scanning with blocksize 512 failed [ 128.980711][ T5623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.683748][ T5629] loop0: detected capacity change from 0 to 2048 [ 129.711298][ T5614] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 129.752810][ T5629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.763201][ T5635] loop5: detected capacity change from 0 to 8192 [ 129.808200][ T5635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.812484][ T5635] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 129.815275][ T5635] REISERFS (device loop5): using ordered data mode [ 129.830006][ T5635] reiserfs: using flush barriers [ 129.832010][ T5635] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.832114][ T5635] REISERFS (device loop5): checking transaction log (loop5) [ 129.854391][ T5618] sch_tbf: burst 9987 is lower than device lo mtu (65550) ! [ 130.063987][ T5635] REISERFS (device loop5): Using tea hash to sort names [ 130.064284][ T5635] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 130.064314][ T5635] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 130.228348][ T5654] loop1: detected capacity change from 0 to 1024 [ 130.307832][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 130.384472][ T5658] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 130.399680][ T5661] loop0: detected capacity change from 0 to 128 [ 130.411122][ T5661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.429449][ T5661] process 'syz.0.247' launched '/dev/fd/3' with NULL argv: empty string added [ 130.564651][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 131.528371][ T5419] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.611451][ T5419] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 132.246512][ T5687] No such timeout policy "syz1" [ 132.497400][ T5419] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 133.617394][ T4307] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 133.620173][ T4307] Bluetooth: hci0: Injecting HCI hardware error event [ 133.623218][ T4309] Bluetooth: hci0: hardware error 0x00 [ 134.706732][ T5709] syz.1.256 uses obsolete (PF_INET,SOCK_PACKET) [ 134.766930][ T5419] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 135.638090][ T5727] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 135.774788][ T5732] loop1: detected capacity change from 0 to 1024 [ 136.024019][ T5738] loop1: detected capacity change from 0 to 8192 [ 136.052916][ T5738] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.066575][ T5738] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 136.074853][ T5738] REISERFS (device loop1): using ordered data mode [ 136.088600][ T5738] reiserfs: using flush barriers [ 136.097859][ T5738] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.128300][ T5738] REISERFS (device loop1): checking transaction log (loop1) [ 136.150170][ T5727] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 136.230308][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.336022][ T4309] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.357363][ T5419] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.359652][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.362107][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.396558][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.399400][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.402944][ T5747] loop4: detected capacity change from 0 to 128 [ 136.406678][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.408625][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.436203][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.481372][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.497111][ T5738] REISERFS (device loop1): Using tea hash to sort names [ 136.499443][ T5738] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 136.503104][ T5738] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.516591][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.520210][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.526464][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.528531][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.530909][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.535197][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.553619][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.591911][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.595049][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.615969][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.619113][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.622015][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.625629][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.632558][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.635322][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.699131][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.743201][ T5757] loop5: detected capacity change from 0 to 8 [ 136.769668][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 136.794791][ T4350] device hsr_slave_0 left promiscuous mode [ 137.341563][ T4350] device hsr_slave_1 left promiscuous mode [ 137.476258][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.478881][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.496377][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.546873][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.571197][ T4350] device bridge_slave_1 left promiscuous mode [ 137.573060][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.607992][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.610750][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.792665][ T5757] SQUASHFS error: Unable to read directory block [629:2b] [ 137.817939][ T5774] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 137.826609][ T4350] device bridge_slave_0 left promiscuous mode [ 137.828389][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.868038][ T5780] binder: 5779:5780 tried to acquire reference to desc 0, got 1 instead [ 138.873892][ T5780] binder: 5779:5780 got reply transaction with bad transaction stack, transaction 36 has target 5779:0 [ 138.892280][ T5780] binder: 5779:5780 transaction reply to 0:0 failed 37/29201/-71, size 0-0 line 2970 [ 138.904974][ T4347] binder: release 5779:5780 transaction 36 out, still active [ 