last executing test programs: 4m7.33619758s ago: executing program 0 (id=8): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 4m7.191012278s ago: executing program 0 (id=11): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500000000000000a6688a52d1c0f9c0e32582f22b02eee3dd6f3e151df9e697aa28d77fe0ce37a21f0aabb1d133d0335cc238914f61e59f4b54b921592472ee9ce5bfaa7296ac43fa591285f7e86d833547a08d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 4m6.257111423s ago: executing program 0 (id=17): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) close(0x3) r1 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 4m5.396593523s ago: executing program 0 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000400)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@test_dummy_encryption_v1}, {@nodiscard}, {@nomblk_io_submit}, {@nodioread_nolock}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) 4m5.310302848s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x441, 0x800000a, r3, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) 4m0.489308519s ago: executing program 0 (id=58): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x1004010, &(0x7f0000000180)=ANY=[], 0xfc, 0x60ba, &(0x7f0000000200)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000056, &(0x7f0000000080), 0x1, 0x571, &(0x7f0000000240)="$eJzs3ctrXNUfAPDvncn0/fs1hVJURAIurNROmsRHBRd1rcWC7uuQ3IaSSadkJqWJBduFXUtxIxbEvbh2WfwHXPg3FLRQpARduIncyb15daaZtNMkdT4fuOWc+8i5Z879np4zZ4YJYGCNZP+UIl6OiK+TiKMRkeTHhiI/OLJy3tKjG5PZlsTy8qd/Ju3zsnzxt4rrDueZlyLil68iTpUeL7e5sDhTq9fTuTw/2pq9OtpcWDx9ebY2nU6nV8YnJs6+MzH+/nvv9q2ub174+9tP7pXz3LE7SZyLI3lufT2ewc31mZEYyV+TSpzbdOJYHwrbS5KOe3/a8ftge8p5nFci6wOORjmPeuC/78uIWAYGVLLt+P+t8nzuBNhZ7UHAvnwwkM/vd3VAssMefrgyASre21ir/9DKeyNxoD03OrSUbJgZZfPd4T6Un5Xx8x9372Rb9O99CIAt3bwVEWeGhh7v/5K8/3t6Z3o4Z3MZ+j/YOfey8c9bncY/pdXxT3QY/xzuELtPY+v4Lz3oQzFdZeO/D6Jz/XPD5Tz3v/aYr5JculxPs77t/xFxMir7s/z69ZyDm8o4u3R/uVv568d/2ZaVX4wF8/t4MLR/4zVTtVbtWetdeHgr4pWO499ktf2TDu2fvR4XeizjRHr3tW7Htq7/87X8Q8QbHdt/bUUrefL65Gj7eRgtnorH/XX7xK/dyt/t+mftf+jJ9R9O1q/XNrdfxvcH/kljdT15ow31j96f/33JZ+10MXW9Xmu15sYi9iUfr+4vFfvH164t8sX5Wf1Pvv7k/q/T85/F+Oc91v/28R9f7XZsL7T/VMf2X53dbmr/7Sfuf/TFd93K763/e7udOpnv6aX/6/UGn+W1AwAAAAAAgL2mFBFHIilVV9OlUrW68vmO43GoVG80W6cuNeavTEX7u7LDUSkVK91H130eYixfMSzy45vyExFxLCK+KR9s56uTjfrUblceAAAAAAAAAAAAAAAAAAAA9ojDXb7/n/m9vNt3Bzx3fvIbBteW8d+PX3oC9iT//8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAH114fz5bFteenRjMstPXVuYn2lcOz2VNmeqs/OT1cnG3NXqdKMxXU+rk43Zrf5evdG4OjYe89dHW2mzNdpcWLw425i/0rp4ebY2nV5MKztSKwAAAAAAAAAAAAAAAAAAAHixNBcWZ2r1ejon8UIlyrEnbmOuuTC03auS3b9nia0Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCafwMAAP//yqIuDQ==") inotify_init1(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xa, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 4m0.46554519s ago: executing program 32 (id=58): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x1004010, &(0x7f0000000180)=ANY=[], 0xfc, 0x60ba, &(0x7f0000000200)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000056, &(0x7f0000000080), 0x1, 0x571, &(0x7f0000000240)="$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") inotify_init1(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xa, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 2m56.186216648s ago: executing program 5 (id=396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.092709893s ago: executing program 5 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="8871a3", 0x3}], 0x1}, 0x240480c3) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000001, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 2m55.734714614s ago: executing program 5 (id=399): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x33}}, 0x81, 0xff}, 0x90) 2m54.528374805s ago: executing program 5 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 2m52.607591437s ago: executing program 5 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2m51.750833487s ago: executing program 5 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) close_range(r0, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m36.245738511s ago: executing program 33 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) close_range(r0, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6.34832002s ago: executing program 4 (id=1193): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000040)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.636399742s ago: executing program 3 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x6}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.561946826s ago: executing program 2 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 5.465917222s ago: executing program 6 (id=1197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 5.455321363s ago: executing program 1 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5.428508584s ago: executing program 4 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf31}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x23}}]}, 0x28}}, 0x0) 4.881491386s ago: executing program 3 (id=1200): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x8c, 0x8000, 0x6, 0x1, 0x65e, 0x7, 0x7, r5}, &(0x7f0000000040)=0x20) 3.856965456s ago: executing program 6 (id=1201): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030", @ANYBLOB], 0xb8}}, 0x4000) 3.856364816s ago: executing program 4 (id=1202): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket(0x400000000010, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast2, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.855647326s ago: executing program 2 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 3.807635938s ago: executing program 6 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 3.807198658s ago: executing program 4 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.44119028s ago: executing program 3 (id=1206): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.44046763s ago: executing program 1 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) 2.705442683s ago: executing program 2 (id=1208): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) 2.636638137s ago: executing program 3 (id=1209): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000016c0)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x5}, 0x40, 0x0, 0xfffe, 0xff, 0x16, 'syz0\x00', "3bb39a8a07b3feaf16953efd75b1ff75eebc346414225a05a088c83b395bdc2d", "2125a36bbf6428a077f21f2dbeb2b7a594288ce763348c2a7714049416caacaf", [{0x401, 0x5, {0x3, 0x8000}}, {0x1, 0x4, {0x2, 0x1}}, {0x6, 0xc, {0x0, 0x3ff}}, {0x82, 0x5f, {0x0, 0xfffffff0}}, {0x4, 0x7fff, {0x2, 0x2}}, {0x322, 0x40, {0x2, 0xfff}}, {0x7f3, 0xe, {0x1, 0x43b}}, {0x10, 0xe23c, {0x1, 0x4}}, {0x6, 0x1, {0x3, 0x9}}, {0x9, 0x3, {0x0, 0xa}}, {0xf747, 0x241f, {0x3, 0x8}}, {0x1000, 0x0, {0x3, 0x4}}, {0x0, 0x9, {0x0, 0x4278}}, {0x10, 0xffff, {0x0, 0x2}}, {0x8, 0x8001, {0x2}}, {0x2, 0xfd5, {0x0, 0x1ff}}, {0x1, 0xfff, {0x0, 0x2}}, {0x1, 0x101, {0x0, 0x7}}, {0x2, 0x714f, {0x0, 0x2}}, {0xc1, 0x3, {0x2, 0x5}}, {0x8571, 0x8f, {0x1, 0xa0000000}}, {0x0, 0x10, {0x3, 0x8}}, {0x20, 0x2, {0x2, 0xffffff08}}, {0x5, 0x401, {0x2, 0x3}}, {0x3, 0x85d8, {0x1}}, {0x2, 0x8001, {0x3, 0x80000000}}, {0x38, 0xf206, {0x2, 0xffff3870}}, {0x0, 0x7, {0x2, 0x5}}, {0x8, 0xff, {0x2, 0x1ff}}, {0x8, 0x5, {0x0, 0x5}}, {0x2, 0xfff9, {0x2, 0x1}}, {0x9891, 0x0, {0x1, 0x35}}, {0x4, 0x0, {0x1, 0xff}}, {0x200, 0x3, {0x0, 0x6200}}, {0x1, 0x7, {0x1, 0x7fffffff}}, {0x6b3, 0x2, {0x2, 0x2}}, {0x4, 0x1, {0x0, 0x7fffffff}}, {0x5, 0x3, {0x3, 0x1004}}, {0x3, 0x9, {0x0, 0xf}}, {0x7, 0x7, {0x3, 0xfffffff5}}]}}}, {{0x254, 0x1, {{0x1, 0x7ff}, 0x8, 0x2, 0x8, 0x7ff, 0x20, 'syz1\x00', "fa50e051d353528a1c5cb71327d13e243efb54f9958c541d29bed475df225784", "d72d42f7919a2ccc4d193f1627fc13b99ac575ea0a800f44c8351961b9259cc3", [{0xffff, 0xe32, {0x0, 0x7ff}}, {0xf9, 0x9, {0x3, 0x9}}, {0x0, 0x1, {0x0, 0x7}}, {0x80, 0xfff7, {0x3, 0x10001}}, {0x8, 0x8001, {0x3}}, {0x0, 0x6, {0x0, 0x8}}, {0x920f, 0x6, {0x2, 0x8001}}, {0x2, 0x200, {0x0, 0x5d}}, {0xb933, 0x8f1, {0x0, 0x1}}, {0x4, 0x81, {0x3, 0x9}}, {0xcdb, 0x2, {0x1, 0xc}}, {0x8000, 0x7ff, {0x3, 0xfffffffe}}, {0x5, 0x0, {0x0, 0x5}}, {0xffff, 0x5, {0x1, 0x8}}, {0x3, 0x9, {0x0, 0x1}}, {0xf21, 0x7ff, {0x3, 0x7}}, {0x3, 0x4, {0x0, 0x5}}, {0xc3, 0xa, {0x2, 0xffffffff}}, {0x9, 0x7, {0x1, 0x9}}, {0x1000, 0x4, {0x1, 0xe79}}, {0x100, 0xc, {0x2, 0xffffffff}}, {0x400, 0x8000, {0x3, 0xfffffffc}}, {0x4ecb, 0x10, {0x1, 0x3}}, {0x5, 0x6, {0x1, 0x7}}, {0x8, 0x5, {0x3, 0x5}}, {0x9, 0x9109, {0x2, 0x6}}, {0x5, 0x5, {0x3, 0x7fff}}, {0x4, 0x2, {0x0, 0x8}}, {0x1ff, 0x1, {0x0, 0x8e}}, {0x9, 0x144a, {0x3, 0x8}}, {0x2, 0x4b8d, {0x0, 0x7f}}, {0xf000, 0x9, {0x1, 0xe82}}, {0x9, 0x0, {0x3, 0xfffffb71}}, {0xe, 0x383, {0x0, 0x6}}, {0x1, 0x9, {0x3, 0x4}}, {0x7, 0xb2a, {0x1, 0x9}}, {0x4, 0x6, {0x0, 0x6}}, {0x3ff, 0x0, {0x1, 0x7}}, {0x80, 0x10, {0x0, 0x4}}, {0x8, 0xf0a5, {0x2, 0x4}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x6}, 0x4004) fallocate(0xffffffffffffffff, 0x10, 0xfffffffffffffffc, 0xac9a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.540878253s ago: executing program 6 (id=1210): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x6, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc9119f992e83de525e4a40e81692d09dc6b6b0ef1", 0x28, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xda, 0x6, @remote}, 0x14) 2.489367206s ago: executing program 1 (id=1211): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.228231161s ago: executing program 4 (id=1212): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000040)=0x1f) 2.220397291s ago: executing program 3 (id=1213): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000100), 0x0}, 0x20) 1.070082748s ago: executing program 2 (id=1214): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.068788049s ago: executing program 3 (id=1215): bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230c001400", @ANYRES32=r4, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x200480d5}, 0x0) 1.033236261s ago: executing program 1 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r3, 0xfffffffffffffff5, 0x1) 922.326377ms ago: executing program 2 (id=1217): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000100)={[{@fat=@dmask={'dmask', 0x3d, 0x6}}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@fat=@nfs}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@utf8}, {@fat=@nfs_stale_rw}, {@numtail}]}, 0x2a, 0x356, &(0x7f0000000780)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x20, 0x0, 0x6, "f08039ad6674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x26, 0x34c, &(0x7f0000001740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 921.022427ms ago: executing program 4 (id=1218): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={r5, 0x324}, 0x8) 845.419551ms ago: executing program 6 (id=1219): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 71.300457ms ago: executing program 1 (id=1220): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 30.407509ms ago: executing program 6 (id=1221): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = io_uring_setup(0x494e, &(0x7f00000002c0)={0x0, 0xe28f, 0x8, 0x0, 0x65}) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9, 0x0, r0}, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000500)='\a', &(0x7f0000000480)=@tcp=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.586581ms ago: executing program 1 (id=1222): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$eJzs3c+LG2UYwPEnu7PZZEs3OYiiIPugF70Mu6tnJUgL4oJl24itIEy7Ew0Zk2UmRCLiriev4s1/QLD0WPBQUG+e9uKtXrx4ci+CoEXEkfnx5ldnN9k0JWn7/UCbJ3nfJ/O+ySQ8b9i8OX73y48atcCuOW1ZKqjkRETuiZRlSYxccpGXDIfy8rk/7z5/+eq1tyo7Oxd2VS9WrryyrarrG99//GnRSrrdWZWj8vvHUvjt6OmjZ4//u/JhPdB6oM1WWx293vq17Vz3XN2rBw1b9ZLnOoGr9Wbg+kl7K2mvea39/a46zb3za/u+GwTqNLvacLvabmnb76rzgVNvqm3ben4ta7iPscIUOdWbu7tOZcoD3pgyD7P2TxiGpzT7fsVZFrGL97VUbz7UcQEAgIU0Uv9/bWqEsiz1CspcuhbIx/HwMiCq/03ca+nX/7de+LF97p3b62n9fyffr/+lbOr/V39J0obq/+joM6//vx25fn9F9Mg7OEvnB6r/sRg2hl+Rv/dX7Kmo/o9eDb0V/efv3dqMA+p/AAAAAAAAAAAAAAAAAAAAAAAeBffCsBSGYclcmn/9rxCk18219IvGq/MZLmbshOe/992v3vmAx9Llq9ekEG/cYa2LeF90qp1qcpm2m46bUpJ/4/MhlWw4cRg3aqQsP3gHnepKmrAc/18RUfHElS0pSXkoP44vvrlzYUsTSX58/INONWetRfk1qcf521KSp7LztzPz8/LSiwP5tpTk5xvSEk/20vcxk//Zluobb++M5Bfjfllef7hPCQAAAAAAM2erFtLlc3l4/Zus321bNas9WsvL4Po8+XzgJ8lYn29mrs+t0nPWfOcOAAAAAMCTIsh/0nA8z/WD7olBUcb1MX8NNNJkyZh7jgJrgj5Dwd04WDmtz/LADCe953z6CxqTDsMPujLxmE3w16pkPphmC9foFrMpsVfIflQnDMz8J+hcOOtT4AdLZ5+76wcb0Xh0qukMBPHHRjlLTuojl6LAPKQPdqwkMDvnjuv8zFff/D3dIXLprr2DTa/dNmfAqem5kVsOx5y0f4Th2PGsZL9bfDfNj8wAAAAAWBCm6C8G8x4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPrlnsjjYumPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEXxfwAAAP//3RHskQ==") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c757466382c00c686dcc61a339255aaa76420c8c424db3c1339e528df2219ac3c0bc1e29d4d297bd457b47f230ae905dcc992ea60d614d13525d6b39ed99cc32fb16f7bbc6d4109d7db08e9355cd3d2d31136bd458b41cc1f965abd948802718f125b7c394c53eafdf096e17380b4bc297c66e70145e2e44274e41cfaf97f93268479be0eca9244b04384665d20cb8cdbc5c5d74600f04aa994741ec3770324330d4b2146b45f974feb9b1f7b641fe77a90d3c90126fb747bd60269db11c6ee269b6de27cf8ae875a392e9180803219389350fcfee3ed285b2b4a02056201c499d1bdeb8ee008a58ef356649d6c"], 0x4, 0xc24, &(0x7f0000000d00)="$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") r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 2 (id=1223): socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x23, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xfffffffc, 0x13b}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x2b76, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 25] fuse: Bad value for 'fd' [ 31.384906][ T4533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.402537][ T4533] device bond_slave_0 entered promiscuous mode [ 31.403552][ T4533] device bond_slave_1 entered promiscuous mode [ 31.404890][ T4533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 31.406975][ T4533] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 31.489164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 31.528172][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 31.538182][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 31.538199][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 31.539091][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 32.004066][ T4545] loop2: detected capacity change from 0 to 256 [ 32.015562][ T4545] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 