last executing test programs: 3m34.671138124s ago: executing program 2 (id=386): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x6, 0x2, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb023}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3m33.709297665s ago: executing program 2 (id=390): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, 0x0, 0x40800) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000080)) r6 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) 3m32.014271753s ago: executing program 2 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5131, &(0x7f00000003c0)={0x0, 0x6118, 0x40000, 0x0, 0xdc}, &(0x7f0000000300), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x3a4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 3m31.076921694s ago: executing program 2 (id=397): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0xab3}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x3}}, 0x24, 0x1) 3m30.130560055s ago: executing program 2 (id=402): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x9, 0x1, 0xfe, 0xf, 0x11, 0x7, 0x0, 0xa, 0xc, 0x6, 0x3, 0x27, 0x8, 0x4, 0x0, 0x4], 0x3, [0x40b, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x7, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3m24.445233042s ago: executing program 2 (id=421): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r4, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{0x0}], 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x8c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc050}, 0x40004) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000380)={0x0, 0x20, 0xffffffff, 0x9, 0x4, 0xc3bf, 0x4, 0xfff, 0x2, 0x101, 0x10, 0x7, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) 3m24.032833312s ago: executing program 32 (id=421): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r4, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{0x0}], 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x8c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc050}, 0x40004) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000380)={0x0, 0x20, 0xffffffff, 0x9, 0x4, 0xc3bf, 0x4, 0xfff, 0x2, 0x101, 0x10, 0x7, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) 2m14.621506105s ago: executing program 5 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 2m14.502136748s ago: executing program 5 (id=614): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2m13.424678013s ago: executing program 5 (id=617): r0 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_required={0x3, 0x1b}], 0x6b) 2m13.013391221s ago: executing program 5 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x4103e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="2ccabf09a4238e019859656db3b189d6d7998ed95b3458030000000000000057", 0x20}, {&(0x7f00000004c0)="81b93bc3905c85e4", 0x8}], 0x2}, 0x4) 2m12.550994732s ago: executing program 5 (id=622): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2}}}}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x1, r3, 0x0, 0x61000006, &(0x7f0000000340)) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(0x0, 0x104) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) 2m12.406371735s ago: executing program 5 (id=624): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x34b9, 0x0, &(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000000180)) syz_emit_ethernet(0x81, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x73, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop, @rr={0x7, 0x3, 0xca}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"e1aed3cd1647e1b264ce6146843c426ca01ec62131403a9e65a2370adf98e0ce25275ef7ca7a8b9a8aa8825ba733df5702ac24b5643a5294275069cfff000db77c0df4fdf504b9"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 1m57.199217836s ago: executing program 33 (id=624): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x34b9, 0x0, &(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000000180)) syz_emit_ethernet(0x81, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x73, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop, @rr={0x7, 0x3, 0xca}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"e1aed3cd1647e1b264ce6146843c426ca01ec62131403a9e65a2370adf98e0ce25275ef7ca7a8b9a8aa8825ba733df5702ac24b5643a5294275069cfff000db77c0df4fdf504b9"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 8.45503413s ago: executing program 4 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 8.134756898s ago: executing program 4 (id=1021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x82, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff84", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9ebd712fe8efb9018244f4f28e16cdd2065b80e5f4e73d3c9c4c3f510000bff5947d57ad66d90aac643ca60ab19529d6397bbd0f39857f7cdd2497c5ff775b78a328b31a4975388cb5aa05334264af794dddcf8f7c9c9990883672eea20b3646b9685", 0x86}], 0x2}, 0x8000) 7.727525436s ago: executing program 4 (id=1026): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x9, 0x1, 0xfe, 0xf, 0x11, 0x7, 0x0, 0xa, 0xc, 0x6, 0x3, 0x27, 0x8, 0x4, 0x0, 0x4], 0x3, [0x40b, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x7, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 7.320900625s ago: executing program 1 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) 7.025459632s ago: executing program 4 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r5, &(0x7f00000000c0)=[{0x0}], 0x1) unshare(0x5e040880) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ptrace$getregset(0x4204, r6, 0x202, &(0x7f00000003c0)={&(0x7f00000001c0)=""/223, 0xdf}) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) r7 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 6.579997172s ago: executing program 6 (id=1032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 6.493472534s ago: executing program 1 (id=1033): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x96}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 5.490102987s ago: executing program 6 (id=1034): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800800, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) truncate(&(0x7f0000000700)='./file0\x00', 0x200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.426985158s ago: executing program 4 (id=1036): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000080)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5.282603601s ago: executing program 0 (id=1037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x82, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6e5b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff84", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9ebd712fe8efb9018244f4f28e16cdd2065b80e5f4e73d3c9c4c3f510000bff5947d57ad66d90aac643ca60ab19529d6397bbd0f39857f7cdd2497c5ff775b78a328b31a4975388cb5aa05334264af794dddcf8f7c9c9990883672eea20b3646b9685", 0x86}], 0x2}, 0x8000) 5.103658625s ago: executing program 1 (id=1038): r0 = syz_open_dev$video(&(0x7f0000000600), 0x8a, 0x401) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x90}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 4.321828783s ago: executing program 6 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x9, 0x1, 0xfe, 0xf, 0x11, 0x7, 0x0, 0xa, 0xc, 0x6, 0x3, 0x27, 0x8, 0x4, 0x0, 0x4], 0x3, [0x40b, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x7, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 