138.908481][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.936106][ T4350] device veth1_macvtap left promiscuous mode [ 138.937816][ T4350] device veth0_macvtap left promiscuous mode [ 138.939505][ T4350] device veth1_vlan left promiscuous mode [ 138.941143][ T4350] device veth0_vlan left promiscuous mode [ 138.948211][ T4347] binder: send failed reply for transaction 36, target dead [ 139.160073][ T5792] loop4: detected capacity change from 0 to 512 [ 140.260131][ T5799] capability: warning: `syz.5.280' uses deprecated v2 capabilities in a way that may be insecure [ 140.264624][ T4309] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 140.268027][ T4309] Bluetooth: hci2: Injecting HCI hardware error event [ 140.273579][ T4307] Bluetooth: hci2: hardware error 0x00 [ 140.567070][ T5792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.385127][ T5822] binder: 5821:5822 tried to acquire reference to desc 0, got 1 instead [ 143.425303][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 143.515130][ T5442] binder: undelivered transaction 42, process died. [ 143.518559][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 143.635428][ T5808] loop5: detected capacity change from 0 to 32768 [ 143.662877][ T5831] loop4: detected capacity change from 0 to 16 [ 143.713790][ T5831] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.770936][ T5830] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 143.773723][ T5830] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 143.791712][ T5830] syz.4.287: attempt to access beyond end of device [ 143.791712][ T5830] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 143.796776][ T4632] kernel write not supported for file bpf-prog (pid: 4632 comm: kworker/0:9) [ 145.011820][ T5830] syz.4.287: attempt to access beyond end of device [ 145.011820][ T5830] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 145.015646][ T5830] syz.4.287: attempt to access beyond end of device [ 145.015646][ T5830] loop4: rw=524288, sector=67108880, nr_sectors = 16 limit=16 [ 145.455931][ T4307] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 146.849551][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 147.027764][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 147.286748][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.038034][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.191005][ T5868] loop1: detected capacity change from 0 to 512 [ 149.225012][ T5868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.438088][ T4302] EXT4-fs (loop1): unmounting filesystem. [ 149.503460][ T5873] loop1: detected capacity change from 0 to 4096 [ 149.510681][ T5873] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 149.562586][ T5873] ntfs3: loop1: Failed to load $Secure. [ 149.587575][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 151.270379][ T4350] bond0 (unregistering): Released all slaves [ 151.385606][ T5884] loop1: detected capacity change from 0 to 16 [ 151.390785][ T5884] erofs: (device loop1): mounted with root inode @ nid 36. [ 151.400905][ T5884] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 151.403426][ T5884] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 151.407065][ T5884] syz.1.302: attempt to access beyond end of device [ 151.407065][ T5884] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 151.412687][ T5884] syz.1.302: attempt to access beyond end of device [ 151.412687][ T5884] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 151.420941][ T5884] syz.1.302: attempt to access beyond end of device [ 151.420941][ T5884] loop1: rw=524288, sector=67108880, nr_sectors = 16 limit=16 [ 151.617527][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.631710][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.633895][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.661517][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'. [ 154.037300][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.040053][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.884530][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.887453][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.891965][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.894409][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.956162][ T5419] device veth0_vlan entered promiscuous mode [ 155.041710][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 155.820581][ T5419] device veth1_vlan entered promiscuous mode [ 155.830318][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.863091][ T5958] loop5: detected capacity change from 0 to 1024 [ 155.962209][ T5419] device veth0_macvtap entered promiscuous mode [ 155.968447][ T5958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 155.971600][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.974350][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.979062][ T5419] device veth1_macvtap entered promiscuous mode [ 156.175421][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.244677][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.752193][ T5969] loop0: detected capacity change from 0 to 512 [ 156.787301][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.790459][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.805157][ T5969] EXT4-fs: Ignoring removed i_version option [ 156.826292][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.836552][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.839312][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.842198][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.854931][ T5969] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.877623][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.183860][ T5977] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 623: comm syz.5.318: Attempting to read directory block (623) that is past i_size (638464) [ 158.680162][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.683031][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.687074][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.690002][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.692608][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.695345][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.701010][ T5419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.703854][ T5419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.707985][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.712170][ T5419] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.714555][ T5419] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.717009][ T5419] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.719341][ T5419] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.737315][ T5964] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 158.757425][ T4470] EXT4-fs (loop5): unmounting filesystem. [ 158.760457][ T5969] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.775669][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.784328][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.796224][ T5969] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 158.931852][ T5969] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.027393][ T5969] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 159.065387][ T5969] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 159.103594][ T5969] EXT4-fs (loop0): Remounting filesystem read-only [ 159.134111][ T5969] EXT4-fs (loop0): 1 truncate cleaned up [ 159.135715][ T5969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 159.213900][ T5969] EXT4-fs warning (device loop0): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 159.379364][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 159.455266][ T4680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.457737][ T4680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.466697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.407283][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.409827][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.422779][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.396091][ T6017] device ip6tnl2 entered promiscuous mode [ 161.404916][ T6021] loop7: detected capacity change from 0 to 512 [ 161.555928][ T6021] EXT2-fs (loop7): nobh option not supported [ 161.558760][ T6021] EXT2-fs (loop7): warning: mounting ext3 filesystem as ext2 [ 162.921634][ T6041] loop7: detected capacity change from 0 to 512 [ 162.926589][ T6041] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.972014][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 163.002645][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 163.010443][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 163.014140][ T6041] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 163.016741][ T6041] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 163.065295][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 163.114867][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 163.125854][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 163.189867][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 163.213269][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 163.231493][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 163.257132][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 163.262515][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 163.267925][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 163.276988][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 163.291796][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 163.293878][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 163.970148][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.045074][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 164.057307][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 164.073592][ T6056] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.118186][ T6056] EXT4-fs (loop7): Remounting filesystem read-only [ 164.120090][ T6056] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 164.139302][ T6060] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.164629][ T6060] EXT4-fs (loop7): Remounting filesystem read-only [ 164.187430][ T6060] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 164.192526][ T6056] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.228143][ T6056] EXT4-fs (loop7): Remounting filesystem read-only [ 164.230117][ T6056] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 164.245535][ T6074] loop0: detected capacity change from 0 to 1024 [ 164.266678][ T6041] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.271445][ T6074] EXT4-fs: Ignoring removed oldalloc option [ 164.274072][ T6041] EXT4-fs (loop7): Remounting filesystem read-only [ 164.286792][ T6041] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 164.310433][ T6060] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 4: comm syz.7.337: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.318807][ T6074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 164.417701][ T6060] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.337: error -117 reading directory block [ 165.374776][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 168.248144][ T6126] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.255174][ T6126] CIFS mount error: No usable UNC path provided in device string! [ 168.255174][ T6126] [ 168.258074][ T6126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 173.800754][ T4312] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 173.803753][ T4312] CPU: 0 PID: 4312 Comm: kworker/u5:8 Not tainted 6.1.141-syzkaller #0 [ 173.806003][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.808815][ T4312] Workqueue: hci1 hci_rx_work [ 173.810193][ T4312] Call trace: [ 173.811157][ T4312] dump_backtrace+0x1c8/0x1f4 [ 173.812454][ T4312] show_stack+0x2c/0x3c [ 173.813612][ T4312] __dump_stack+0x30/0x40 [ 173.814867][ T4312] dump_stack_lvl+0xf8/0x160 [ 173.816109][ T4312] dump_stack+0x1c/0x5c [ 173.817210][ T4312] sysfs_create_dir_ns+0x22c/0x24c [ 173.818611][ T4312] kobject_add_internal+0x5a8/0xb30 [ 173.820079][ T4312] kobject_add+0x134/0x1f8 [ 173.821305][ T4312] device_add+0x3f0/0xf94 [ 173.822546][ T4312] hci_conn_add_sysfs+0xbc/0x1cc [ 173.823944][ T4312] le_conn_complete_evt+0xa24/0xf8c [ 173.825427][ T4312] hci_le_conn_complete_evt+0x114/0x3f8 [ 173.826982][ T4312] hci_le_meta_evt+0x2c0/0x4a4 [ 173.828288][ T4312] hci_event_packet+0x6ac/0xf08 [ 173.829673][ T4312] hci_rx_work+0x324/0xaa0 [ 173.830913][ T4312] process_one_work+0x7f4/0x13a8 [ 173.832303][ T4312] worker_thread+0x8c8/0xfbc [ 173.833604][ T4312] kthread+0x250/0x2d8 [ 173.834728][ T4312] ret_from_fork+0x10/0x20 [ 173.848930][ T4312] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.852576][ T4312] Bluetooth: hci1: failed to register connection device [ 174.478083][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 174.480810][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 174.942845][ T4307] Bluetooth: hci1: command 0x0406 tx timeout [ 175.079285][ T6191] loop5: detected capacity change from 0 to 128 [ 175.125621][ T6191] FAT-fs (loop5): bogus logical sector size 0 [ 175.137949][ T6191] FAT-fs (loop5): Can't find a valid FAT filesystem [ 176.135274][ T4913] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.333585][ T6211] loop0: detected capacity change from 0 to 1024 [ 177.363760][ T6211] ext4: Unknown parameter 'fsmagic' [ 177.424585][ T4913] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.854742][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.858409][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.503302][ T6262] binder: 6261:6262 tried to acquire reference to desc 0, got 1 instead [ 179.507946][ T6262] binder: 6261:6262 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 179.511551][ T6262] binder: 6262 RLIMIT_NICE not set [ 179.516180][ T6262] binder: 6262 RLIMIT_NICE not set [ 179.518383][ T6262] binder: 6261:6262 got new transaction with bad transaction stack, transaction 53 has target 6261:6262 [ 179.521490][ T6262] binder: 6261:6262 transaction call to 6261:0 failed 54/29201/-71, size 0-48 line 3114 [ 179.530887][ T5442] binder: release 6261:6262 transaction 53 out, still active [ 179.532905][ T5442] binder: undelivered TRANSACTION_COMPLETE [ 179.534859][ T5442] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.591775][ T5442] binder: release 6261:6262 transaction 53 in, still active [ 179.593870][ T5442] binder: send failed reply for transaction 53, target dead [ 180.775697][ T6281] loop7: detected capacity change from 0 to 8 [ 181.188369][ T6281] SQUASHFS error: Failed to read block 0x4e8: -5 [ 181.191447][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.193687][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.195840][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.197927][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.199975][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.202001][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.204058][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.206145][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.208308][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.210448][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.212704][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.221260][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.223354][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.225578][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.227775][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.229938][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.232034][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.234108][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.236258][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.238343][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.240415][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.242735][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.244817][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.247024][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.249136][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.251180][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.253355][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.255507][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.257739][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.259834][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.262023][ T6281] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.426061][ T6365] loop5: detected capacity change from 0 to 512 [ 185.371469][ T6365] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 186.487858][ T6425] overlayfs: failed to clone lowerpath [ 186.536357][ T6425] 9pnet_fd: Insufficient options for proto=fd [ 186.748888][ T6437] loop0: detected capacity change from 0 to 1024 [ 186.751845][ T6437] EXT4-fs: Ignoring removed orlov option [ 187.816783][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.819035][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.312181][ T6437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.357326][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 188.362220][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 188.638608][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 190.641585][ T6472] loop5: detected capacity change from 0 to 512 [ 190.885000][ T6483] loop0: detected capacity change from 0 to 512 [ 191.732514][ T6483] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 192.474610][ T6507] loop5: detected capacity change from 0 to 512 [ 192.489509][ T6507] EXT2-fs (loop5): error: revision level too high, forcing read-only mode [ 192.686394][ T6507] EXT2-fs (loop5): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 193.273593][ T6515] loop7: detected capacity change from 0 to 1024 [ 193.276070][ T6515] EXT4-fs: Ignoring removed orlov option [ 193.407798][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 193.410347][ T6520] netlink: 'syz.0.431': attribute type 5 has an invalid length. [ 193.456432][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 193.461792][ T6520] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 193.464286][ T6520] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 193.474849][ T6520] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 193.479615][ T6520] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 193.482173][ T6520] device geneve2 entered promiscuous mode [ 193.484791][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 193.502589][ T6515] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 194.115940][ T6525] bridge1: port 1(ip6gretap1) entered blocking state [ 194.132236][ T6525] bridge1: port 1(ip6gretap1) entered disabled state [ 194.162717][ T6525] device ip6gretap1 entered promiscuous mode [ 194.577823][ T5419] EXT4-fs (loop7): unmounting filesystem. [ 195.532816][ T6536] device veth3 entered promiscuous mode [ 195.534585][ T6536] bridge1: port 2(veth3) entered blocking