32.099689][ T27] audit: type=1326 audit(32.090:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.2.40" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177368 code=0x0 [ 32.598762][ T4554] ptrace attach of "./syz-executor exec"[4321] was attempted by "./syz-executor exec"[4554] [ 32.911715][ T4558] device syzkaller0 entered promiscuous mode [ 33.608429][ T4329] Bluetooth: hci4: command 0x0419 tx timeout [ 33.608792][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 33.609393][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 33.611717][ T4335] Bluetooth: hci0: command 0x0419 tx timeout [ 34.614043][ T4588] Illegal XDP return value 65535 on prog (id 7) dev N/A, expect packet loss! [ 35.542184][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 35.706521][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.708399][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.709800][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.711603][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.713123][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.714401][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.870309][ T1607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.875683][ T4610] device syzkaller0 entered promiscuous mode [ 36.291217][ T1607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.294949][ T4607] chnl_net:caif_netlink_parms(): no params data found [ 36.311836][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.318010][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.319778][ T4607] device bridge_slave_0 entered promiscuous mode [ 36.322359][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.323959][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.325709][ T4607] device bridge_slave_1 entered promiscuous mode [ 36.339148][ T4607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.342303][ T4607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.355829][ T4607] team0: Port device team_slave_0 added [ 36.359875][ T4607] team0: Port device team_slave_1 added [ 36.375441][ T4632] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 36.399569][ T1607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.407216][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.410278][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.417295][ T4607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.420442][ T4634] binder: 4633:4634 tried to acquire reference to desc 0, got 1 instead [ 36.422593][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.425909][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.430856][ T4375] binder: release 4633:4634 transaction 5 out, still active [ 36.436020][ T4607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.452163][ T4636] binder: BINDER_SET_CONTEXT_MGR already set [ 36.453328][ T4636] binder: 4635:4636 ioctl 4018620d 20000100 returned -16 [ 36.459405][ T4636] binder: BINDER_SET_CONTEXT_MGR already set [ 36.460468][ T4636] binder: 4635:4636 ioctl 4018620d 200002c0 returned -16 [ 36.462000][ T4636] binder: 4635:4636 got transaction to invalid handle, 1 [ 36.463586][ T4636] binder: 4636:4635 cannot find target node [ 36.464487][ T4636] binder: 4635:4636 transaction async to 0:0 failed 7/29201/-22, size 104-24 line 3045 [ 36.466825][ T4636] binder: 4635:4636 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.469069][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 36.470232][ T4636] binder: 4636 RLIMIT_NICE not set [ 36.490752][ T1607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.498059][ T4375] binder: send failed reply for transaction 5, target dead [ 36.549619][ T4607] device hsr_slave_0 entered promiscuous mode [ 36.588307][ T4607] device hsr_slave_1 entered promiscuous mode [ 36.651956][ T4607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.653175][ T4607] Cannot create hsr debugfs directory [ 36.662189][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 36.825704][ T4607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.861948][ T4607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.899799][ T4607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.939235][ T4607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.076039][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.089050][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.090587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.097301][ T4607] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.106396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.108159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.109594][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.110698][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.112772][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.120875][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.122801][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.124194][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.125390][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.131318][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.136284][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.139175][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.141351][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.143193][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.148613][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.153970][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.164389][ T4607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.166017][ T4607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.285067][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.331958][ T4673] loop1: detected capacity change from 0 to 1024 [ 37.342298][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.344012][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.345590][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.347011][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.359066][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.371844][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.431666][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 37.723763][ T4607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.097401][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 38.110402][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.112055][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.126890][ T4701] netlink: 'syz.2.76': attribute type 6 has an invalid length. [ 38.129273][ T4701] netlink: 'syz.2.76': attribute type 7 has an invalid length. [ 38.130696][ T4701] netlink: 52 bytes leftover after parsing attributes in process `syz.2.76'. [ 38.232659][ T4716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.536153][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.537610][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.564036][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.565485][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.716982][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.067903][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.070380][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.166881][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.169055][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.491139][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.493268][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.500701][ T4607] device veth0_vlan entered promiscuous mode [ 39.509189][ T4607] device veth1_vlan entered promiscuous mode [ 39.517833][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.519593][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.521085][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.522610][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.536020][ T4607] device veth0_macvtap entered promiscuous mode [ 39.543345][ T4607] device veth1_macvtap entered promiscuous mode [ 39.549612][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.551507][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.553207][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.554991][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.556666][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.562418][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.581039][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.582768][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.584424][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.586077][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.589051][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.591259][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.593085][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.594776][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.596427][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.598440][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.600201][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.601767][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.603609][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.605193][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.606940][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.612259][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.613635][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.615217][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.616829][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.619949][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.621582][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.623157][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.625981][ T4607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.708305][ T4607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.710034][ T4607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.715795][ T4607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.312070][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 40.418415][ T4800] binder: 4799:4800 tried to acquire reference to desc 0, got 1 instead [ 40.419854][ T4800] binder: 4799:4800 got transaction with invalid data ptr [ 40.421014][ T4800] binder: 4799:4800 transaction async to 4799:0 failed 12/29201/-14, size 0-24 line 3333 [ 40.423068][ T4800] binder: 4799:4800 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.424938][ T4800] binder: 4800 RLIMIT_NICE not set [ 40.474994][ T4800] binder: 4800 RLIMIT_NICE not set [ 40.476561][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.477581][ T4376] binder: release 4799:4803 transaction 13 out, still active [ 40.478953][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 41.418962][ T4816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.420139][ T4816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.428830][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.431382][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.432719][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.434014][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.722084][ T4798] loop2: detected capacity change from 0 to 32768 [ 41.725508][ T4798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.93 (4798) [ 41.762945][ T4798] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.764680][ T4798] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 41.765987][ T4798] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 41.767514][ T4798] BTRFS info (device loop2): trying to use backup root at mount time [ 41.769139][ T4798] BTRFS info (device loop2): using free space tree [ 41.823662][ T39] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 41.827585][ T4798] BTRFS warning (device loop2): couldn't read tree root [ 41.830687][ T4798] BTRFS warning (device loop2): try to load backup roots slot 1 [ 41.833461][ T4753] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 41.837590][ T4798] BTRFS warning (device loop2): failed to read root (objectid=9): -5 [ 41.845838][ T4798] BTRFS warning (device loop2): try to load backup roots slot 2 [ 41.847342][ T39] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 41.852946][ T4798] BTRFS warning (device loop2): couldn't read tree root [ 41.854166][ T4798] BTRFS warning (device loop2): try to load backup roots slot 3 [ 41.856234][ T4798] BTRFS warning (device loop2): global root 2 0 already exists [ 41.857560][ T4798] BTRFS error (device loop2): failed to load root extent [ 41.897612][ T4798] BTRFS error (device loop2): open_ctree failed: -22 [ 41.927712][ T4311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4311) [ 42.338075][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 42.455504][ T1607] device hsr_slave_0 left promiscuous mode [ 42.480925][ T1607] device hsr_slave_1 left promiscuous mode [ 42.542677][ T4873] capability: warning: `syz.2.107' uses deprecated v2 capabilities in a way that may be insecure [ 42.868783][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.870089][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.875322][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.876408][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.878460][ T1607] device bridge_slave_1 left promiscuous mode [ 42.879850][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.205927][ T4890] Invalid ELF header magic: != ELF [ 43.419966][ T1607] device bridge_slave_0 left promiscuous mode [ 43.436610][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.718879][ T1607] device veth1_macvtap left promiscuous mode [ 43.719959][ T1607] device veth0_macvtap left promiscuous mode [ 43.721029][ T1607] device veth1_vlan left promiscuous mode [ 43.722347][ T1607] device veth0_vlan left promiscuous mode [ 44.021398][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 44.408026][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 46.939623][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 47.116572][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 47.278472][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.508908][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.854729][ T4953] loop2: detected capacity change from 0 to 2048 [ 48.876278][ T4953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.886641][ T4953] EXT4-fs (loop2): resizing filesystem from 256 to 0 blocks [ 48.887878][ T4953] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 49.056378][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 49.149103][ T1607] bond0 (unregistering): Released all slaves [ 49.446465][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 50.096221][ T4978] block nbd4: shutting down sockets [ 50.156044][ T4997] netlink: 'syz.4.134': attribute type 11 has an invalid length. [ 50.175490][ T4997] netlink: 'syz.4.134': attribute type 11 has an invalid length. [ 50.273955][ T5001] device gretap0 entered promiscuous mode [ 50.305774][ T4998] device vlan2 entered promiscuous mode [ 50.401361][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 50.980100][ T27] audit: type=1326 audit(50.