4.321211673s ago: executing program 1 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') 3.529022801s ago: executing program 0 (id=1041): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) close(0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.908332515s ago: executing program 3 (id=1042): mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 2.897425344s ago: executing program 4 (id=1043): socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) 2.792455677s ago: executing program 0 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 2.779160347s ago: executing program 6 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 2.65001335s ago: executing program 3 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1) unshare(0x5e040880) r6 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ptrace$getregset(0x4204, r6, 0x202, &(0x7f00000003c0)={&(0x7f00000001c0)=""/223, 0xdf}) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) r7 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.638549853s ago: executing program 6 (id=1047): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, 0x0, 0x40800) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000080)) r4 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_CONNECT(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) 1.372094899s ago: executing program 6 (id=1048): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x96}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.3200193s ago: executing program 3 (id=1049): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800800, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) truncate(&(0x7f0000000700)='./file0\x00', 0x200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.31705665s ago: executing program 0 (id=1050): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r2, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.156226503s ago: executing program 0 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x82, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6e5b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff84", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9ebd712fe8efb9018244f4f28e16cdd2065b80e5f4e73d3c9c4c3f510000bff5947d57ad66d90aac643ca60ab19529d6397bbd0f39857f7cdd2497c5ff775b78a328b31a4975388cb5aa05334264af794dddcf8f7c9c9990883672eea20b3646b9685", 0x86}], 0x2}, 0x8000) 858.61585ms ago: executing program 0 (id=1052): r0 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x808, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x8800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto(r4, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 549.501777ms ago: executing program 3 (id=1053): r0 = syz_open_dev$video(&(0x7f0000000600), 0x8a, 0x401) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x90}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 288.625283ms ago: executing program 3 (id=1054): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) close(0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 183.221635ms ago: executing program 1 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x9, 0x1, 0xfe, 0xf, 0x11, 0x7, 0x0, 0xa, 0xc, 0x6, 0x3, 0x27, 0x8, 0x4, 0x0, 0x4], 0x3, [0x40b, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x7, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 19.811859ms ago: executing program 3 (id=1056): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 0s ago: executing program 1 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) kernel console output (not intermixed with test programs): e [ 70.671076][ T4314] device syzkaller0 entered promiscuous mode [ 70.695460][ T4318] tipc: Started in network mode [ 70.700394][ T4318] tipc: Node identity 26f246c1a338, cluster identity 4711 [ 70.707882][ T4318] tipc: Enabled bearer , priority 0 [ 70.757145][ T4320] device syzkaller0 entered promiscuous mode [ 70.796747][ T4316] tipc: Resetting bearer [ 70.861915][ T4316] tipc: Disabling bearer [ 70.971017][ T4326] device syzkaller0 entered promiscuous mode [ 71.147619][ T4338] device syzkaller0 entered promiscuous mode [ 71.337696][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344434][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.385426][ T4341] device syzkaller0 entered promiscuous mode [ 71.429452][ T4343] device syzkaller0 entered promiscuous mode [ 73.391901][ T4357] device syzkaller0 entered promiscuous mode [ 73.592799][ T4381] device syzkaller1 entered promiscuous mode [ 73.696179][ T4369] device syzkaller0 entered promiscuous mode [ 73.739242][ T4385] device syzkaller0 entered promiscuous mode [ 73.899082][ T4391] device syzkaller0 entered promiscuous mode [ 74.758542][ T4404] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.142278][ T4421] device syzkaller0 entered promiscuous mode [ 76.088112][ T4425] device syzkaller0 entered promiscuous mode [ 76.998850][ T4439] device syzkaller0 entered promiscuous mode [ 77.119515][ T4444] 9pnet: Could not find request transport: fdfdno= [ 77.139475][ T4442] device syzkaller0 entered promiscuous mode [ 78.917858][ T4468] device syzkaller0 entered promiscuous mode [ 80.024412][ T4485] device syzkaller0 entered promiscuous mode [ 80.402208][ T4511] loop4: detected capacity change from 0 to 4096 [ 80.497246][ T4511] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.643643][ T4511] EXT4-fs (loop4): inline encryption not supported [ 80.811262][ T4511] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 80.834407][ T4504] device syzkaller0 entered promiscuous mode [ 81.232953][ T4511] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 81.312722][ T4511] System zones: 0-5 [ 81.332432][ T4513] device syzkaller0 entered promiscuous mode [ 81.356804][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 81.532119][ T4526] 9pnet: Could not find request transport: fdfdno= [ 86.283178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 86.303177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 86.323167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 86.343163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 86.353159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 86.363162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.373162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.383161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.393163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.403163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.695016][ T1108] cfg80211: failed to load regulatory.db [ 87.072478][ T4567] device syzkaller0 entered promiscuous mode [ 87.885068][ T4581] device syzkaller0 entered promiscuous mode [ 88.593809][ T4591] device syzkaller0 entered promiscuous mode [ 88.717806][ T4594] device syzkaller0 entered promiscuous mode [ 90.260868][ T4606] 9pnet: Could not find request transport: fdfdno= [ 91.944746][ T4624] device syzkaller0 entered promiscuous mode [ 92.838946][ T4643] device syzkaller0 entered promiscuous mode [ 92.979594][ T4646] device syzkaller0 entered promiscuous mode [ 94.514527][ T4662] device syzkaller0 entered promiscuous mode [ 94.529044][ T4662] tipc: Started in network mode [ 94.534221][ T4662] tipc: Node identity 860faa72f528, cluster identity 4711 [ 94.541616][ T4662] tipc: Enabled bearer , priority 0 [ 94.561211][ T4661] tipc: Resetting bearer [ 94.646015][ T4661] tipc: Disabling bearer [ 94.710277][ T4667] loop1: detected capacity change from 0 to 256 [ 95.594070][ T4667] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.633274][ T4667] FAT-fs (loop1): Filesystem has been set read-only [ 95.665483][ T4667] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.700120][ T4674] device syzkaller0 entered promiscuous mode [ 95.707210][ T4667] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.723817][ T26] audit: type=1800 audit(1784286459.736:2): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.101" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 96.783679][ T4686] device syzkaller0 entered promiscuous mode [ 97.963133][ C0] sched: RT throttling activated [ 99.096430][ T4695] device syzkaller0 entered promiscuous mode [ 100.258463][ T4717] sctp: failed to load transform for md5: -2 [ 100.691831][ T4735] loop1: detected capacity change from 0 to 512 [ 100.742703][ T4714] tipc: Enabled bearer , priority 0 [ 101.016015][ T4737] device syzkaller0 entered promiscuous mode [ 101.161113][ T4713] tipc: Disabling bearer [ 101.242809][ T4735] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 101.519453][ T4735] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.373292][ T4790] device syzkaller0 entered promiscuous mode [ 105.637925][ T4795] device syzkaller0 entered promiscuous mode [ 105.890535][ T4807] loop1: detected capacity change from 0 to 8 [ 108.280613][ T4828] loop3: detected capacity change from 0 to 256 [ 108.324110][ T4828] ======================================================= [ 108.324110][ T4828] WARNING: The mand mount option has been deprecated and [ 108.324110][ T4828] and is ignored by this kernel. Remove the mand [ 108.324110][ T4828] option from the mount to silence this warning. [ 108.324110][ T4828] ======================================================= [ 109.407778][ T4828] FAT-fs (loop3): Directory bread(block 64) failed [ 109.473246][ T4828] FAT-fs (loop3): Directory bread(block 65) failed [ 109.479930][ T4828] FAT-fs (loop3): Directory bread(block 66) failed [ 109.518003][ T4828] FAT-fs (loop3): Directory bread(block 67) failed [ 109.538340][ T4828] FAT-fs (loop3): Directory bread(block 68) failed [ 109.573291][ T4828] FAT-fs (loop3): Directory bread(block 69) failed [ 109.603367][ T4828] FAT-fs (loop3): Directory bread(block 70) failed [ 109.695648][ T4828] FAT-fs (loop3): Directory bread(block 71) failed [ 109.719360][ T4828] FAT-fs (loop3): Directory bread(block 72) failed [ 109.740460][ T4828] FAT-fs (loop3): Directory bread(block 73) failed [ 110.417047][ T4845] loop1: detected capacity change from 0 to 512 [ 111.467255][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 111.481893][ T4845] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.743241][ T26] audit: type=1800 audit(1784286475.556:3): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 112.403493][ T4847] 9pnet: Could not find request transport: fdfdno= [ 112.474302][ T4854] device syzkaller0 entered promiscuous mode [ 113.849323][ T4865] loop3: detected capacity change from 0 to 8 [ 115.407994][ T4893] Zero length message leads to an empty skb [ 117.415603][ T4901] device syzkaller0 entered promiscuous mode [ 118.866234][ T4923] device wg1 entered promiscuous mode [ 120.579001][ T4930] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 120.587653][ T4930] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 120.596151][ T4930] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 120.998113][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.792162][ T4930] syz.4.163 (4930) used greatest stack depth: 21104 bytes left [ 123.653485][ T4963] device syzkaller0 entered promiscuous mode [ 123.973280][ T4963] tipc: Started in network mode [ 123.978296][ T4963] tipc: Node identity fa01161d5081, cluster identity 4711 [ 124.550183][ T4963] tipc: Enabled bearer , priority 0 [ 124.963638][ T4962] tipc: Resetting bearer [ 125.920310][ T4962] tipc: Disabling bearer [ 125.957376][ T4991] loop2: detected capacity change from 0 to 8 [ 126.735520][ T4225] tipc: Node number set to 2860520989 [ 126.747893][ T4989] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 126.756228][ T4989] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 126.764849][ T4989] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 126.921168][ T4994] loop1: detected capacity change from 0 to 512 [ 127.676381][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 127.897072][ T4994] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 128.376733][ T4994] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.897309][ T5017] device syzkaller0 entered promiscuous mode [ 129.862291][ T5024] loop3: detected capacity change from 0 to 512 [ 129.925031][ T5024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.682624][ T5024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.821585][ T5024] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.126299][ T5024] EXT4-fs (loop3): 1 truncate cleaned up [ 131.140507][ T5033] loop1: detected capacity change from 0 to 512 [ 131.212642][ T5024] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 131.984660][ T5040] device syzkaller0 entered promiscuous mode [ 131.993094][ T5038] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 132.002685][ T5038] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 132.011575][ T5038] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 132.408529][ T5040] tipc: Enabled bearer , priority 0 [ 132.445207][ T5033] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.188: inode has both inline data and extents flags [ 132.591461][ T5039] tipc: Resetting bearer [ 132.618770][ T5033] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.188: couldn't read orphan inode 15 (err -117) [ 132.691797][ T5046] loop2: detected capacity change from 0 to 8 [ 132.775290][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782243][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.382423][ T5039] tipc: Disabling bearer [ 133.402975][ T5033] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 133.709693][ T5050] 9pnet: Could not find request transport: fdfdno= [ 133.858524][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 135.439551][ T5080] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 135.448001][ T5080] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 135.457850][ T5080] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 135.693100][ T5089] device syzkaller0 entered promiscuous mode [ 135.940933][ T5097] 9pnet: Could not find request transport: fdfdno= [ 136.630305][ T5113] loop1: detected capacity change from 0 to 8 [ 136.903042][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 139.498577][ T5162] device syzkaller0 entered promiscuous mode [ 140.290333][ T5173] device syzkaller0 entered promiscuous mode [ 140.406965][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 141.148762][ T5188] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 141.157573][ T5188] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 141.166618][ T5188] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 142.977464][ T5231] device syzkaller0 entered promiscuous mode [ 143.656061][ T5256] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 143.664712][ T5256] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 143.673619][ T5256] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 144.796567][ T5269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 146.510501][ T5302] device syzkaller0 entered promiscuous mode [ 146.828475][ T5309] loop2: detected capacity change from 0 to 128 [ 146.890445][ T5309] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.909311][ T5309] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.924431][ T5309] EXT4-fs warning (device loop2): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 148.991414][ T5362] device syzkaller0 entered promiscuous mode [ 149.213607][ T5366] loop4: detected capacity change from 0 to 1024 [ 149.223615][ T5360] device syzkaller0 entered promiscuous mode [ 149.390182][ T5366] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.438982][ T5366] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.482875][ T5377] loop2: detected capacity change from 0 to 512 [ 149.741039][ T5377] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 149.757665][ T5377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.890152][ T5377] EXT4-fs (loop2): 1 truncate cleaned up [ 149.912348][ T5377] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 151.927323][ T5377] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.274: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 152.442789][ T5404] 9pnet: Could not find request transport: fdfdno= [ 152.794506][ T4607] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 152.810618][ T4607] Bluetooth: hci1: Injecting HCI hardware error event [ 152.826445][ T4191] Bluetooth: hci1: hardware error 0x00 [ 153.296375][ T5445] device syzkaller0 entered promiscuous mode [ 153.351286][ T5445] tipc: Started in network mode [ 153.369597][ T5445] tipc: Node identity c293c490beab, cluster identity 4711 [ 153.379375][ T5445] tipc: Enabled bearer , priority 0 [ 153.502582][ T5444] tipc: Resetting bearer [ 153.555022][ T5444] tipc: Disabling bearer [ 154.619911][ T5463] device syzkaller0 entered promiscuous mode [ 155.701327][ T5504] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.669020][ T5520] device syzkaller0 entered promiscuous mode [ 156.725580][ T5520] tipc: Enabled bearer , priority 0 [ 156.752957][ T5518] tipc: Resetting bearer [ 156.837298][ T5518] tipc: Disabling bearer [ 156.855812][ T5521] loop2: detected capacity change from 0 to 8192 [ 159.302232][ T5552] 9pnet: Could not find request transport: fdfdno= [ 160.833502][ T5580] loop1: detected capacity change from 0 to 2048 [ 161.987890][ T4176] Alternate GPT is invalid, using primary GPT. [ 162.063422][ T4176] loop1: p1 p2 p3 [ 162.124657][ T5580] Alternate GPT is invalid, using primary GPT. [ 162.128968][ T5590] loop3: detected capacity change from 0 to 512 [ 162.131138][ T5580] loop1: p1 p2 p3 [ 162.238285][ T3558] Alternate GPT is invalid, using primary GPT. [ 162.293958][ T5590] EXT4-fs (loop3): Ignoring removed oldalloc option [ 162.300745][ T5590] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.317878][ T3558] loop1: p1 p2 p3 [ 162.441219][ T5590] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 162.558043][ T5590] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.569550][ T5142] udevd[5142]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 162.592985][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 162.697750][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 162.771183][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 162.772187][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 163.072250][ T5618] infiniband syz2: set down [ 163.077073][ T5618] infiniband syz2: added ipvlan0 [ 163.089338][ T5618] infiniband syz2: Couldn't open port 1 [ 163.125296][ T5618] RDS/IB: syz2: added [ 163.129844][ T5618] smc: adding ib device syz2 with port count 1 [ 163.136194][ T5618] smc: ib device syz2 port 1 has pnetid [ 163.690038][ T5142] udevd[5142]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 163.976325][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 163.976556][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 164.965536][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.220563][ T5695] device syzkaller0 entered promiscuous mode [ 167.603198][ T4607] psmouse serio2: Failed to reset mouse on : -5 [ 168.293441][ T5756] device syzkaller0 entered promiscuous mode [ 169.294973][ T5797] 9pnet: Could not find request transport: fdfdno= [ 169.966907][ T5837] device syzkaller0 entered promiscuous mode [ 170.328484][ T5851] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 170.338407][ T5851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.483292][ T4607] misc userio: Buffer overflowed, userio client isn't keeping up [ 173.626776][ T5921] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 173.635327][ T5921] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 173.643886][ T5921] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 173.866184][ T4607] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 174.203238][ T4607] psmouse serio2: Failed to enable mouse on [ 174.263494][ T5931] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 174.272680][ T5931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.660487][ T5933] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 174.669814][ T5933] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.971514][ T5142] udevd[5142]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 175.213228][ T5938] device syzkaller0 entered promiscuous mode [ 175.257060][ T5938] syzkaller0: tun_net_xmit 663 [ 175.262065][ T5938] syzkaller0: tun_net_xmit 663 [ 175.267003][ T5938] syzkaller0: tun_net_xmit 663 [ 175.271799][ T5938] syzkaller0: tun_net_xmit 663 [ 175.276621][ T5938] syzkaller0: tun_net_xmit 663 [ 175.281396][ T5938] syzkaller0: tun_net_xmit 663 [ 175.286268][ T5938] syzkaller0: tun_net_xmit 663 [ 175.291021][ T5938] syzkaller0: tun_net_xmit 663 [ 175.295799][ T5938] syzkaller0: tun_net_xmit 663 [ 175.300575][ T5938] syzkaller0: tun_net_xmit 663 [ 175.305424][ T5938] syzkaller0: tun_net_xmit 663 [ 175.310208][ T5938] syzkaller0: tun_net_xmit 663 [ 175.315023][ T5938] syzkaller0: tun_net_xmit 663 [ 175.319804][ T5938] syzkaller0: tun_net_xmit 663 [ 175.324581][ T5938] syzkaller0: tun_net_xmit 663 [ 175.329344][ T5938] syzkaller0: tun_net_xmit 663 [ 175.334115][ T5938] syzkaller0: tun_net_xmit 663 [ 175.338870][ T5938] syzkaller0: tun_net_xmit 663 [ 175.343667][ T5938] syzkaller0: tun_net_xmit 663 [ 175.348449][ T5938] syzkaller0: tun_net_xmit 663 [ 175.353224][ T5938] syzkaller0: tun_net_xmit 663 [ 175.357981][ T5938] syzkaller0: tun_net_xmit 663 [ 175.362737][ T5938] syzkaller0: tun_net_xmit 663 [ 175.367510][ T5938] syzkaller0: tun_net_xmit 663 [ 175.372281][ T5938] syzkaller0: tun_net_xmit 663 [ 175.377051][ T5938] syzkaller0: tun_net_xmit 663 [ 175.381801][ T5938] syzkaller0: tun_net_xmit 663 [ 175.386573][ T5938] syzkaller0: tun_net_xmit 663 [ 175.391348][ T5938] syzkaller0: tun_net_xmit 663 [ 175.396134][ T5938] syzkaller0: tun_net_xmit 663 [ 175.400889][ T5938] syzkaller0: tun_net_xmit 663 [ 175.405666][ T5938] syzkaller0: tun_net_xmit 663 [ 175.410423][ T5938] syzkaller0: tun_net_xmit 663 [ 175.415190][ T5938] syzkaller0: tun_net_xmit 663 [ 175.419978][ T5938] syzkaller0: tun_net_xmit 663 [ 175.424746][ T5938] syzkaller0: tun_net_xmit 663 [ 175.429519][ T5938] syzkaller0: tun_net_xmit 663 [ 175.434297][ T5938] syzkaller0: tun_net_xmit 663 [ 175.439067][ T5938] syzkaller0: tun_net_xmit 663 [ 175.443858][ T5938] syzkaller0: tun_net_xmit 663 [ 175.448611][ T5938] syzkaller0: tun_net_xmit 663 [ 175.453379][ T5938] syzkaller0: tun_net_xmit 663 [ 175.458133][ T5938] syzkaller0: tun_net_xmit 663 [ 175.462882][ T5938] syzkaller0: tun_net_xmit 663 [ 175.467667][ T5938] syzkaller0: tun_net_xmit 663 [ 175.472442][ T5938] syzkaller0: tun_net_xmit 663 [ 175.477315][ T5938] syzkaller0: tun_net_xmit 663 [ 175.482071][ T5938] syzkaller0: tun_net_xmit 663 [ 175.486854][ T5938] syzkaller0: tun_net_xmit 663 [ 175.491615][ T5938] syzkaller0: tun_net_xmit 663 [ 175.496396][ T5938] syzkaller0: tun_net_xmit 663 [ 175.501164][ T5938] syzkaller0: tun_net_xmit 663 [ 175.505935][ T5938] syzkaller0: tun_net_xmit 663 [ 175.510686][ T5938] syzkaller0: tun_net_xmit 663 [ 175.515450][ T5938] syzkaller0: tun_net_xmit 663 [ 175.520200][ T5938] syzkaller0: tun_net_xmit 663 [ 175.524966][ T5938] syzkaller0: tun_net_xmit 663 [ 175.529720][ T5938] syzkaller0: tun_net_xmit 663 [ 175.534486][ T5938] syzkaller0: tun_net_xmit 663 [ 175.539238][ T5938] syzkaller0: tun_net_xmit 663 [ 175.544011][ T5938] syzkaller0: tun_net_xmit 663 [ 175.548783][ T5938] syzkaller0: tun_net_xmit 663 [ 175.553555][ T5938] syzkaller0: tun_net_xmit 663 [ 175.558307][ T5938] syzkaller0: tun_net_xmit 663 [ 175.563077][ T5938] syzkaller0: tun_net_xmit 663 [ 175.567886][ T5938] syzkaller0: tun_net_xmit 663 [ 175.572639][ T5938] syzkaller0: tun_net_xmit 663 [ 175.577412][ T5938] syzkaller0: tun_net_xmit 663 [ 175.582163][ T5938] syzkaller0: tun_net_xmit 663 [ 175.587057][ T5938] syzkaller0: tun_net_xmit 663 [ 175.591807][ T5938] syzkaller0: tun_net_xmit 663 [ 175.596591][ T5938] syzkaller0: tun_net_xmit 663 [ 175.601364][ T5938] syzkaller0: tun_net_xmit 663 [ 175.606127][ T5938] syzkaller0: tun_net_xmit 663 [ 175.610874][ T5938] syzkaller0: tun_net_xmit 663 [ 175.615658][ T5938] syzkaller0: tun_net_xmit 663 [ 175.620411][ T5938] syzkaller0: tun_net_xmit 663 [ 175.625180][ T5938] syzkaller0: tun_net_xmit 663 [ 175.629986][ T5938] syzkaller0: tun_net_xmit 663 [ 175.634757][ T5938] syzkaller0: tun_net_xmit 663 [ 175.639516][ T5938] syzkaller0: tun_net_xmit 663 [ 175.644307][ T5938] syzkaller0: tun_net_xmit 663 [ 175.649069][ T5938] syzkaller0: tun_net_xmit 663 [ 175.653982][ T5938] syzkaller0: tun_net_xmit 663 [ 175.658736][ T5938] syzkaller0: tun_net_xmit 663 [ 175.663518][ T5938] syzkaller0: tun_net_xmit 663 [ 175.668278][ T5938] syzkaller0: tun_net_xmit 663 [ 175.673227][ T5938] syzkaller0: tun_net_xmit 663 [ 175.677985][ T5938] syzkaller0: tun_net_xmit 663 [ 175.682735][ T5938] syzkaller0: tun_net_xmit 663 [ 175.687593][ T5938] syzkaller0: tun_net_xmit 663 [ 175.692360][ T5938] syzkaller0: tun_net_xmit 663 [ 175.697127][ T5938] syzkaller0: tun_net_xmit 663 [ 175.701895][ T5938] syzkaller0: tun_net_xmit 663 [ 175.706850][ T5938] syzkaller0: tun_net_xmit 663 [ 175.711601][ T5938] syzkaller0: tun_net_xmit 663 [ 175.716369][ T5938] syzkaller0: tun_net_xmit 663 [ 175.721121][ T5938] syzkaller0: tun_net_xmit 663 [ 175.725886][ T5938] syzkaller0: tun_net_xmit 663 [ 175.730636][ T5938] syzkaller0: tun_net_xmit 663 [ 175.735419][ T5938] syzkaller0: tun_net_xmit 663 [ 175.740169][ T5938] syzkaller0: tun_net_xmit 663 [ 175.744937][ T5938] syzkaller0: tun_net_xmit 663 [ 175.749689][ T5938] syzkaller0: tun_net_xmit 663 [ 175.754462][ T5938] syzkaller0: tun_net_xmit 663 [ 175.759228][ T5938] syzkaller0: tun_net_xmit 663 [ 175.764002][ T5938] syzkaller0: tun_net_xmit 663 [ 175.768766][ T5938] syzkaller0: tun_net_xmit 663 [ 175.773539][ T5938] syzkaller0: tun_net_xmit 97 [ 175.781397][ T21] syzkaller0: tun_net_xmit 70 [ 176.704831][ T5979] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 176.746087][ T4481] Bluetooth: hci5: Frame reassembly failed (-84) [ 177.199960][ T5984] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 177.208403][ T5984] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 177.217318][ T5984] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 178.215964][ T5993] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 178.225151][ T5993] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.483217][ T5991] overlayfs: missing 'lowerdir' [ 178.780827][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 178.790992][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 178.813848][ T5999] device syzkaller0 entered promiscuous mode [ 178.831170][ T5999] tipc: Enabled bearer , priority 0 [ 178.854961][ T5999] tipc: Resetting bearer [ 178.888035][ T5998] tipc: Resetting bearer [ 178.910933][ T5998] tipc: Disabling bearer [ 178.921228][ T6001] loop2: detected capacity change from 0 to 1024 [ 179.114286][ T6001] EXT4-fs (loop2): Ignoring removed bh option [ 179.221610][ T6010] device syzkaller0 entered promiscuous mode [ 179.229430][ T6001] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000ab3,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 179.233038][ T6010] syzkaller0: tun_net_xmit 663 [ 179.258481][ T6010] syzkaller0: tun_net_xmit 663 [ 179.263356][ T6010] syzkaller0: tun_net_xmit 663 [ 179.268346][ T6010] syzkaller0: tun_net_xmit 663 [ 179.273291][ T6010] syzkaller0: tun_net_xmit 663 [ 179.278182][ T6010] syzkaller0: tun_net_xmit 663 [ 179.283018][ T6010] syzkaller0: tun_net_xmit 663 [ 179.287899][ T6010] syzkaller0: tun_net_xmit 663 [ 179.292692][ T6010] syzkaller0: tun_net_xmit 663 [ 179.297539][ T6010] syzkaller0: tun_net_xmit 663 [ 179.302329][ T6010] syzkaller0: tun_net_xmit 663 [ 179.307167][ T6010] syzkaller0: tun_net_xmit 663 [ 179.311963][ T6010] syzkaller0: tun_net_xmit 663 [ 179.316804][ T6010] syzkaller0: tun_net_xmit 663 [ 179.320602][ T6015] loop3: detected capacity change from 0 to 8 [ 179.321604][ T6010] syzkaller0: tun_net_xmit 663 [ 179.332602][ T6010] syzkaller0: tun_net_xmit 663 [ 179.337440][ T6010] syzkaller0: tun_net_xmit 663 [ 179.342241][ T6010] syzkaller0: tun_net_xmit 663 [ 179.347098][ T6010] syzkaller0: tun_net_xmit 663 [ 179.352007][ T6010] syzkaller0: tun_net_xmit 663 [ 179.356860][ T6010] syzkaller0: tun_net_xmit 663 [ 179.361656][ T6010] syzkaller0: tun_net_xmit 663 [ 179.366496][ T6010] syzkaller0: tun_net_xmit 663 [ 179.371291][ T6010] syzkaller0: tun_net_xmit 663 [ 179.376141][ T6010] syzkaller0: tun_net_xmit 663 [ 179.380930][ T6010] syzkaller0: tun_net_xmit 663 [ 179.385865][ T6010] syzkaller0: tun_net_xmit 663 [ 179.390651][ T6010] syzkaller0: tun_net_xmit 663 [ 179.395488][ T6010] syzkaller0: tun_net_xmit 663 [ 179.400290][ T6010] syzkaller0: tun_net_xmit 663 [ 179.405124][ T6010] syzkaller0: tun_net_xmit 663 [ 179.409929][ T6010] syzkaller0: tun_net_xmit 663 [ 179.414769][ T6010] syzkaller0: tun_net_xmit 663 [ 179.419566][ T6010] syzkaller0: tun_net_xmit 663 [ 179.424399][ T6010] syzkaller0: tun_net_xmit 663 [ 179.429324][ T6010] syzkaller0: tun_net_xmit 663 [ 179.434177][ T6010] syzkaller0: tun_net_xmit 663 [ 179.438966][ T6010] syzkaller0: tun_net_xmit 663 [ 179.443807][ T6010] syzkaller0: tun_net_xmit 663 [ 179.448607][ T6010] syzkaller0: tun_net_xmit 663 [ 179.453745][ T6010] syzkaller0: tun_net_xmit 663 [ 179.458550][ T6010] syzkaller0: tun_net_xmit 663 [ 179.463387][ T6010] syzkaller0: tun_net_xmit 663 [ 179.468174][ T6010] syzkaller0: tun_net_xmit 663 [ 179.472963][ T6010] syzkaller0: tun_net_xmit 663 [ 179.477807][ T6010] syzkaller0: tun_net_xmit 663 [ 179.482596][ T6010] syzkaller0: tun_net_xmit 663 [ 179.487439][ T6010] syzkaller0: tun_net_xmit 663 [ 179.492229][ T6010] syzkaller0: tun_net_xmit 663 [ 179.497067][ T6010] syzkaller0: tun_net_xmit 663 [ 179.501860][ T6010] syzkaller0: tun_net_xmit 663 [ 179.506702][ T6010] syzkaller0: tun_net_xmit 663 [ 179.511492][ T6010] syzkaller0: tun_net_xmit 663 [ 179.516340][ T6010] syzkaller0: tun_net_xmit 663 [ 179.521241][ T6010] syzkaller0: tun_net_xmit 663 [ 179.526083][ T6010] syzkaller0: tun_net_xmit 663 [ 179.530966][ T6010] syzkaller0: tun_net_xmit 663 [ 179.535907][ T6010] syzkaller0: tun_net_xmit 663 [ 179.540699][ T6010] syzkaller0: tun_net_xmit 663 [ 179.545543][ T6010] syzkaller0: tun_net_xmit 663 [ 179.549940][ T6001] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.397: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 179.550327][ T6010] syzkaller0: tun_net_xmit 663 [ 179.550350][ T6010] syzkaller0: tun_net_xmit 663 [ 179.550367][ T6010] syzkaller0: tun_net_xmit 663 [ 179.550384][ T6010] syzkaller0: tun_net_xmit 663 [ 179.550400][ T6010] syzkaller0: tun_net_xmit 663 [ 179.594115][ T6010] syzkaller0: tun_net_xmit 663 [ 179.598914][ T6010] syzkaller0: tun_net_xmit 663 [ 179.603751][ T6010] syzkaller0: tun_net_xmit 663 [ 179.608542][ T6010] syzkaller0: tun_net_xmit 663 [ 179.613374][ T6010] syzkaller0: tun_net_xmit 663 [ 179.618174][ T6010] syzkaller0: tun_net_xmit 663 [ 179.623056][ T6010] syzkaller0: tun_net_xmit 663 [ 179.627909][ T6010] syzkaller0: tun_net_xmit 663 [ 179.632721][ T6010] syzkaller0: tun_net_xmit 663 [ 179.637568][ T6010] syzkaller0: tun_net_xmit 663 [ 179.642379][ T6010] syzkaller0: tun_net_xmit 663 [ 179.647222][ T6010] syzkaller0: tun_net_xmit 663 [ 179.652115][ T6010] syzkaller0: tun_net_xmit 663 [ 179.656978][ T6010] syzkaller0: tun_net_xmit 663 [ 179.661763][ T6010] syzkaller0: tun_net_xmit 663 [ 179.666605][ T6010] syzkaller0: tun_net_xmit 663 [ 179.671400][ T6010] syzkaller0: tun_net_xmit 663 [ 179.676517][ T6010] syzkaller0: tun_net_xmit 663 [ 179.681400][ T6010] syzkaller0: tun_net_xmit 663 [ 179.686342][ T6010] syzkaller0: tun_net_xmit 663 [ 179.691149][ T6010] syzkaller0: tun_net_xmit 663 [ 179.692542][ T6001] EXT4-fs (loop2): Remounting filesystem read-only [ 179.696135][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696159][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696175][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696191][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696208][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696225][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696241][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696257][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696273][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696290][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696307][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696323][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696339][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696355][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696372][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696388][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696405][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696421][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696437][ T6010] syzkaller0: tun_net_xmit 663 [ 179.696455][ T6010] syzkaller0: tun_net_xmit 663 [ 179.770756][ T4194] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 179.774808][ T6010] syzkaller0: tun_net_xmit 663 [ 179.774834][ T6010] syzkaller0: tun_net_xmit 663 [ 179.774851][ T6010] syzkaller0: tun_net_xmit 97 [ 179.847973][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 179.860289][ T4194] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 179.914602][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 179.921632][ T4194] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 179.969169][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 179.977069][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.309349][ T4194] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 181.007725][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 181.014330][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 181.055905][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 181.105274][ T4194] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 181.138023][ T6040] overlayfs: missing 'lowerdir' [ 181.331007][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 181.348856][ T4194] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 181.378505][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 181.402351][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 181.504689][ T4194] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 181.535550][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 181.542406][ T4194] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 181.577060][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 181.586831][ T4194] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 181.607225][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 181.613915][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.365302][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.397547][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.415203][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.431833][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.491903][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.548915][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 182.584147][ T4194] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 183.103356][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 183.967046][ T6080] device syzkaller0 entered promiscuous mode [ 184.416992][ T6087] overlayfs: failed to resolve './bus': -2 [ 184.752050][ T4481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.928500][ T4194] syz-executor (4194) used greatest stack depth: 20880 bytes left [ 185.003156][ T6098] overlayfs: missing 'lowerdir' [ 185.505718][ T6100] overlayfs: missing 'lowerdir' [ 185.676723][ T4481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.762197][ T4481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.931819][ T4481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.071318][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 186.093456][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 186.425340][ T4481] tipc: Left network mode [ 186.477429][ T6147] device syzkaller0 entered promiscuous mode [ 186.536629][ T6147] syzkaller0: tun_net_xmit 663 [ 186.541475][ T6147] syzkaller0: tun_net_xmit 663 [ 186.546439][ T6147] syzkaller0: tun_net_xmit 663 [ 186.551417][ T6147] syzkaller0: tun_net_xmit 663 [ 186.556344][ T6147] syzkaller0: tun_net_xmit 663 [ 186.561141][ T6147] syzkaller0: tun_net_xmit 663 [ 186.565996][ T6147] syzkaller0: tun_net_xmit 663 [ 186.570787][ T6147] syzkaller0: tun_net_xmit 663 [ 186.575646][ T6147] syzkaller0: tun_net_xmit 663 [ 186.580442][ T6147] syzkaller0: tun_net_xmit 663 [ 186.585298][ T6147] syzkaller0: tun_net_xmit 663 [ 186.590086][ T6147] syzkaller0: tun_net_xmit 663 [ 186.595138][ T6147] syzkaller0: tun_net_xmit 663 [ 186.599953][ T6147] syzkaller0: tun_net_xmit 663 [ 186.604791][ T6147] syzkaller0: tun_net_xmit 663 [ 186.609672][ T6147] syzkaller0: tun_net_xmit 663 [ 186.614528][ T6147] syzkaller0: tun_net_xmit 663 [ 186.619420][ T6147] syzkaller0: tun_net_xmit 663 [ 186.624258][ T6147] syzkaller0: tun_net_xmit 663 [ 186.629058][ T6147] syzkaller0: tun_net_xmit 663 [ 186.633896][ T6147] syzkaller0: tun_net_xmit 663 [ 186.638794][ T6147] syzkaller0: tun_net_xmit 663 [ 186.643616][ T6147] syzkaller0: tun_net_xmit 663 [ 186.648499][ T6147] syzkaller0: tun_net_xmit 663 [ 186.653350][ T6147] syzkaller0: tun_net_xmit 663 [ 186.658144][ T6147] syzkaller0: tun_net_xmit 663 [ 186.662937][ T6147] syzkaller0: tun_net_xmit 663 [ 186.667783][ T6147] syzkaller0: tun_net_xmit 663 [ 186.672603][ T6147] syzkaller0: tun_net_xmit 663 [ 186.677425][ T6147] syzkaller0: tun_net_xmit 663 [ 186.682217][ T6147] syzkaller0: tun_net_xmit 663 [ 186.687047][ T6147] syzkaller0: tun_net_xmit 663 [ 186.691883][ T6147] syzkaller0: tun_net_xmit 663 [ 186.696719][ T6147] syzkaller0: tun_net_xmit 663 [ 186.701761][ T6147] syzkaller0: tun_net_xmit 663 [ 186.706613][ T6147] syzkaller0: tun_net_xmit 663 [ 186.711406][ T6147] syzkaller0: tun_net_xmit 663 [ 186.716237][ T6147] syzkaller0: tun_net_xmit 663 [ 186.721027][ T6147] syzkaller0: tun_net_xmit 663 [ 186.725836][ T6147] syzkaller0: tun_net_xmit 663 [ 186.730624][ T6147] syzkaller0: tun_net_xmit 663 [ 186.735455][ T6147] syzkaller0: tun_net_xmit 663 [ 186.740252][ T6147] syzkaller0: tun_net_xmit 663 [ 186.745074][ T6147] syzkaller0: tun_net_xmit 663 [ 186.749859][ T6147] syzkaller0: tun_net_xmit 663 [ 186.754679][ T6147] syzkaller0: tun_net_xmit 663 [ 186.759488][ T6147] syzkaller0: tun_net_xmit 663 [ 186.764319][ T6147] syzkaller0: tun_net_xmit 663 [ 186.769110][ T6147] syzkaller0: tun_net_xmit 663 [ 186.774135][ T6147] syzkaller0: tun_net_xmit 663 [ 186.779021][ T6147] syzkaller0: tun_net_xmit 663 [ 186.783845][ T6147] syzkaller0: tun_net_xmit 663 [ 186.788637][ T6147] syzkaller0: tun_net_xmit 663 [ 186.793469][ T6147] syzkaller0: tun_net_xmit 663 [ 186.798255][ T6147] syzkaller0: tun_net_xmit 663 [ 186.803046][ T6147] syzkaller0: tun_net_xmit 663 [ 186.807886][ T6147] syzkaller0: tun_net_xmit 663 [ 186.812677][ T6147] syzkaller0: tun_net_xmit 663 [ 186.817524][ T6147] syzkaller0: tun_net_xmit 663 [ 186.822508][ T6147] syzkaller0: tun_net_xmit 663 [ 186.827360][ T6147] syzkaller0: tun_net_xmit 663 [ 186.832156][ T6147] syzkaller0: tun_net_xmit 663 [ 186.837030][ T6147] syzkaller0: tun_net_xmit 663 [ 186.841826][ T6147] syzkaller0: tun_net_xmit 663 [ 186.846669][ T6147] syzkaller0: tun_net_xmit 663 [ 186.851557][ T6147] syzkaller0: tun_net_xmit 663 [ 186.856413][ T6147] syzkaller0: tun_net_xmit 663 [ 186.861464][ T6147] syzkaller0: tun_net_xmit 663 [ 186.866362][ T6147] syzkaller0: tun_net_xmit 663 [ 186.871150][ T6147] syzkaller0: tun_net_xmit 663 [ 186.875993][ T6147] syzkaller0: tun_net_xmit 663 [ 186.880799][ T6147] syzkaller0: tun_net_xmit 663 [ 186.885678][ T6147] syzkaller0: tun_net_xmit 663 [ 186.890470][ T6147] syzkaller0: tun_net_xmit 663 [ 186.895323][ T6147] syzkaller0: tun_net_xmit 663 [ 186.900216][ T6147] syzkaller0: tun_net_xmit 663 [ 186.905068][ T6147] syzkaller0: tun_net_xmit 663 [ 186.909865][ T6147] syzkaller0: tun_net_xmit 663 [ 186.914711][ T6147] syzkaller0: tun_net_xmit 663 [ 186.919509][ T6147] syzkaller0: tun_net_xmit 663 [ 186.924354][ T6147] syzkaller0: tun_net_xmit 663 [ 186.929252][ T6147] syzkaller0: tun_net_xmit 663 [ 186.934097][ T6147] syzkaller0: tun_net_xmit 663 [ 186.938994][ T6147] syzkaller0: tun_net_xmit 663 [ 186.943921][ T6147] syzkaller0: tun_net_xmit 663 [ 186.948724][ T6147] syzkaller0: tun_net_xmit 663 [ 186.953579][ T6147] syzkaller0: tun_net_xmit 663 [ 186.958385][ T6147] syzkaller0: tun_net_xmit 663 [ 186.963573][ T6147] syzkaller0: tun_net_xmit 663 [ 186.968378][ T6147] syzkaller0: tun_net_xmit 663 [ 186.973315][ T6147] syzkaller0: tun_net_xmit 663 [ 186.978112][ T6147] syzkaller0: tun_net_xmit 663 [ 186.982995][ T6147] syzkaller0: tun_net_xmit 663 [ 186.987928][ T6147] syzkaller0: tun_net_xmit 663 [ 186.992713][ T6147] syzkaller0: tun_net_xmit 663 [ 186.997555][ T6147] syzkaller0: tun_net_xmit 663 [ 187.002342][ T6147] syzkaller0: tun_net_xmit 663 [ 187.007180][ T6147] syzkaller0: tun_net_xmit 663 [ 187.012037][ T6147] syzkaller0: tun_net_xmit 663 [ 187.016961][ T6147] syzkaller0: tun_net_xmit 663 [ 187.021923][ T6147] syzkaller0: tun_net_xmit 663 [ 187.026770][ T6147] syzkaller0: tun_net_xmit 663 [ 187.031565][ T6147] syzkaller0: tun_net_xmit 663 [ 187.036410][ T6147] syzkaller0: tun_net_xmit 663 [ 187.041293][ T6147] syzkaller0: tun_net_xmit 663 [ 187.046314][ T6147] syzkaller0: tun_net_xmit 663 [ 187.051106][ T6147] syzkaller0: tun_net_xmit 663 [ 187.055959][ T6147] syzkaller0: tun_net_xmit 663 [ 187.060750][ T6147] syzkaller0: tun_net_xmit 97 [ 187.080439][ T1108] syzkaller0: tun_net_xmit 70 [ 187.349414][ T6164] device syzkaller0 entered promiscuous mode [ 193.689984][ T4225] Bluetooth: hci3: command 0x0409 tx timeout [ 193.926860][ T6178] overlayfs: missing 'workdir' [ 194.219094][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.225522][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.772146][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 194.826067][ T6225] 9pnet: Could not find request transport: fdfdno= [ 195.005127][ T6239] device syzkaller0 entered promiscuous mode [ 195.072902][ T6231] tipc: Enabled bearer , priority 0 [ 195.081379][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.099039][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.111058][ T6141] device bridge_slave_0 entered promiscuous mode [ 195.128617][ T6230] tipc: Resetting bearer [ 195.180009][ T6230] tipc: Disabling bearer [ 195.210678][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.232332][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.240968][ T6141] device bridge_slave_1 entered promiscuous mode [ 195.396717][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.480082][ T6262] overlayfs: missing 'workdir' [ 196.065781][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.230515][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 196.309468][ T6141] team0: Port device team_slave_0 added [ 196.682376][ T6141] team0: Port device team_slave_1 added [ 196.855581][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.863244][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.997382][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.073693][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.080740][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.137055][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.362368][ T6317] 9pnet: Could not find request transport: fdfdno= [ 197.516660][ T6141] device hsr_slave_0 entered promiscuous mode [ 197.603875][ T6141] device hsr_slave_1 entered promiscuous mode [ 197.623156][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.673354][ T6141] Cannot create hsr debugfs directory [ 198.190480][ T6336] overlayfs: missing 'workdir' [ 