state [ 195.545912][ T6536] bridge1: port 2(veth3) entered disabled state [ 196.527414][ T6559] fuse: Unknown parameter 'fd18446744073709551615' [ 198.845950][ T27] audit: type=1326 audit(198.810:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 198.851804][ T27] audit: type=1326 audit(198.810:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 198.910546][ T27] audit: type=1326 audit(198.880:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 198.967574][ T27] audit: type=1326 audit(198.880:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 199.029068][ T27] audit: type=1326 audit(198.880:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 199.088113][ T27] audit: type=1326 audit(198.880:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 199.185736][ T27] audit: type=1326 audit(198.900:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 199.373948][ T27] audit: type=1326 audit(198.900:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 199.467652][ T6591] loop0: detected capacity change from 0 to 512 [ 200.203217][ T6591] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 200.220012][ T6591] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 200.238335][ T27] audit: type=1326 audit(198.900:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 200.304296][ T27] audit: type=1326 audit(198.900:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a7a8 code=0x7ffc0000 [ 201.448379][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.448'. [ 201.450984][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.448'. [ 204.355471][ T6638] tipc: Failed to remove unknown binding: 66,1,1/0:1661278336/1661278338 [ 204.362498][ T6638] tipc: Failed to remove unknown binding: 66,1,1/0:1661278336/1661278338 [ 204.365086][ T6638] tipc: Failed to remove unknown binding: 66,1,1/0:1661278336/1661278338 [ 204.451136][ T6641] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 204.499286][ T6641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.591718][ T6646] tipc: Started in network mode [ 204.593266][ T6646] tipc: Node identity ac1414aa, cluster identity 4711 [ 204.775080][ T6646] tipc: Enabled bearer , priority 10 [ 205.370438][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.458'. [ 205.393975][ T6644] device bond3 entered promiscuous mode [ 205.414595][ T6641] device ip6erspan0 entered promiscuous mode [ 205.423850][ T6641] bond3: (slave ip6erspan0): making interface the new active one [ 205.445744][ T6641] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 205.469319][ T6655] loop0: detected capacity change from 0 to 8 [ 205.479195][ T6646] tipc: Enabled bearer , priority 0 [ 206.531558][ T4347] tipc: Node number set to 2886997162 [ 207.074112][ T6681] syz.1.468 sent an empty control message without MSG_MORE. [ 210.237949][ T6712] ALSA: mixer_oss: invalid OSS volume '' [ 212.136739][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 212.875313][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.480'. [ 212.920819][ T6729] loop5: detected capacity change from 0 to 512 [ 212.927070][ T6726] tmpfs: Unknown parameter 'nolazytime˙˙' [ 212.959723][ T6729] EXT2-fs (loop5): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 212.996585][ T6729] EXT2-fs (loop5): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 214.474067][ T6740] loop0: detected capacity change from 0 to 128 [ 219.692609][ T6810] loop5: detected capacity change from 0 to 1024 [ 219.725619][ T6810] EXT4-fs: Ignoring removed nobh option [ 219.777099][ T6810] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.922410][ T6810] EXT4-fs (loop5): unmounting filesystem. [ 224.140228][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 225.097675][ T6905] tipc: Started in network mode [ 225.100869][ T6905] tipc: Node identity ac1414aa, cluster identity 4711 [ 226.291993][ T5441] tipc: Node number set to 2886997162 [ 226.361718][ T6905] tipc: Enabled bearer , priority 10 [ 226.375733][ T6905] tipc: Enabled bearer , priority 0 [ 226.388236][ T6916] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 226.503063][ T6916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.525543][ T6922] device ip6erspan0 entered promiscuous mode [ 226.725386][ T6922] bond1: (slave ip6erspan0): making interface the new active one [ 226.732067][ T6922] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 226.735043][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.517'. [ 226.743545][ T6925] device bond1 entered promiscuous mode [ 230.055003][ T6963] bridge0: port 3(vlan2) entered blocking state [ 230.067046][ T6963] bridge0: port 3(vlan2) entered disabled state [ 230.097533][ T6963] device vlan2 entered promiscuous mode [ 230.105912][ T6963] device bond0 entered promiscuous mode [ 230.110635][ T6963] device bond_slave_0 entered promiscuous mode [ 230.119626][ T6963] device bond_slave_1 entered promiscuous mode [ 232.327113][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 232.327125][ T27] audit: type=1326 audit(232.300:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.7.537" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x0 [ 236.256207][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 237.957737][ T7032] loop0: detected capacity change from 0 to 512 [ 238.015985][ T4307] Bluetooth: hci3: command 0x0406 tx timeout [ 238.164139][ T7032] EXT4-fs (loop0): 1 orphan inode deleted [ 238.174293][ T5508] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.192192][ T7032] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.194883][ T5508] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:19: Failed to release dquot type 1 [ 238.570039][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 238.571936][ T177] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.574656][ T177] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:3: Failed to release dquot type 1 [ 241.427430][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 243.273727][ T7104] loop0: detected capacity change from 0 to 1024 [ 244.009308][ T7104] EXT4-fs: Ignoring removed nobh option [ 244.010914][ T7104] EXT4-fs: Ignoring removed bh option [ 244.032057][ T7104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.118615][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.567'. [ 244.268549][ T7104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 