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.079158][ T27] audit: type=1326 audit(50.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.178356][ T27] audit: type=1326 audit(51.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.198037][ T27] audit: type=1326 audit(51.010:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.231038][ T27] audit: type=1326 audit(51.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.552868][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 51.556511][ T27] audit: type=1326 audit(51.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.563153][ T27] audit: type=1326 audit(51.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.568508][ T27] audit: type=1326 audit(51.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.573871][ T27] audit: type=1326 audit(51.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 51.599222][ T27] audit: type=1326 audit(51.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77368 code=0x7fc00000 [ 52.703624][ T5056] netlink: 182 bytes leftover after parsing attributes in process `syz.3.147'. [ 55.782141][ T5145] device ipip0 entered promiscuous mode [ 56.512464][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 56.825753][ T5170] loop4: detected capacity change from 0 to 256 [ 56.832155][ T5170] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.834391][ T5170] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 56.837741][ T5170] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d) [ 57.093582][ T5179] binder: 5178:5179 tried to acquire reference to desc 0, got 1 instead [ 57.096273][ T5179] binder: 5178:5179 got transaction with invalid data ptr [ 57.097386][ T5179] binder_debug: 2 callbacks suppressed [ 57.097395][ T5179] binder: 5178:5179 transaction async to 5178:0 failed 19/29201/-14, size 22-0 line 3565 [ 57.101847][ T4847] binder: undelivered TRANSACTION_COMPLETE [ 57.102909][ T4847] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.111349][ T4847] binder: undelivered transaction 18, process died. [ 57.122890][ T5181] loop5: detected capacity change from 0 to 128 [ 57.160977][ T5181] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 57.162778][ T5181] FAT-fs (loop5): Filesystem has been set read-only [ 57.178191][ T4607] FAT-fs (loop5): Invalid FSINFO signature: 0x74616676, 0x00000000 (sector = 1) [ 57.289771][ T5197] tipc: Failed to remove unknown binding: 66,0,0/0:341418573/341418575 [ 57.291320][ T5197] tipc: Failed to remove unknown binding: 66,0,0/0:341418573/341418574 [ 57.293255][ T5197] tipc: Failed to remove unknown binding: 66,0,0/0:341418573/341418575 [ 57.294517][ T5197] tipc: Failed to remove unknown binding: 66,0,0/0:341418573/341418574 [ 57.399963][ T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0) [ 57.414352][ T5208] binder: 5207:5208 tried to acquire reference to desc 0, got 1 instead [ 57.417178][ T5208] binder: 5207:5208 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.420236][ T5208] binder: 5208 RLIMIT_NICE not set [ 57.422160][ T7] binder: undelivered TRANSACTION_COMPLETE [ 57.445855][ T5211] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 57.447747][ T5211] EXT4-fs (loop5): unable to read superblock [ 57.542703][ T5217] netlink: 'syz.2.195': attribute type 10 has an invalid length. [ 57.658094][ T5217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.528257][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 60.528270][ T27] audit: type=1326 audit(60.480:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.206" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x0 [ 60.559981][ T5242] loop4: detected capacity change from 0 to 32768 [ 60.564105][ T5242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.202 (5242) [ 60.587343][ T5242] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.600137][ T5262] loop2: detected capacity change from 0 to 512 [ 60.603613][ T5242] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 60.604989][ T5242] BTRFS info (device loop4): allowing degraded mounts [ 60.606034][ T5242] BTRFS info (device loop4): enabling auto defrag [ 60.607013][ T5242] BTRFS info (device loop4): using free space tree [ 60.623479][ T5262] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 12 [ 60.745937][ T5242] BTRFS info (device loop4): enabling ssd optimizations [ 60.990210][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 60.993324][ T5296] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.994624][ T5296] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.996044][ T5296] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.997427][ T5296] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.000477][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 61.079581][ T4332] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.600786][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 61.604534][ T5319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.864101][ T5317] cgroup: No subsys list or none specified [ 61.891983][ T5324] loop5: detected capacity change from 0 to 4096 [ 61.981285][ T5324] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.989602][ T5324] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.009608][ T5330] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.299675][ T5334] overlayfs: missing 'workdir' [ 62.422320][ T27] audit: type=1326 audit(62.410:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.425911][ T27] audit: type=1326 audit(62.410:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.431778][ T27] audit: type=1326 audit(62.410:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.434962][ T27] audit: type=1326 audit(62.410:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9915a32c code=0x7ffc0000 [ 62.447201][ T27] audit: type=1326 audit(62.410:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9915a32c code=0x7ffc0000 [ 62.451455][ T27] audit: type=1326 audit(62.410:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.454891][ T27] audit: type=1326 audit(62.410:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.461109][ T27] audit: type=1326 audit(62.410:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.464891][ T27] audit: type=1326 audit(62.410:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 62.584673][ T5339] loop4: detected capacity change from 0 to 32768 [ 62.594312][ T5339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.219 (5339) [ 62.603507][ T5339] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.605245][ T5339] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 62.607057][ T5339] BTRFS info (device loop4): allowing degraded mounts [ 62.608852][ T5339] BTRFS info (device loop4): enabling auto defrag [ 62.610004][ T5339] BTRFS info (device loop4): using free space tree [ 63.229629][ T5339] BTRFS info (device loop4): enabling ssd optimizations [ 63.783300][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 63.859333][ T5382] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 63.921198][ T5382] device bond1 entered promiscuous mode [ 63.924316][ T5382] device bridge1 entered promiscuous mode [ 63.990439][ T4332] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.489726][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490809][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.523388][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 64.549390][ T5412] device veth3 entered promiscuous mode [ 64.551181][ T5412] bridge1: port 1(veth3) entered blocking state [ 64.552353][ T5412] bridge1: port 1(veth3) entered disabled state [ 64.555107][ T5412] bridge1: port 1(veth3) entered blocking state [ 64.556114][ T5412] bridge1: port 1(veth3) entered forwarding state [ 64.564091][ T5414] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 64.623044][ T5412] device veth5 entered promiscuous mode [ 64.624720][ T5412] bridge1: port 2(veth5) entered blocking state [ 64.625977][ T5412] bridge1: port 2(veth5) entered disabled state [ 64.627704][ T5412] bridge1: port 2(veth5) entered blocking state [ 64.628762][ T5412] bridge1: port 2(veth5) entered forwarding state [ 64.631624][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.233'. [ 64.699147][ T5422] loop2: detected capacity change from 0 to 512 [ 64.705836][ T5422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.713764][ T5422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.734702][ T5422] EXT4-fs (loop2): 1 truncate cleaned up [ 64.735760][ T5422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.787008][ T5422] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.236: bit already cleared for inode 15 [ 64.802526][ T5422] EXT4-fs (loop2): Remounting filesystem read-only [ 64.815452][ T5023] bridge1: port 1(veth3) entered disabled state [ 64.817601][ T5023] bridge1: port 2(veth5) entered disabled state [ 64.880686][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 65.391800][ T5437] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 65.885537][ T5452] loop2: detected capacity change from 0 to 1024 [ 65.909542][ T5452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.513184][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 68.147299][ T5522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 68.586199][ T5535] loop4: detected capacity change from 0 to 1024 [ 68.605008][ T5535] EXT4-fs: Ignoring removed bh option [ 68.644011][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.770465][ T5559] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 69.721051][ T111] cfg80211: failed to load regulatory.db [ 69.759046][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 71.085655][ T5559] netlink: 'syz.2.265': attribute type 17 has an invalid length. [ 71.113276][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 74.337923][ C1] sched: RT throttling activated [ 85.323983][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.292'. [ 85.325496][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.477831][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.312958][ T5683] Bluetooth: MGMT ver 1.22 [ 86.355359][ T5685] loop5: detected capacity change from 0 to 1024 [ 86.402947][ T5685] ext4: Unknown parameter 'nojournal' [ 86.574753][ T5685] devpts: called with bogus options [ 87.541987][ T5731] loop1: detected capacity change from 0 to 256 [ 87.561166][ T5731] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 88.554233][ T5755] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 88.612672][ T5755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.614838][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 88.614845][ T27] audit: type=1326 audit(88.600:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.1.309" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x0 [ 88.970382][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 89.565310][ T5755] bond1: (slave gretap1): making interface the new active one [ 89.595101][ T5755] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 89.628334][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 91.736816][ T5845] loop1: detected capacity change from 0 to 256 [ 91.792310][ T5845] FAT-fs (loop1): Directory bread(block 64) failed [ 91.793577][ T5845] FAT-fs (loop1): Directory bread(block 65) failed [ 91.794763][ T5845] FAT-fs (loop1): Directory bread(block 66) failed [ 91.795876][ T5845] FAT-fs (loop1): Directory bread(block 67) failed [ 91.797084][ T5845] FAT-fs (loop1): Directory bread(block 68) failed [ 91.798224][ T5845] FAT-fs (loop1): Directory bread(block 69) failed [ 91.799308][ T5845] FAT-fs (loop1): Directory bread(block 70) failed [ 91.800326][ T5845] FAT-fs (loop1): Directory bread(block 71) failed [ 91.801372][ T5845] FAT-fs (loop1): Directory bread(block 72) failed [ 91.802431][ T5845] FAT-fs (loop1): Directory bread(block 73) failed [ 93.167169][ T5856] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 93.180994][ T5856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.216154][ T5856] bond2: (slave gretap1): making interface the new active one [ 93.220282][ T5856] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 93.221949][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 93.649224][ T5875] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 93.661805][ T5875] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.181108][ T5888] bond1: option mode: unable to set because the bond device has slaves [ 94.183128][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.216637][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.224095][ T5888] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 94.411738][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.413143][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.414462][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.415824][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.417033][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.418391][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.419714][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.421010][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.422201][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.423357][ T5902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 94.911552][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 95.930636][ T5934] loop4: detected capacity change from 0 to 8192 [ 95.963372][ T5940] loop1: detected capacity change from 0 to 512 [ 95.990281][ T5940] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.006252][ T5940] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.361: invalid indirect mapped block 2185560079 (level 0) [ 96.011155][ T5940] EXT4-fs (loop1): Remounting filesystem read-only [ 96.012879][ T5940] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.361: invalid indirect mapped block 2683928664 (level 1) [ 96.015613][ T5940] EXT4-fs (loop1): Remounting filesystem read-only [ 96.017259][ T5940] EXT4-fs (loop1): 1 truncate cleaned up [ 96.018254][ T5940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.049487][ T5940] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 96.049814][ T5934] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 96.051903][ T5934] FAT-fs (loop4): Filesystem has been set read-only [ 96.056881][ T5934] overlayfs: unrecognized mount option "mask=MAY_APPEND" or missing value [ 96.062160][ T5940] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 96.094476][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 96.184796][ T5955] loop4: detected capacity change from 0 to 512 [ 96.193209][ T5955] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 96.332488][ T5962] tipc: Started in network mode [ 96.336740][ T5962] tipc: Node identity 4, cluster identity 4711 [ 96.338891][ T5962] tipc: Node number set to 4 [ 96.902635][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 96.910264][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 97.022019][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 97.197752][ T5993] loop4: detected capacity change from 0 to 256 [ 97.207474][ T5993] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.210462][ T5993] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 97.230740][ T5993] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 97.423284][ T5999] loop1: detected capacity change from 0 to 16 [ 97.435858][ T5999] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.924458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.925797][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.875433][ T6030] tipc: Failed to remove unknown binding: 66,0,0/0:1247755782/1247755784 [ 99.876974][ T6030] tipc: Failed to remove unknown binding: 66,0,0/0:1247755782/1247755783 [ 99.881768][ T6030] tipc: Failed to remove unknown binding: 66,0,0/0:1247755782/1247755784 [ 99.884366][ T6030] tipc: Failed to remove unknown binding: 66,0,0/0:1247755782/1247755783 [ 100.522505][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 100.813490][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'. [ 100.855027][ T6063] binder: 6061:6063 tried to acquire reference to desc 0, got 1 instead [ 100.857289][ T6063] binder: 6061:6063 Release 1 refcount change on invalid ref 0 ret -22 [ 100.860516][ T4356] binder: release 6061:6063 transaction 29 out, still active [ 100.861965][ T4356] binder: undelivered TRANSACTION_COMPLETE [ 100.870387][ T4356] binder: send failed reply for transaction 29, target dead [ 100.914008][ T6065] loop1: detected capacity change from 0 to 512 [ 100.925269][ T6068] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 100.927225][ T6065] EXT4-fs: Ignoring removed bh option [ 100.945256][ T6065] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.948508][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.960329][ T6068] team0: Port device bond0 added [ 100.968820][ T6065] EXT4-fs (loop1): 1 truncate cleaned up [ 100.970911][ T6065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.034212][ T6075] overlayfs: failed to clone upperpath [ 101.130924][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 103.544947][ T6112] netlink: 'syz.3.419': attribute type 6 has an invalid length. [ 103.586893][ T6131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.426'. [ 103.596062][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.597378][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.617733][ T6131] netlink: 76 bytes leftover after parsing attributes in process `syz.1.426'. [ 103.619472][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.620586][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.621828][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.622942][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.635493][ T6131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.426'. [ 103.642134][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.643356][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.730756][ T6136] Injecting memory failure for pfn 0x135e4b at process virtual address 0x20003000 [ 103.733828][ T6136] Memory failure: 0x135e4b: Failed to invalidate [ 103.735394][ T6136] Memory failure: 0x135e4b: clean unevictable LRU page still referenced by 2 users [ 103.736961][ T6136] Memory failure: 0x135e4b: recovery action for clean unevictable LRU page: Failed [ 104.376592][ T6160] tipc: Enabling of bearer rejected, failed to enable media [ 104.390514][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.456706][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.459229][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.469754][ T6166] device vlan2 left promiscuous mode [ 104.688448][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 104.689827][ T6169] device bridge_slave_1 left promiscuous mode [ 104.690910][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.729095][ T6169] device bridge_slave_0 left promiscuous mode [ 104.730134][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.961347][ T6171] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 104.967520][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.974547][ T6171] team0: Failed to send port change of device bond0 via netlink (err -105) [ 104.976077][ T6171] team0: Failed to send options change via netlink (err -105) [ 104.977152][ T6171] team0: Port device bond0 added [ 105.954082][ T4849] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.957372][ T4849] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.981280][ T6200] loop4: detected capacity change from 0 to 4096 [ 105.982808][ T6200] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.107344][ T6210] device ip6gre1 entered promiscuous mode [ 106.138337][ T6200] EXT4-fs: Ignoring removed orlov option [ 106.140507][ T6200] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.457573][ T6200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.458348][ T6217] netlink: 'syz.1.450': attribute type 6 has an invalid length. [ 106.461023][ T6217] netlink: 'syz.1.450': attribute type 7 has an invalid length. [ 106.478142][ T6217] netlink: 52 bytes leftover after parsing attributes in process `syz.1.450'. [ 106.537543][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 107.528638][ T6243] fuse: Bad value for 'fd' [ 107.542474][ T6243] process 'syz.2.460' launched './file0' with NULL argv: empty string added [ 107.969648][ T6249] loop4: detected capacity change from 0 to 2048 [ 108.203813][ T6249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.811605][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 109.890942][ T6275] binder: 6274:6275 tried to acquire reference to desc 0, got 1 instead [ 109.893115][ T6275] binder_alloc: 6274: pid 6274 spamming oneway? 2 buffers allocated for a total size of 5120 [ 109.902146][ T4391] binder: undelivered transaction 41, process died. [ 109.903148][ T4391] binder: undelivered transaction 40, process died. [ 111.133616][ T6291] loop4: detected capacity change from 0 to 512 [ 111.160299][ T6291] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.477: invalid indirect mapped block 10 (level 1) [ 111.162564][ T6291] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.477: invalid indirect mapped block 8 (level 1) [ 111.169346][ T6291] EXT4-fs (loop4): 1 truncate cleaned up [ 111.170177][ T6291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.227113][ T6295] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 111.233951][ T6295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.255931][ T6295] bond2: (slave gretap1): making interface the new active one [ 111.265861][ T6295] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 111.267192][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 111.320832][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 111.377143][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 111.588098][ T6302] bond1: (slave batadv_slave_1): Releasing backup interface [ 112.454681][ T6320] net_ratelimit: 5266 callbacks suppressed [ 112.454697][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.456930][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.458361][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.459653][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.460926][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.462292][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.463646][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.464853][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.465986][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.467130][ T6320] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.793284][ T6352] loop1: detected capacity change from 0 to 512 [ 114.813397][ T6352] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.491: invalid block [ 114.817262][ T6352] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.491: invalid indirect mapped block 10 (level 1) [ 115.169482][ T6352] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.491: invalid indirect mapped block 8 (level 1) [ 115.173277][ T6352] EXT4-fs (loop1): 1 truncate cleaned up [ 115.174304][ T6352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.254446][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 116.079050][ T6367] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 116.084624][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.497'. [ 119.174454][ T6409] fuse: Bad value for 'fd' [ 119.328620][ T6412] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 119.343222][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.345035][ T6412] team0: Failed to send port change of device bond0 via netlink (err -105) [ 119.346649][ T6412] team0: Failed to send options change via netlink (err -105) [ 119.347855][ T6412] team0: Port device bond0 added [ 119.580297][ T6422] cgroup: No subsys list or none specified [ 120.594881][ T4329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.597200][ T4329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.601833][ T4329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.603922][ T4329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.605431][ T4329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.606644][ T4329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.746440][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 120.763060][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.764421][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.765887][ T6436] device bridge_slave_0 entered promiscuous mode [ 120.768681][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.770066][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.771634][ T6436] device bridge_slave_1 entered promiscuous mode [ 120.780043][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.782717][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.790869][ T6436] team0: Port device team_slave_0 added [ 120.792771][ T6436] team0: Port device team_slave_1 added [ 120.799850][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.801102][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.805418][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.807830][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.809256][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.813683][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.859278][ T6436] device hsr_slave_0 entered promiscuous mode [ 120.898154][ T6436] device hsr_slave_1 entered promiscuous mode [ 120.938111][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.940016][ T6436] Cannot create hsr debugfs directory [ 120.984801][ T6436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.019460][ T6436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.097417][ T6436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.454379][ T6459] cgroup: No subsys list or none specified [ 121.694438][ T6436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.653020][ T4335] Bluetooth: hci5: command 0x0409 tx timeout [ 122.910649][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.915167][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.922141][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.923578][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.924928][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.926478][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.932667][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.933753][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.002424][ T6486] loop4: detected capacity change from 0 to 512 [ 123.015914][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.017573][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.062269][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.162153][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.163451][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.237099][ T6486] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 12 [ 123.433528][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.569112][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.945743][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.956693][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.964095][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.965738][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.967396][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.097357][ T6436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.099128][ T6436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.430891][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.432527][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.434218][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.435762][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.437238][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.534547][ T6506] device syzkaller0 entered promiscuous mode [ 124.729137][ T4329] Bluetooth: hci5: command 0x041b tx timeout [ 124.807319][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.809948][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.449507][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.843202][ T6518] ptrace attach of "./syz-executor exec"[4330] was attempted by "./syz-executor exec"[6518] [ 125.959965][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.962200][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.419279][ T6525] loop4: detected capacity change from 0 to 256 [ 126.435345][ T6525] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 126.657297][ T27] audit: type=1326 audit(126.640:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.4.536" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77368 code=0x0 [ 126.660955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.662736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.665119][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.666516][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.668809][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.670349][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.675101][ T6436] device veth0_vlan entered promiscuous mode [ 126.679964][ T6436] device veth1_vlan entered promiscuous mode [ 126.686757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.689386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.690877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.693732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.013394][ T4329] Bluetooth: hci5: command 0x040f tx timeout [ 127.150574][ T6436] device veth0_macvtap entered promiscuous mode [ 127.334961][ T6436] device veth1_macvtap entered promiscuous mode [ 127.340261][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.341894][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.343422][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.345116][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.346665][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.348463][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.350013][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.354392][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.356085][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.357865][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.377652][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.385161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.386840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.388455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.390082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.392704][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.394844][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.397547][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.403401][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.404873][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.407696][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.446355][ T6547] loop1: detected capacity change from 0 to 512 [ 127.450263][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.455105][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.456818][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.460859][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.462259][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.466928][ T6436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.469338][ T6436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.470666][ T6436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.472022][ T6436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.489422][ T6547] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 12 [ 127.576787][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.578265][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.580003][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.594335][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.595651][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.596977][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.533667][ T4391] kernel write not supported for file [eventfd] (pid: 4391 comm: kworker/0:7) [ 128.984136][ T6567] ptrace attach of "./syz-executor exec"[6436] was attempted by "./syz-executor exec"[6567] [ 129.234384][ T4329] Bluetooth: hci5: command 0x0419 tx timeout [ 132.932613][ T6615] loop6: detected capacity change from 0 to 512 [ 132.942117][ T6615] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 12 [ 133.306275][ T5688] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.312023][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 133.988656][ T6633] ptrace attach of "./syz-executor exec"[4332] was attempted by "./syz-executor exec"[6633] [ 135.287285][ T6646] loop6: detected capacity change from 0 to 256 [ 135.353720][ T6646] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.408734][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 136.740577][ T27] audit: type=1326 audit(136.730:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.6.566" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b377368 code=0x0 [ 137.166096][ T6678] loop4: detected capacity change from 0 to 1024 [ 137.680763][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.735126][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.767999][ T6711] ptrace attach of "./syz-executor exec"[4322] was attempted by "./syz-executor exec"[6711] [ 139.258058][ T6715] loop6: detected capacity change from 0 to 16 [ 139.273949][ T6715] erofs: (device loop6): mounted with root inode @ nid 36. [ 139.344998][ T6715] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 139.347054][ T6715] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 139.616203][ T6720] tipc: Enabled bearer , priority 0 [ 139.617704][ T6720] device syzkaller0 entered promiscuous mode [ 140.166872][ T6730] tipc: Resetting bearer [ 140.179311][ T6716] tipc: Resetting bearer [ 140.259847][ T6716] tipc: Disabling bearer [ 142.624785][ T6758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.816991][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 144.530685][ T6776] loop1: detected capacity change from 0 to 16 [ 144.643066][ T6776] erofs: (device loop1): mounted with root inode @ nid 36. [ 144.671950][ T6776] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 144.673706][ T6776] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 146.727958][ T6803] ptrace attach of "./syz-executor exec"[4322] was attempted by " [ 148.488277][ T4329] Bluetooth: hci1: command 0x0406 tx timeout [ 148.503605][ T4329] Bluetooth: hci4: command 0x0406 tx timeout [ 148.505505][ T4329] Bluetooth: hci0: command 0x0406 tx timeout [ 148.506515][ T4329] Bluetooth: hci2: command 0x0406 tx timeout [ 148.916005][ T6836] tipc: Enabled bearer , priority 10 [ 149.040677][ T6841] "syz.2.618" (6841) uses obsolete ecb(arc4) skcipher [ 149.689124][ T6852] ptrace attach of "./syz-executor exec"[6436] was attempted by " [ 150.101467][ T6858] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 150.885772][ T6875] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 150.887716][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.934174][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.935524][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.941272][ T6875] device bridge0 entered promiscuous mode [ 150.944918][ T6875] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.953073][ T6879] fuse: Bad value for 'fd' [ 150.967383][ T6877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.999189][ T6877] device veth0 entered promiscuous mode [ 151.003676][ T6877] bond3: (slave macvlan2): making interface the new active one [ 151.005392][ T6877] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 151.007014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 152.339853][ T6907] ptrace attach of "./syz-executor exec"[4321] was attempted by " [ 152.981469][ T6891] loop1: detected capacity change from 0 to 32768 [ 153.088629][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 153.391244][ T6891] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.393058][ T6891] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 153.397099][ T6891] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 153.401116][ T6891] BTRFS info (device loop1): trying to use backup root at mount time [ 153.405859][ T6891] BTRFS info (device loop1): using free space tree [ 153.412897][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 153.453991][ T1607] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 153.462040][ T6891] BTRFS warning (device loop1): couldn't read tree root [ 153.463298][ T6891] BTRFS warning (device loop1): try to load backup roots slot 1 [ 153.467726][ T4816] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 153.471852][ T6891] BTRFS warning (device loop1): failed to read root (objectid=9): -5 [ 153.473456][ T6891] BTRFS warning (device loop1): try to load backup roots slot 2 [ 153.475062][ T4816] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 153.480416][ T6891] BTRFS warning (device loop1): couldn't read tree root [ 153.481755][ T6891] BTRFS warning (device loop1): try to load backup roots slot 3 [ 153.483521][ T6891] BTRFS warning (device loop1): global root 2 0 already exists [ 153.484880][ T6891] BTRFS error (device loop1): failed to load root extent [ 153.540084][ T6891] BTRFS error (device loop1): open_ctree failed: -22 [ 153.574683][ T5688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5688) [ 153.579243][ T6923] netlink: 'syz.6.643': attribute type 10 has an invalid length. [ 153.580904][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.582139][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.597595][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.598852][ T6923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.600049][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.601101][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.608596][ T6923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.610654][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 153.642414][ T6946] binder: 6945:6946 tried to acquire reference to desc 0, got 1 instead [ 153.644664][ T6946] binder: 6945:6946 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.651104][ T6946] binder: 6946 RLIMIT_NICE not set [ 153.651896][ T6946] binder: 6946 RLIMIT_NICE not set [ 153.652818][ T6946] binder: 6946 RLIMIT_NICE not set [ 153.661707][ T4774] binder: undelivered TRANSACTION_COMPLETE [ 153.662672][ T4774] binder: undelivered transaction 47, process died. [ 153.663867][ T4774] binder: undelivered TRANSACTION_COMPLETE [ 154.089511][ T6958] netlink: 'syz.4.648': attribute type 3 has an invalid length. [ 154.091215][ T6958] netlink: 'syz.4.648': attribute type 3 has an invalid length. [ 154.233279][ T6968] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 154.236068][ T6968] bond3: option mode: unable to set because the bond device has slaves [ 154.408309][ T6971] ptrace attach of "./syz-executor exec"[4330] was attempted by " [ 155.637476][ T27] audit: type=1326 audit(155.620:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.670583][ T27] audit: type=1326 audit(155.640:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.673960][ T27] audit: type=1326 audit(155.650:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.678379][ T6980] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.654'. [ 155.683485][ T27] audit: type=1326 audit(155.650:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.701512][ T27] audit: type=1326 audit(155.650:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.705228][ T27] audit: type=1326 audit(155.650:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.712969][ T27] audit: type=1326 audit(155.650:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.716158][ T27] audit: type=1326 audit(155.660:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.721717][ T27] audit: type=1326 audit(155.660:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 155.725190][ T27] audit: type=1326 audit(155.660:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff99177368 code=0x7ffc0000 [ 156.906381][ T6992] netlink: 'syz.2.658': attribute type 10 has an invalid length. [ 156.924929][ T6992] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.071781][ T7015] tipc: Started in network mode [ 157.072743][ T7015] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.073879][ T7015] tipc: Enabling of bearer rejected, failed to enable media [ 157.081822][ T7015] tipc: Enabled bearer , priority 0 [ 158.029724][ T7036] tipc: Failed to remove unknown binding: 66,0,0/4:2907147720/2907147721 [ 158.031244][ T7036] tipc: Failed to remove unknown binding: 66,0,0/4:2907147720/2907147721 [ 158.033405][ T7039] tipc: Failed to remove unknown binding: 66,0,0/4:2837686414/2837686416 [ 158.199913][ T6943] tipc: Node number set to 2886997162 [ 158.209657][ T7048] "syz.1.672" (7048) uses obsolete ecb(arc4) skcipher [ 161.978764][ T7101] "syz.6.688" (7101) uses obsolete ecb(arc4) skcipher [ 162.059786][ T7095] overlayfs: failed to clone upperpath [ 162.250534][ T4335] Bluetooth: hci4: Malformed Event: 0x48 [ 162.259340][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 162.788066][ T7117] binder: 7116:7117 tried to acquire reference to desc 0, got 1 instead [ 162.792959][ T7117] binder: 7116:7117 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 162.795550][ T7117] binder: 7117 RLIMIT_NICE not set [ 162.797381][ T7117] binder: 7117 RLIMIT_NICE not set [ 162.801109][ T7117] binder: 7117 RLIMIT_NICE not set [ 162.821824][ T6943] binder: undelivered TRANSACTION_COMPLETE [ 162.822840][ T6943] binder: undelivered transaction 53, process died. [ 162.825488][ T6943] binder: undelivered TRANSACTION_COMPLETE [ 163.035560][ T7122] loop6: detected capacity change from 0 to 64 [ 163.819014][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 163.847796][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 164.086086][ T7139] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 164.121028][ T7139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.131493][ T7140] loop1: detected capacity change from 0 to 2048 [ 164.140222][ T7140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.302152][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 165.517699][ T7165] netlink: 'syz.6.710': attribute type 3 has an invalid length. [ 165.522465][ T7165] netlink: 'syz.6.710': attribute type 3 has an invalid length. [ 166.270714][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 166.272298][ T7179] netlink: 'syz.3.717': attribute type 30 has an invalid length. [ 166.769689][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 166.771184][ T7179] netlink: 'syz.3.717': attribute type 30 has an invalid length. [ 167.984216][ T7218] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 167.985515][ T7218] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 168.037403][ T7222] loop6: detected capacity change from 0 to 16 [ 168.040486][ T7222] erofs: (device loop6): mounted with root inode @ nid 36. [ 168.045630][ T7222] syz.6.730: attempt to access beyond end of device [ 168.045630][ T7222] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 171.385102][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.738'. [ 171.466298][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.738'. [ 173.783785][ T7286] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 176.053736][ T7341] device syzkaller0 entered promiscuous mode [ 177.575820][ T7356] overlayfs: failed to clone upperpath [ 177.614188][ T7357] MPTCP: kernel_bind error, err=-99 [ 177.847513][ T7363] loop1: detected capacity change from 0 to 512 [ 181.166182][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.781'. [ 181.222829][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.786'. [ 183.841486][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'. [ 183.917724][ T7480] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 183.931535][ T7480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.953308][ T7480] bond3: (slave ip6gretap1): making interface the new active one [ 184.220731][ T7480] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 184.222770][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 184.294254][ T7480] device veth5 entered promiscuous mode [ 184.297444][ T7480] bond3: (slave veth5): Enslaving as an active interface with a down link [ 185.111073][ T7500] sctp: [Deprecated]: syz.3.809 (pid 7500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.111073][ T7500] Use struct sctp_sack_info instead [ 185.223505][ T7515] bond0: (slave bridge0): Releasing backup interface [ 185.616676][ T7515] team0: Port device bond0 removed [ 185.622328][ T7515] tipc: Resetting bearer [ 185.625230][ T7515] device bridge_slave_0 left promiscuous mode [ 185.626521][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.679402][ T7515] device bridge_slave_1 left promiscuous mode [ 185.680682][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.025341][ T7515] bond0: (slave bond_slave_0): Releasing backup interface [ 186.058835][ T7533] loop6: detected capacity change from 0 to 128 [ 186.078532][ T7515] bond0: (slave bond_slave_1): Releasing backup interface [ 187.095855][ T7515] team0: Port device team_slave_0 removed [ 187.126509][ T7515] team0: Port device team_slave_1 removed [ 187.127865][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.129485][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.368987][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.370296][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.444929][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.446251][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.451362][ T7515] bond0: (slave wlan1): Releasing backup interface [ 187.525127][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 187.625384][ T7549] loop6: detected capacity change from 0 to 164 [ 187.670026][ T5688] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.991141][ T7557] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 188.056256][ T7557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.964192][ T7564] netlink: 188 bytes leftover after parsing attributes in process `syz.4.826'. [ 189.584183][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.782744][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.812218][ T7557] bond4: (slave ip6gretap1): making interface the new active one [ 189.814014][ T7557] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 189.911637][ T7587] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 189.916865][ T7587] device bond5 entered promiscuous mode [ 189.917843][ T7587] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.250950][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'. [ 190.261948][ T7587] bond5: (slave bridge0): making interface the new active one [ 190.263407][ T7587] device bridge0 entered promiscuous mode [ 190.265839][ T7587] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 190.267627][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 191.065256][ T7606] tipc: Started in network mode [ 191.068106][ T7606] tipc: Node identity 4, cluster identity 4711 [ 191.071202][ T7606] tipc: Node number set to 4 [ 192.082347][ T7619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 192.097710][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 192.563733][ T7612] loop6: detected capacity change from 0 to 32768 [ 192.568444][ T7612] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.842 (7612) [ 192.573933][ T7612] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.575616][ T7612] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 192.577181][ T7612] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.624496][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 192.638936][ T7612] BTRFS info (device loop6): use zstd compression, level 3 [ 192.663964][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 192.698320][ T7612] BTRFS info (device loop6): using free space tree [ 192.803281][ T7637] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.846'. [ 193.247827][ T7612] BTRFS info (device loop6): enabling ssd optimizations [ 193.300040][ T7658] netlink: 'syz.1.850': attribute type 3 has an invalid length. [ 193.846138][ T6436] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 194.253194][ T4901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.256622][ T4329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.261318][ T4329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.263351][ T4329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.267463][ T4329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.269887][ T4329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.271942][ T4329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.361397][ T4901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.411462][ T7676] loop6: detected capacity change from 0 to 40427 [ 194.422334][ T7676] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 194.423896][ T7676] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 194.435518][ T7676] F2FS-fs (loop6): invalid crc value [ 194.439729][ T4901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.445541][ T7676] F2FS-fs (loop6): Found nat_bits in checkpoint [ 194.471153][ T7676] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 194.478868][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 194.489906][ T7676] F2FS-fs (loop6): Start checkpoint disabled! [ 194.497528][ T7676] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 194.503561][ T7676] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 194.592077][ T4901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.691842][ T7689] syz.6.855: attempt to access beyond end of device [ 194.691842][ T7689] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.933989][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.935216][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.936644][ T7673] device bridge_slave_0 entered promiscuous mode [ 194.942423][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.943800][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.959231][ T7673] device bridge_slave_1 entered promiscuous mode [ 194.967216][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.970325][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.979683][ T7673] team0: Port device team_slave_0 added [ 194.981538][ T7673] team0: Port device team_slave_1 added [ 195.818301][ T5566] kworker/u4:17: attempt to access beyond end of device [ 195.818301][ T5566] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 195.830905][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.832201][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.835947][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.840137][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.841233][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.845005][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.846765][ T7701] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 195.860031][ T7701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.919301][ T7673] device hsr_slave_0 entered promiscuous mode [ 195.968687][ T7673] device hsr_slave_1 entered promiscuous mode [ 196.352093][ T4329] Bluetooth: hci3: command 0x0409 tx timeout [ 196.354259][ T7673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.355655][ T7673] Cannot create hsr debugfs directory [ 196.370036][ T7709] bond2: (slave ip6gretap1): making interface the new active one [ 196.372115][ T7709] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.829123][ T4901] tipc: Disabling bearer [ 197.874649][ T4901] tipc: Left network mode [ 198.418388][ T4335] Bluetooth: hci3: command 0x041b tx timeout [ 199.514380][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 199.579151][ T7721] loop6: detected capacity change from 0 to 131072 [ 199.596193][ T7721] F2FS-fs (loop6): Test dummy encryption mode enabled [ 199.669587][ T7721] F2FS-fs (loop6): invalid crc value [ 199.689569][ T7721] F2FS-fs (loop6): Found nat_bits in checkpoint [ 199.731220][ T7721] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 200.408569][ T4901] bond1: (slave gretap1): Releasing active interface [ 200.456355][ T7673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.488071][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 200.540354][ T7673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.689883][ T7673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.729045][ T7673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.021249][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.055282][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.056699][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.060785][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.063195][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.064870][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.066405][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.067528][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.069054][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.072146][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.073713][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.075043][ T1638] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.075997][ T1638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.078699][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.081370][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.084042][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.086887][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.092592][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.388057][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.389678][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.392580][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.394178][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.396943][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.398506][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.402544][ T7673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.469902][ T4901] bridge1: port 2(veth5) entered disabled state [ 201.518792][ T4901] bridge1: port 1(veth3) entered disabled state [ 201.561650][ T4901] device hsr_slave_0 left promiscuous mode [ 201.608147][ T4901] device hsr_slave_1 left promiscuous mode [ 201.688030][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.689259][ T4901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.691409][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.692628][ T4901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.694317][ T4901] device bridge_slave_1 left promiscuous mode [ 201.695306][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.748669][ T4901] device bridge_slave_0 left promiscuous mode [ 201.749668][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.898340][ T4901] device veth1_macvtap left promiscuous mode [ 201.899425][ T4901] device veth0_macvtap left promiscuous mode [ 201.900486][ T4901] device veth1_vlan left promiscuous mode [ 201.901479][ T4901] device veth0_vlan left promiscuous mode [ 202.578007][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 202.789055][ T4901] bond1 (unregistering): Released all slaves [ 205.270971][ T4901] team0 (unregistering): Port device team_slave_1 removed [ 205.430744][ T4901] team0 (unregistering): Port device team_slave_0 removed [ 205.598711][ T4901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.828922][ T4901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.069959][ T4901] team0 (unregistering): Port device bond0 removed [ 207.200543][ T4901] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 207.238580][ T4901] bond0 (unregistering): Released all slaves [ 207.590821][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.592142][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.594462][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.669628][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.671418][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.679087][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.680663][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.682215][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.683559][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.685618][ T7673] device veth0_vlan entered promiscuous mode [ 207.695361][ T7673] device veth1_vlan entered promiscuous mode [ 207.702599][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.704161][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.705642][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.707146][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.711059][ T7673] device veth0_macvtap entered promiscuous mode [ 207.714154][ T7673] device veth1_macvtap entered promiscuous mode [ 