245.016536][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 249.296909][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.298739][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.328421][ T7185] MPTCP: kernel_bind error, err=-98 [ 249.466491][ T7196] lo speed is unknown, defaulting to 1000 [ 249.472460][ T7196] lo speed is unknown, defaulting to 1000 [ 249.486684][ T7196] lo speed is unknown, defaulting to 1000 [ 249.504327][ T7196] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 249.679268][ T7196] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 249.758425][ T7196] lo speed is unknown, defaulting to 1000 [ 249.767216][ T7196] lo speed is unknown, defaulting to 1000 [ 249.771803][ T7196] lo speed is unknown, defaulting to 1000 [ 249.777152][ T7196] lo speed is unknown, defaulting to 1000 [ 249.781087][ T7196] lo speed is unknown, defaulting to 1000 [ 259.130360][ T7302] xt_nat: multiple ranges no longer supported [ 260.190738][ T7318] loop0: detected capacity change from 0 to 512 [ 260.611734][ T7318] EXT4-fs (loop0): 1 orphan inode deleted [ 260.613551][ T7318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.458403][ T5508] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 261.461277][ T5508] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:19: Failed to release dquot type 1 [ 263.356645][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 268.603598][ T7395] trusted_key: encrypted_key: insufficient parameters specified [ 269.211810][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.240977][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.246444][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.766347][ T7455] loop0: detected capacity change from 0 to 512 [ 272.779429][ T7455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.788937][ T7455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.828197][ T7455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.321384][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 277.432940][ T7503] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 279.467209][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 279.480215][ T7503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.484659][ T7503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.935554][ T7503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.956060][ T7503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.984962][ T7503] bond4: (slave geneve2): making interface the new active one [ 281.004629][ T7503] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 281.976790][ T7522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.979051][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 284.889249][ T7574] netlink: 96 bytes leftover after parsing attributes in process `syz.1.667'. [ 285.097925][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.670'. [ 285.102768][ T7586] netlink: 48 bytes leftover after parsing attributes in process `syz.7.670'. [ 285.213024][ T7589] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 285.943527][ T7598] fuse: Bad value for 'fd' [ 285.982872][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.7.673'. [ 286.452008][ T7624] Invalid option length (1047307) for dns_resolver key [ 291.491031][ T7665] loop0: detected capacity change from 0 to 1024 [ 291.817069][ T7661] Injecting memory failure for pfn 0x1389c2 at process virtual address 0x20000000 [ 291.960861][ T7665] EXT4-fs: Ignoring removed nobh option [ 291.962558][ T7665] EXT4-fs: inline encryption not supported [ 291.964175][ T7665] EXT4-fs: Ignoring removed bh option [ 291.968416][ T7665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.991585][ T7665] EXT4-fs: test_dummy_encryption requires encrypt feature [ 292.129088][ T7661] Memory failure: 0x1389c2: recovery action for dirty LRU page: Recovered [ 292.132482][ T7661] Injecting memory failure for pfn 0x1389c3 at process virtual address 0x20001000 [ 292.204767][ T7661] Memory failure: 0x1389c3: recovery action for dirty LRU page: Recovered [ 292.210791][ T7661] Injecting memory failure for pfn 0x1389c4 at process virtual address 0x20002000 [ 292.224256][ T7661] Memory failure: 0x1389c4: recovery action for dirty LRU page: Recovered [ 292.852892][ T7661] Injecting memory failure for pfn 0x1389c5 at process virtual address 0x20003000 [ 292.940764][ T7661] Memory failure: 0x1389c5: recovery action for dirty LRU page: Recovered [ 292.943134][ T7661] Injecting memory failure for pfn 0x1389c6 at process virtual address 0x20004000 [ 292.957615][ T7661] Memory failure: 0x1389c6: recovery action for dirty LRU page: Recovered [ 292.970621][ T7661] Injecting memory failure for pfn 0x1389c7 at process virtual address 0x20005000 [ 292.987670][ T7661] Memory failure: 0x1389c7: recovery action for dirty LRU page: Recovered [ 292.990013][ T7661] Injecting memory failure for pfn 0x1389c8 at process virtual address 0x20006000 [ 292.992864][ T7661] Memory failure: 0x1389c8: recovery action for dirty LRU page: Recovered [ 292.995175][ T7661] Injecting memory failure for pfn 0x1389c9 at process virtual address 0x20007000 [ 293.028362][ T7661] Memory failure: 0x1389c9: recovery action for dirty LRU page: Recovered [ 293.036145][ T7661] Injecting memory failure for pfn 0x1389ca at process virtual address 0x20008000 [ 293.046195][ T7661] Memory failure: 0x1389ca: recovery action for dirty LRU page: Recovered [ 293.051427][ T7661] Injecting memory failure for pfn 0x1389cb at process virtual address 0x20009000 [ 293.062272][ T7661] Memory failure: 0x1389cb: recovery action for dirty LRU page: Recovered [ 293.064679][ T7661] Injecting memory failure for pfn 0x1389cc at process virtual address 0x2000a000 [ 293.087684][ T7661] Memory failure: 0x1389cc: recovery action for dirty LRU page: Recovered [ 293.090070][ T7661] Injecting memory failure for pfn 0x1389cd at process virtual address 0x2000b000 [ 293.210897][ T7661] Memory failure: 0x1389cd: recovery action for dirty LRU page: Recovered [ 293.217113][ T7661] Injecting memory failure for pfn 0x1389ce at process virtual address 0x2000c000 [ 293.220176][ T7661] Memory failure: 0x1389ce: recovery action for dirty LRU page: Recovered [ 293.222661][ T7661] Injecting memory failure for pfn 0x1221b7 at process virtual address 0x2000d000 [ 293.225258][ T7661] Memory failure: 0x1221b7: recovery action for dirty LRU