207.718667][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.720257][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.721768][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.723364][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.724827][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.726375][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.727836][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.730659][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.732999][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.734194][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.735810][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.737224][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.746258][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.748722][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.750198][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.751525][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.753185][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.755261][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.756415][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.758349][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.761051][ T7673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.762433][ T7673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.763744][ T7673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.765078][ T7673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.796315][ T7737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.797599][ T7737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.801452][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.807025][ T7737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.811574][ T7737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.812863][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.961366][ T7853] loop4: detected capacity change from 0 to 32768 [ 207.974387][ T7853] XFS (loop4): Mounting V5 Filesystem [ 208.004431][ T7853] XFS (loop4): Ending clean mount [ 208.039926][ T7673] XFS (loop4): Unmounting Filesystem [ 209.674644][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 211.913953][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.893'. [ 213.362114][ T7937] loop4: detected capacity change from 0 to 4096 [ 213.966862][ T7946] device bond_slave_0 left promiscuous mode [ 213.983169][ T7946] device bond_slave_1 left promiscuous mode [ 213.984187][ T7946] device bridge0 left promiscuous mode [ 214.013632][ T7937] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.024401][ T7946] device bond_slave_0 entered promiscuous mode [ 214.025640][ T7946] device bond_slave_1 entered promiscuous mode [ 214.026564][ T7946] device bridge0 entered promiscuous mode [ 214.032446][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.033666][ T7946] team0: Device bond0 failed to register rx_handler [ 214.036198][ T7946] device bond_slave_0 left promiscuous mode [ 214.037185][ T7946] device bond_slave_1 left promiscuous mode [ 214.038779][ T7946] device bridge0 left promiscuous mode [ 214.043782][ T7937] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 214.096529][ T7950] netlink: 'syz.3.899': attribute type 16 has an invalid length. [ 214.097645][ T7950] netlink: 'syz.3.899': attribute type 17 has an invalid length. [ 214.105383][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.116744][ T7954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.856503][ T7964] overlayfs: upper fs does not support tmpfile. [ 214.859275][ T7964] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.860696][ T7964] overlayfs: failed to set xattr on upper [ 214.861690][ T7964] overlayfs: ...falling back to index=off,metacopy=off. [ 215.950487][ T7673] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 215.997653][ T7673] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 216.024037][ T7673] Remounting filesystem read-only [ 216.028420][ T7673] NILFS (loop4): error -5 truncating bmap (ino=12) [ 216.155690][ T7673] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 217.306967][ T7998] loop1: detected capacity change from 0 to 1764 [ 217.449012][ T7914] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.326643][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.375011][ T8021] team0: Port device bond0 added [ 218.382374][ T8021] netlink: 'syz.2.917': attribute type 16 has an invalid length. [ 218.383614][ T8021] netlink: 'syz.2.917': attribute type 17 has an invalid length. [ 218.388767][ T8021] tipc: Resetting bearer [ 219.021919][ T8037] loop1: detected capacity change from 0 to 1024 [ 219.042527][ T8037] hfsplus: failed to load extents file [ 219.056699][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 219.061768][ T8039] netlink: 31 bytes leftover after parsing attributes in process `syz.3.923'. [ 219.063258][ T8039] netlink: 'syz.3.923': attribute type 3 has an invalid length. [ 219.064773][ T8039] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 219.066307][ T8039] netlink: 31 bytes leftover after parsing attributes in process `syz.3.923'. [ 219.122332][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 219.715778][ T8051] device syzkaller0 entered promiscuous mode [ 219.721956][ T8051] tipc: Started in network mode [ 219.722818][ T8051] tipc: Node identity 5e338c7cfa77, cluster identity 4711 [ 219.724147][ T8051] tipc: Enabled bearer , priority 0 [ 219.726623][ T8049] tipc: Resetting bearer [ 219.809381][ T8049] tipc: Disabling bearer [ 220.405621][ T8064] loop6: detected capacity change from 0 to 4096 [ 220.742470][ T8065] Soft offlining pfn 0x14b1b1 at process virtual address 0x20000000 [ 220.758726][ T8065] Soft offlining pfn 0x151e66 at process virtual address 0x20001000 [ 220.761680][ T8064] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 220.761762][ T8065] Soft offlining pfn 0x147922 at process virtual address 0x20002000 [ 220.765078][ T8065] Soft offlining pfn 0x14d934 at process virtual address 0x20003000 [ 220.766597][ T8065] Soft offlining pfn 0x14e594 at process virtual address 0x20004000 [ 220.770319][ T8065] Soft offlining pfn 0x121c0c at process virtual address 0x20005000 [ 220.772529][ T8065] Soft offlining pfn 0x122992 at process virtual address 0x20006000 [ 220.774036][ T8065] Soft offlining pfn 0x13d13f at process virtual address 0x20007000 [ 220.775490][ T8065] Soft offlining pfn 0x13be8c at process virtual address 0x20008000 [ 220.818237][ T8065] Soft offlining pfn 0x14f4a3 at process virtual address 0x20009000 [ 220.836701][ T8065] Soft offlining pfn 0x14cb03 at process virtual address 0x2000a000 [ 220.853046][ T8065] Soft offlining pfn 0x121704 at process virtual address 0x2000b000 [ 220.855825][ T8064] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 220.858789][ T8065] Soft offlining pfn 0x121705 at process virtual address 0x2000c000 [ 220.860768][ T8065] Soft offlining pfn 0x14915c at process virtual address 0x2000d000 [ 220.862225][ T8065] Soft offlining pfn 0x14914c at process virtual address 0x2000e000 [ 220.863659][ T8065] Soft offlining pfn 0x14b08a at process virtual address 0x2000f000 [ 220.865478][ T8065] Soft offlining pfn 0x14cb02 at process virtual address 0x20010000 [ 220.866982][ T8065] Soft offlining pfn 0x14a804 at process virtual address 0x20011000 [ 220.885648][ T8074] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.629529][ T8082] overlayfs: upper fs does not support tmpfile. [ 221.630759][ T8082] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 221.631803][ T8082] overlayfs: failed to set xattr on upper [ 221.632672][ T8082] overlayfs: ...falling back to index=off,metacopy=off. [ 221.920751][ T6436] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 221.922334][ T6436] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12) [ 221.924192][ T6436] Remounting filesystem read-only [ 221.925134][ T6436] NILFS (loop6): error -5 truncating bmap (ino=12) [ 221.934247][ T6436] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 222.401855][ T8104] loop4: detected capacity change from 0 to 1024 [ 222.423016][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.1.953'. [ 222.425127][ T8104] hfsplus: failed to load extents file [ 224.244745][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 224.594879][ T8142] loop4: detected capacity change from 0 to 2048 [ 224.719672][ T8142] Alternate GPT is invalid, using primary GPT. [ 224.721915][ T8142] loop4: p2 p3 p7 [ 224.830817][ T8141] netlink: 548 bytes leftover after parsing attributes in process `syz.4.955'. [ 225.084959][ T3936] Alternate GPT is invalid, using primary GPT. [ 225.086096][ T3936] loop4: p2 p3 p7 [ 225.260026][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 225.263568][ T7914] udevd[7914]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 225.265255][ T7851] udevd[7851]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 228.973603][ T8231] net_ratelimit: 5266 callbacks suppressed [ 228.973614][ T8231] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 229.042404][ T8236] device syzkaller0 entered promiscuous mode [ 229.286977][ T4335] Bluetooth: hci0: unexpected event 0x48 length: 27 > 3 [ 229.286998][ T4335] Bluetooth: hci0: wrong event for mode 0 [ 230.404186][ T8265] fuse: Bad value for 'fd' [ 232.942065][ T8320] random: crng reseeded on system resumption [ 233.328275][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1004'. [ 234.056221][ T8347] loop4: detected capacity change from 0 to 512 [ 234.057787][ T8347] EXT4-fs: Ignoring removed orlov option [ 234.132394][ T8347] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 235.173244][ T7914] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.208907][ T8351] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 235.224055][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.274372][ T8353] bond3: option mode: unable to set because the bond device has slaves [ 235.709224][ T8359] loop1: detected capacity change from 0 to 512 [ 235.713538][ T8359] EXT4-fs (loop1): Test dummy encryption mode enabled [ 235.715772][ T8359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.727311][ T8359] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1015: bad orphan inode 131083 [ 235.731123][ T8359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 235.743192][ T8359] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 235.783173][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.792287][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.808369][ T8359] 9pnet: p9_errstr2errno: server reported unknown error y_encrypti [ 235.823108][ T8365] loop6: detected capacity change from 0 to 512 [ 235.836036][ T8365] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.846169][ T8365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 235.847572][ T8365] System zones: 1-12 [ 235.861648][ T8365] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 235.869454][ T8365] EXT4-fs (loop6): 1 truncate cleaned up [ 235.870605][ T8365] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 236.708322][ T6436] EXT4-fs (loop6): unmounting filesystem. [ 236.732388][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 236.843383][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 236.854932][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 236.865867][ T8383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1020'. [ 236.872585][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 236.934316][ T8379] loop1: detected capacity change from 0 to 40427 [ 236.949213][ T8379] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 236.950486][ T8379] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 236.956905][ T8379] F2FS-fs (loop1): invalid crc value [ 237.044544][ T8379] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.079212][ T8379] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 237.080472][ T8379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.106075][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 239.437453][ T8443] loop4: detected capacity change from 0 to 1024 [ 239.442023][ T8443] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.494723][ T8443] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 239.496402][ T8443] EXT4-fs (loop4): group descriptors corrupted! [ 240.140831][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 240.142562][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 241.244836][ T8479] loop6: detected capacity change from 0 to 512 [ 241.248734][ T8479] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 241.250711][ T8479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 241.252055][ T8479] System zones: 1-12 [ 241.253684][ T8479] EXT4-fs (loop6): 1 truncate cleaned up [ 241.254674][ T8479] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 241.285506][ T8482] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 241.345069][ T8482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.356007][ T8490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.357300][ T8490] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.359920][ T8490] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 241.940167][ T8494] syz.2.1045 sent an empty control message without MSG_MORE. [ 242.096732][ T8500] loop1: detected capacity change from 0 to 1024 [ 242.302509][ T8500] EXT2-fs (loop1): error: fragsize log 4 != blocksize log 10 [ 242.326457][ T6436] EXT4-fs (loop6): unmounting filesystem. [ 242.332942][ T7914] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.404130][ T8482] device gretap2 entered promiscuous mode [ 242.406679][ T8482] bond4: (slave gretap2): making interface the new active one [ 242.409514][ T8482] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 242.437074][ T8508] netlink: 'syz.4.1053': attribute type 11 has an invalid length. [ 242.438199][ T8482] device macvlan3 entered promiscuous mode [ 242.439672][ T8482] device bond4 entered promiscuous mode [ 242.441444][ T8482] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 242.468948][ T8482] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 242.931725][ T8482] device bond4 left promiscuous mode [ 243.477766][ T8524] loop6: detected capacity change from 0 to 512 [ 243.577795][ T8524] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1058: inode has both inline data and extents flags [ 243.580783][ T8524] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1058: couldn't read orphan inode 15 (err -117) [ 243.582745][ T8524] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 243.811352][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 243.838655][ T27] audit: type=1107 audit(243.670:119): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 244.453861][ T6436] EXT4-fs (loop6): unmounting filesystem. [ 244.516707][ T8552] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 244.547605][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1064'. [ 244.550467][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1064'. [ 244.571029][ T8552] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.574532][ T8552] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.581231][ T8552] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.583838][ T8552] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.609128][ T8552] bond1: (slave geneve2): making interface the new active one [ 244.612443][ T8552] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 244.629325][ T8555] device gretap1 entered promiscuous mode [ 244.630916][ T8555] batman_adv: batadv0: Adding interface: gretap1 [ 244.632425][ T8555] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 244.635284][ T8555] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 244.681792][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1066'. [ 244.688297][ T8552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.695070][ T8559] loop6: detected capacity change from 0 to 8 [ 244.712506][ T8559] SQUASHFS error: Unable to read inode 0x11f [ 245.619699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 245.798344][ T8583] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 246.170929][ T4329] Bluetooth: hci5: command 0x0406 tx timeout [ 246.190975][ T8583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.208655][ T8587] bond3: (slave veth5): Enslaving as an active interface with a down link [ 246.217140][ T27] audit: type=1326 audit(246.200:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.4.1071" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf77368 code=0x0 [ 246.217354][ T8583] device veth1 entered promiscuous mode [ 246.228872][ T8583] device veth1 left promiscuous mode [ 246.231660][ T8583] bond3: (slave vlan0): making interface the new active one [ 246.233346][ T8583] device veth1 entered promiscuous mode [ 246.238713][ T8583] device vlan0 entered promiscuous mode [ 246.521102][ T8583] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 246.528181][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 248.357679][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1090'. [ 248.414377][ T8639] loop6: detected capacity change from 0 to 256 [ 248.421314][ T8639] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.426088][ T8639] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.454114][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1092'. [ 248.753487][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.754862][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.756123][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.757288][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.758576][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.759782][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.760984][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.762133][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.763387][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 248.764627][ T8644] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 249.881950][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.883065][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.943152][ T8648] loop6: detected capacity change from 0 to 512 [ 250.051147][ T8648] EXT2-fs (loop6): warning: mounting ext3 filesystem as ext2 [ 250.448151][ T8661] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1099'. [ 250.465950][ T8648] EXT2-fs (loop6): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 250.474500][ T8648] EXT2-fs (loop6): error: ext2_get_inode: bad inode number: 15 [ 250.476400][ T8648] EXT2-fs (loop6): error: ext2_fsync: detected IO error when writing metadata buffers [ 250.486582][ T8648] EXT2-fs (loop6): error: ext2_free_blocks: Freeing blocks not in datazone - block = 250, count = 1 [ 250.490128][ T8648] EXT2-fs (loop6): error: ext2_free_branches: Read failure, inode=15, block=131072 [ 250.505511][ T1607] EXT2-fs (loop6): error: ext2_get_inode: bad inode number: 15 [ 250.958071][ T8674] hub 8-0:1.0: USB hub found [ 250.960794][ T8674] hub 8-0:1.0: 8 ports detected [ 251.443498][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 251.456444][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 255.104264][ T8731] loop4: detected capacity change from 0 to 512 [ 255.199065][ T8731] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1120: invalid block [ 255.202306][ T8731] EXT4-fs (loop4): Remounting filesystem read-only [ 255.203632][ T8731] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1120: invalid indirect mapped block 1024 (level 0) [ 255.211883][ T8731] EXT4-fs (loop4): Remounting filesystem read-only [ 255.214101][ T8731] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1120: bg 0: block 35: padding at end of block bitmap is not set [ 255.220100][ T8731] EXT4-fs (loop4): Remounting filesystem read-only [ 255.223403][ T8731] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 255.226145][ T8731] EXT4-fs (loop4): Remounting filesystem read-only [ 255.227554][ T8731] EXT4-fs (loop4): 1 truncate cleaned up [ 255.790468][ T8731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 256.207028][ T27] audit: type=1326 audit(256.190:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.4.1120" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf77368 code=0x0 [ 256.890038][ T7673] EXT4-fs (loop4): unmounting filesystem. [ 257.387547][ T8767] loop4: detected capacity change from 0 to 64 [ 259.892714][ T8781] tipc: Enabled bearer , priority 0 [ 260.142210][ T8785] tipc: Resetting bearer [ 260.143439][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1132'. [ 260.146175][ T8790] tipc: Enabled bearer , priority 10 [ 260.558902][ T8797] loop1: detected capacity change from 0 to 16 [ 260.562589][ T8797] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 260.572964][ T8800] device syzkaller0 entered promiscuous mode [ 261.199478][ T4390] tipc: Node number set to 2755955836 [ 261.321611][ T8818] loop1: detected capacity change from 0 to 256 [ 261.761689][ T8818] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0x57c18eec, utbl_chksum : 0xe619d30d) [ 261.840466][ T8824] device syzkaller0 entered promiscuous mode [ 262.269705][ T8824] tipc: Started in network mode [ 262.270591][ T8824] tipc: Node identity 168561665283, cluster identity 4711 [ 262.273028][ T8824] tipc: Enabled bearer , priority 0 [ 262.275895][ T8823] tipc: Resetting bearer [ 262.411780][ T8823] tipc: Disabling bearer [ 262.413741][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1146'. [ 262.697399][ T8846] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 262.712136][ T8846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.743172][ T8846] bond5: (slave vlan4): making interface the new active one [ 262.746247][ T8846] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 262.749847][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 262.787223][ T8854] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.788831][ T8854] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.790240][ T8854] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.791586][ T8854] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.795247][ T8854] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 263.375104][ T8876] device syzkaller0 entered promiscuous mode [ 265.243168][ T4335] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 265.245088][ T4335] Bluetooth: hci1: Injecting HCI hardware error event [ 265.249360][ T4329] Bluetooth: hci1: hardware error 0x00 [ 265.813036][ T8912] syz.3.1168 uses obsolete (PF_INET,SOCK_PACKET) [ 265.842876][ T8918] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 265.849425][ T8918] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.366064][ T8928] capability: warning: `syz.1.1174' uses 32-bit capabilities (legacy support in use) [ 267.068903][ T8942] loop1: detected capacity change from 0 to 128 [ 267.139238][ T9] device vlan0 left promiscuous mode [ 267.168590][ T27] audit: type=1326 audit(267.160:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.174479][ T27] audit: type=1326 audit(267.160:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.187489][ T27] audit: type=1326 audit(267.160:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.200799][ T27] audit: type=1326 audit(267.160:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa315a32c code=0x7ffc0000 [ 267.212708][ T27] audit: type=1326 audit(267.160:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.218403][ T27] audit: type=1326 audit(267.160:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.221893][ T27] audit: type=1326 audit(267.160:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.225568][ T27] audit: type=1326 audit(267.160:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.229325][ T27] audit: type=1326 audit(267.160:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.233727][ T27] audit: type=1326 audit(267.170:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffa3177368 code=0x7ffc0000 [ 267.460526][ T4329] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 268.304107][ T8967] loop4: detected capacity change from 0 to 128 [ 268.313971][ T8967] EXT4-fs (loop4): Test dummy encryption mode enabled [ 268.485913][ T8967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 268.501245][ T8967] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 268.873345][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1185'. [ 268.985825][ T8972] tipc: Enabling of bearer rejected, failed to enable media [ 269.668971][ T7673] EXT4-fs (loop4): unmounting filesystem. [ 269.767513][ T8993] loop6: detected capacity change from 0 to 256 [ 269.773499][ T8993] exfat: Deprecated parameter 'namecase' [ 269.785609][ T8993] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 269.809235][ T8995] netlink: 'syz.4.1193': attribute type 12 has an invalid length. [ 272.201094][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 272.204293][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 273.583157][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 273.586198][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 273.652543][ T6943] Process accounting resumed [ 274.958717][ T9082] ubi31: attaching mtd0 [ 274.960205][ T9082] ubi31: scanning is finished [ 274.960938][ T9082] ubi31: empty MTD device detected [ 275.073688][ T9082] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 275.074918][ T9082] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 275.075980][ T9082] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 275.077059][ T9082] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 275.078295][ T9082] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 275.079278][ T9082] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 275.080436][ T9082] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3191803946 [ 275.081885][ T9082] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 275.084875][ T9083] ubi31: background thread "ubi_bgt31d" started, PID 9083 [ 276.143160][ T9110] loop1: detected capacity change from 0 to 128 [ 276.145960][ T9109] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 276.147634][ T9109] Mem abort info: [ 276.148234][ T9109] ESR = 0x0000000086000006 [ 276.148902][ T9109] EC = 0x21: IABT (current EL), IL = 32 bits [ 276.149810][ T9109] SET = 0, FnV = 0 [ 276.150372][ T9109] EA = 0, S1PTW = 0 [ 276.150964][ T9109] FSC = 0x06: level 2 translation fault [ 276.151787][ T9109] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011ff7d000 [ 276.152862][ T9109] [0000000000000000] pgd=080000013fbf1003, p4d=080000013fbf1003, pud=080000013f8ca003, pmd=0000000000000000 [ 276.154596][ T9109] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 276.155640][ T9109] Modules linked in: [ 276.156230][ T9109] CPU: 0 PID: 9109 Comm: syz.6.1221 Not tainted syzkaller #0 [ 276.157287][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 276.158770][ T9109] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 276.159962][ T9109] pc : 0x0 [ 276.160445][ T9109] lr : bond_xdp_xmit+0x280/0x46c [ 276.161212][ T9109] sp : ffff8000227a7040 [ 276.161820][ T9109] x29: ffff8000227a70e0 x28: 000000000000000f x27: dfff800000000000 [ 276.163058][ T9109] x26: ffff7000044f4e10 x25: ffff800013b8aa38 x24: ffff0000f302c000 [ 276.164237][ T9109] x23: fffffbffefebef50 x22: ffff0000f3028000 x21: fffffbffefebef50 [ 276.165457][ T9109] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 276.166690][ T9109] x17: 0000000000000000 x16: ffff8000082d7e60 x15: 0000000000000002 [ 276.167960][ T9109] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 276.169135][ T9109] x11: 0000000000002d28 x10: ffff8000219ba000 x9 : ffff8000227a7080 [ 276.170354][ T9109] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 276.171577][ T9109] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000 [ 276.172823][ T9109] x2 : ffff8000227a70a0 x1 : 0000000000000001 x0 : ffff0000f302c000 [ 276.174064][ T9109] Call trace: [ 276.174624][ T9109] 0x0 [ 276.175021][ T9109] bq_xmit_all+0xaf8/0xf80 [ 276.175623][ T9109] bq_enqueue+0x288/0x30c [ 276.176258][ T9109] dev_map_enqueue_multi+0xcb4/0xdf0 [ 276.177066][ T9109] xdp_do_redirect_frame+0x3e4/0x578 [ 276.177799][ T9109] bpf_test_run_xdp_live+0x8b8/0x15d0 [ 276.178626][ T9109] bpf_prog_test_run_xdp+0x5fc/0xc88 [ 276.179430][ T9109] bpf_prog_test_run+0x2dc/0x360 [ 276.180249][ T9109] __sys_bpf+0x504/0x660 [ 276.180873][ T9109] __arm64_sys_bpf+0x80/0x98 [ 276.181577][ T9109] invoke_syscall+0x98/0x2b4 [ 276.182290][ T9109] el0_svc_common+0x138/0x258 [ 276.183048][ T9109] do_el0_svc+0x58/0x130 [ 276.183711][ T9109] el0_svc+0x58/0x128 [ 276.184366][ T9109] el0t_64_sync_handler+0x84/0xf0 [ 276.185153][ T9109] el0t_64_sync+0x18c/0x190 [ 276.185829][ T9109] Code: bad PC value [ 276.186396][ T9109] ---[ end trace 0000000000000000 ]--- [ 276.268673][ T9109] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 276.269849][ T9109] SMP: stopping secondary CPUs [ 276.270509][ T9109] Kernel Offset: disabled [ 276.271117][ T9109] CPU features: 0x080000,000f0097,a65bfea7 [ 276.271920][ T9109] Memory Limit: none [ 276.357140][ T9109] Rebooting in 86400 seconds..