page: Recovered [ 293.253558][ T7661] Injecting memory failure for pfn 0x13d3f0 at process virtual address 0x2000e000 [ 293.992370][ T7661] Memory failure: 0x13d3f0: recovery action for dirty LRU page: Recovered [ 293.994884][ T7661] Injecting memory failure for pfn 0x13c857 at process virtual address 0x2000f000 [ 294.013818][ T7661] Memory failure: 0x13c857: recovery action for dirty LRU page: Recovered [ 298.722386][ T7749] netlink: 76 bytes leftover after parsing attributes in process `syz.4.705'. [ 299.580342][ T7758] rdma_rxe: already configured on lo [ 300.060579][ T7757] tipc: Started in network mode [ 300.062056][ T7757] tipc: Node identity ac1414aa, cluster identity 4711 [ 300.241953][ T7757] tipc: Enabled bearer , priority 10 [ 300.287527][ T7770] device batadv0 entered promiscuous mode [ 300.289739][ T7770] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.292355][ T7770] device macvlan2 entered promiscuous mode [ 301.173080][ T7770] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 301.175963][ T5442] tipc: Node number set to 2886997162 [ 302.144227][ T7785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 302.243547][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 302.252920][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 302.301687][ T7788] xt_bpf: check failed: parse error [ 304.338776][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 304.496864][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.724'. [ 305.658712][ T27] audit: type=1326 audit(305.630:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.674942][ T27] audit: type=1326 audit(305.630:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.705882][ T27] audit: type=1326 audit(305.640:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.717666][ T27] audit: type=1326 audit(305.640:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.745631][ T27] audit: type=1326 audit(305.640:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.755755][ T27] audit: type=1326 audit(305.640:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff83358cd4 code=0x7ffc0000 [ 305.762544][ T27] audit: type=1326 audit(305.640:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.778921][ T27] audit: type=1326 audit(305.640:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.784851][ T27] audit: type=1326 audit(305.640:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 305.800055][ T27] audit: type=1326 audit(305.640:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a7a8 code=0x7ffc0000 [ 307.124997][ T7872] fuse: Bad value for 'fd' [ 309.842851][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'. [ 309.874194][ T7886] netlink: 'syz.4.742': attribute type 13 has an invalid length. [ 310.321656][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.323464][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.678771][ T7914] binder: 7912:7914 tried to acquire reference to desc 0, got 1 instead [ 311.682864][ T7914] binder: 7912:7914 got transaction with invalid data ptr [ 311.684975][ T7914] binder: 7912:7914 transaction async to 7912:0 failed 59/29201/-14, size 93-24 line 3342 [ 311.728562][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.343737][ T7941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 315.271995][ T7963] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 318.738006][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 319.020346][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 319.031056][ T7996] device vlan2 left promiscuous mode [ 319.034956][ T7996] device bond0 left promiscuous mode [ 319.041269][ T7996] device bond_slave_0 left promiscuous mode [ 319.045346][ T7996] device bond_slave_1 left promiscuous mode [ 319.145583][ T8002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.147767][ T8002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.149972][ T8002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.151883][ T8002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.155037][ T8002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.156980][ T8002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.160611][ T8002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.162439][ T8002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.165156][ T8002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.167070][ T8002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.677804][ T7996] device macvlan2 left promiscuous mode [ 319.681094][ T7996] bridge0: port 3(vlan2) entered disabled state [ 319.777985][ T7996] device bridge_slave_1 left promiscuous mode [ 319.780092][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.842066][ T7996] device bridge_slave_0 left promiscuous mode [ 319.844160][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.091748][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'. [ 320.243220][ T8014] could not allocate digest TFM handle sha1-ssse3 [ 321.499009][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.823429][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 331.823443][ T27] audit: type=1326 audit(329.680:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.7.797" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x0 [ 339.972763][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 341.676038][ T8226] netlink: 'syz.7.825': attribute type 4 has an invalid length. [ 341.730734][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'. [ 341.732503][ T8225] lo speed is unknown, defaulting to 1000 [ 341.815702][ T8225] lo speed is unknown, defaulting to 1000 [ 344.065229][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.830'. [ 345.615123][ T8268] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 345.636800][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.644166][ T8273] bond2: (slave gretap1): making interface the new active one [ 345.648165][ T8273] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 345.650559][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 348.419092][ T8304] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 354.166968][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.169251][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.171643][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.192440][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.477488][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 355.479766][ T8381] device bond3 left promiscuous mode [ 355.481409][ T8381] device ip6erspan0 left promiscuous mode [ 357.626234][ T8459] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 357.628325][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.672591][ T8459] vhci_hcd vhci_hcd.0: Device attached [ 357.688131][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 357.912597][ T8460] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 357.923761][ T6390] vhci_hcd: stop threads [ 357.925199][ T6390] vhci_hcd: release socket [ 357.928984][ T6390] vhci_hcd: disconnect device [ 359.083938][ T7] vhci_hcd: vhci_device speed not set [ 359.452575][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.888'. [ 360.191981][ T8492] tmpfs: Unknown parameter 'nolazytime˙˙' [ 361.941887][ T8513] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 362.129878][ T8513] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 362.648289][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.654968][ T6390] net_ratelimit: 1052 callbacks suppressed [ 362.654981][ T6390] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 362.661929][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 362.787906][ T6390] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 365.544964][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 365.563142][ T8547] tmpfs: Unknown parameter 'nolazytime˙˙' [ 368.495876][ T27] audit: type=1326 audit(368.430:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.502063][ T27] audit: type=1326 audit(368.430:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.532809][ T27] audit: type=1326 audit(368.430:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.629582][ T27] audit: type=1326 audit(368.430:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.635431][ T27] audit: type=1326 audit(368.430:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.641757][ T27] audit: type=1326 audit(368.430:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.674486][ T27] audit: type=1326 audit(368.430:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.680832][ T27] audit: type=1326 audit(368.430:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.690521][ T27] audit: type=1326 audit(368.430:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 368.696207][ T27] audit: type=1326 audit(368.430:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.7.911" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f5a7a8 code=0x7ffc0000 [ 370.086104][ T8612] lo speed is unknown, defaulting to 1000 [ 370.119609][ T8612] lo speed is unknown, defaulting to 1000 [ 371.603874][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 371.622081][ T8620] tmpfs: Unknown parameter 'nolazytime˙˙' [ 371.699198][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.700973][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.930472][ T8630] Unable to handle kernel paging request at virtual address dfff800000000068 [ 372.942933][ T8630] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 372.962837][ T8630] Mem abort info: [ 372.967148][ T8630] ESR = 0x0000000096000006 [ 372.971147][ T8630] EC = 0x25: DABT (current EL), IL = 32 bits [ 372.992984][ T8630] SET = 0, FnV = 0 [ 373.001984][ T8630] EA = 0, S1PTW = 0 [ 373.005583][ T8630] FSC = 0x06: level 2 translation fault [ 373.014397][ T8630] Data abort info: [ 373.024624][ T8630] ISV = 0, ISS = 0x00000006 [ 373.031861][ T8630] CM = 0, WnR = 0 [ 373.043891][ T8630] [dfff800000000068] address between user and kernel address ranges [ 373.049407][ T8630] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 373.051410][ T8630] Modules linked in: [ 373.052472][ T8630] CPU: 1 PID: 8630 Comm: syz.5.923 Not tainted 6.1.141-syzkaller #0 [ 373.054614][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.057261][ T8630] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 373.059407][ T8630] pc : find_match+0xa0/0xb0c [ 373.060673][ T8630] lr : find_match+0x74/0xb0c [ 373.061906][ T8630] sp : ffff800020f16fc0 [ 373.063067][ T8630] x29: ffff800020f16fe0 x28: 1fffe00018180784 x27: dfff800000000000 [ 373.065168][ T8630] x26: 0000000000000340 x25: ffff0000c0c03c37 x24: 0000000000000201 [ 373.067343][ T8630] x23: 0000000000000040 x22: ffff0000c0c03c20 x21: 000000000000001e [ 373.069598][ T8630] x20: 1fffe00018180786 x19: 0000000000000000 x18: 0000000000000000 [ 373.071833][ T8630] x17: 0000000000000000 x16: ffff8000082d0750 x15: 0000000000000002 [ 373.073987][ T8630] x14: 000000000000c0fe x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 373.076163][ T8630] x11: ff0080001077fb04 x10: 0000000000000002 x9 : ffff0000c33e8000 [ 373.078384][ T8630] x8 : 0000000000000068 x7 : ffff800020f17370 x6 : 0000000000000040 [ 373.080611][ T8630] x5 : ffff800020f17370 x4 : ffff800020f17360 x3 : 0000000000000040 [ 373.082830][ T8630] x2 : 000000000000001e x1 : 0000000000000000 x0 : 0000000000000000 [ 373.084962][ T8630] Call trace: [ 373.085855][ T8630] find_match+0xa0/0xb0c [ 373.087051][ T8630] rt6_nh_find_match+0xcc/0x138 [ 373.088394][ T8630] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 373.089929][ T8630] __find_rr_leaf+0x3b8/0x5c8 [ 373.091270][ T8630] fib6_table_lookup+0x308/0x8b8 [ 373.092660][ T8630] fib6_nh_init+0xd74/0x19cc [ 373.093925][ T8630] ip6_route_info_create+0x7b0/0xf7c [ 373.095447][ T8630] ip6_route_add+0x34/0x158 [ 373.096662][ T8630] ipv6_route_ioctl+0x2b4/0x3d0 [ 373.098061][ T8630] inet6_ioctl+0x2d0/0x360 [ 373.099235][ T8630] sock_do_ioctl+0xf8/0x240 [ 373.100486][ T8630] sock_ioctl+0x5c4/0x840 [ 373.101750][ T8630] __arm64_sys_ioctl+0x14c/0x1c8 [ 373.103100][ T8630] invoke_syscall+0x98/0x2bc [ 373.104359][ T8630] el0_svc_common+0x138/0x258 [ 373.105693][ T8630] do_el0_svc+0x58/0x13c [ 373.106914][ T8630] el0_svc+0x58/0x138 [ 373.108016][ T8630] el0t_64_sync_handler+0x84/0xf0 [ 373.109426][ T8630] el0t_64_sync+0x18c/0x190 [ 373.110696][ T8630] Code: 96055809 f94002c8 910d011a d343ff48 (387b6908) [ 373.112663][ T8630] ---[ end trace 0000000000000000 ]--- [ 373.641421][ T8630] Kernel panic - not syncing: Oops: Fatal exception [ 373.643484][ T8630] SMP: stopping secondary CPUs [ 373.644919][ T8630] Kernel Offset: disabled [ 373.646286][ T8630] CPU features: 0x080000,02070084,26017203 [ 373.648086][ T8630] Memory Limit: none [ 374.178547][ T8630] Rebooting in 86400 seconds..