198.293578][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 198.854114][ T4481] device hsr_slave_0 left promiscuous mode [ 198.980039][ T4481] device hsr_slave_1 left promiscuous mode [ 199.011318][ T6352] loop0: detected capacity change from 0 to 8 [ 199.031798][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.051038][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.085652][ T6359] loop1: detected capacity change from 0 to 512 [ 199.097235][ T6352] SQUASHFS error: zlib decompression failed, data probably corrupt [ 199.105861][ T6352] SQUASHFS error: Failed to read block 0x4de: -5 [ 199.112866][ T6352] SQUASHFS error: zlib decompression failed, data probably corrupt [ 199.121272][ T6352] SQUASHFS error: Failed to read block 0x4df: -5 [ 199.131501][ T6352] SQUASHFS error: zlib decompression failed, data probably corrupt [ 199.139623][ T6352] SQUASHFS error: Failed to read block 0x4e0: -5 [ 199.141376][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.146542][ T6352] SQUASHFS error: Failed to read block 0x4e4: -5 [ 199.161233][ T6352] SQUASHFS error: Failed to read block 0x9cc: -5 [ 199.167781][ T6352] SQUASHFS error: Failed to read block 0x2cf4: -5 [ 199.174488][ T6352] SQUASHFS error: Failed to read block 0x52cf4: -5 [ 199.181101][ T6352] SQUASHFS error: Failed to read block 0x535f4: -5 [ 199.190473][ T6352] SQUASHFS error: zlib decompression failed, data probably corrupt [ 199.199164][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.206834][ T6352] SQUASHFS error: Failed to read block 0x4de: -5 [ 199.207452][ T4481] device bridge_slave_1 left promiscuous mode [ 199.221885][ T26] audit: type=1800 audit(1784286563.236:4): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.458" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 199.227050][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.273603][ T6359] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 199.290975][ T4481] device bridge_slave_0 left promiscuous mode [ 199.301772][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.315143][ T6359] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.459: inode #1: comm syz.1.459: iget: illegal inode # [ 199.346980][ T6359] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.459: error while reading EA inode 1 err=-117 [ 199.366059][ T4481] device veth1_macvtap left promiscuous mode [ 199.372715][ T4481] device veth0_macvtap left promiscuous mode [ 199.379069][ T4481] device veth1_vlan left promiscuous mode [ 199.385865][ T4481] device veth0_vlan left promiscuous mode [ 199.415993][ T6359] EXT4-fs (loop1): 1 orphan inode deleted [ 199.448134][ T6359] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 200.041940][ T4481] team0 (unregistering): Port device team_slave_1 removed [ 200.070507][ T4481] team0 (unregistering): Port device team_slave_0 removed [ 200.102640][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.130245][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.282580][ T4481] bond0 (unregistering): Released all slaves [ 200.549411][ T6375] device syzkaller0 entered promiscuous mode [ 200.613769][ T6376] syzkaller0: tun_net_xmit 663 [ 200.618747][ T6376] syzkaller0: tun_net_xmit 663 [ 200.623624][ T6376] syzkaller0: tun_net_xmit 663 [ 200.628900][ T6376] syzkaller0: tun_net_xmit 663 [ 200.633790][ T6376] syzkaller0: tun_net_xmit 663 [ 200.638778][ T6376] syzkaller0: tun_net_xmit 663 [ 200.643800][ T6376] syzkaller0: tun_net_xmit 663 [ 200.648611][ T6376] syzkaller0: tun_net_xmit 663 [ 200.653476][ T6376] syzkaller0: tun_net_xmit 663 [ 200.658372][ T6376] syzkaller0: tun_net_xmit 663 [ 200.663218][ T6376] syzkaller0: tun_net_xmit 663 [ 200.668209][ T6376] syzkaller0: tun_net_xmit 663 [ 200.673145][ T6376] syzkaller0: tun_net_xmit 663 [ 200.678242][ T6376] syzkaller0: tun_net_xmit 663 [ 200.683186][ T6376] syzkaller0: tun_net_xmit 663 [ 200.688020][ T6376] syzkaller0: tun_net_xmit 663 [ 200.689107][ T6141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.692905][ T6376] syzkaller0: tun_net_xmit 663 [ 200.704469][ T6376] syzkaller0: tun_net_xmit 663 [ 200.709285][ T6376] syzkaller0: tun_net_xmit 663 [ 200.714120][ T6376] syzkaller0: tun_net_xmit 663 [ 200.718930][ T6376] syzkaller0: tun_net_xmit 663 [ 200.723827][ T6376] syzkaller0: tun_net_xmit 663 [ 200.728826][ T6376] syzkaller0: tun_net_xmit 663 [ 200.733759][ T6376] syzkaller0: tun_net_xmit 663 [ 200.738568][ T6376] syzkaller0: tun_net_xmit 663 [ 200.743407][ T6376] syzkaller0: tun_net_xmit 663 [ 200.748300][ T6376] syzkaller0: tun_net_xmit 663 [ 200.753228][ T6376] syzkaller0: tun_net_xmit 663 [ 200.758152][ T6376] syzkaller0: tun_net_xmit 663 [ 200.762964][ T6376] syzkaller0: tun_net_xmit 663 [ 200.767925][ T6376] syzkaller0: tun_net_xmit 663 [ 200.772742][ T6376] syzkaller0: tun_net_xmit 663 [ 200.777683][ T6376] syzkaller0: tun_net_xmit 663 [ 200.782745][ T6376] syzkaller0: tun_net_xmit 663 [ 200.787610][ T6376] syzkaller0: tun_net_xmit 663 [ 200.792408][ T6376] syzkaller0: tun_net_xmit 663 [ 200.797249][ T6376] syzkaller0: tun_net_xmit 663 [ 200.802040][ T6376] syzkaller0: tun_net_xmit 663 [ 200.807428][ T6376] syzkaller0: tun_net_xmit 663 [ 200.812419][ T6376] syzkaller0: tun_net_xmit 663 [ 200.817352][ T6376] syzkaller0: tun_net_xmit 663 [ 200.822577][ T6376] syzkaller0: tun_net_xmit 663 [ 200.827416][ T6376] syzkaller0: tun_net_xmit 663 [ 200.832520][ T6376] syzkaller0: tun_net_xmit 663 [ 200.837510][ T6376] syzkaller0: tun_net_xmit 663 [ 200.842575][ T6376] syzkaller0: tun_net_xmit 663 [ 200.848061][ T6376] syzkaller0: tun_net_xmit 663 [ 200.853270][ T6376] syzkaller0: tun_net_xmit 663 [ 200.858425][ T6376] syzkaller0: tun_net_xmit 663 [ 200.863263][ T6376] syzkaller0: tun_net_xmit 663 [ 200.868048][ T6376] syzkaller0: tun_net_xmit 663 [ 200.872840][ T6376] syzkaller0: tun_net_xmit 663 [ 200.877673][ T6376] syzkaller0: tun_net_xmit 663 [ 200.882465][ T6376] syzkaller0: tun_net_xmit 663 [ 200.887482][ T6376] syzkaller0: tun_net_xmit 663 [ 200.892360][ T6376] syzkaller0: tun_net_xmit 663 [ 200.897202][ T6376] syzkaller0: tun_net_xmit 663 [ 200.902017][ T6376] syzkaller0: tun_net_xmit 663 [ 200.907317][ T6376] syzkaller0: tun_net_xmit 663 [ 200.912126][ T6376] syzkaller0: tun_net_xmit 663 [ 200.917146][ T6376] syzkaller0: tun_net_xmit 663 [ 200.922117][ T6376] syzkaller0: tun_net_xmit 663 [ 200.927224][ T6376] syzkaller0: tun_net_xmit 663 [ 200.932289][ T6376] syzkaller0: tun_net_xmit 663 [ 200.937212][ T6376] syzkaller0: tun_net_xmit 663 [ 200.942185][ T6376] syzkaller0: tun_net_xmit 663 [ 200.947024][ T6376] syzkaller0: tun_net_xmit 663 [ 200.952106][ T6376] syzkaller0: tun_net_xmit 663 [ 200.957076][ T6376] syzkaller0: tun_net_xmit 663 [ 200.962004][ T6376] syzkaller0: tun_net_xmit 663 [ 200.966876][ T6376] syzkaller0: tun_net_xmit 663 [ 200.971767][ T6376] syzkaller0: tun_net_xmit 663 [ 200.976613][ T6376] syzkaller0: tun_net_xmit 663 [ 200.981417][ T6376] syzkaller0: tun_net_xmit 663 [ 200.986376][ T6376] syzkaller0: tun_net_xmit 663 [ 200.991182][ T6376] syzkaller0: tun_net_xmit 663 [ 200.996252][ T6376] syzkaller0: tun_net_xmit 663 [ 201.001510][ T6376] syzkaller0: tun_net_xmit 663 [ 201.006567][ T6376] syzkaller0: tun_net_xmit 663 [ 201.011596][ T6376] syzkaller0: tun_net_xmit 663 [ 201.016569][ T6376] syzkaller0: tun_net_xmit 663 [ 201.021631][ T6376] syzkaller0: tun_net_xmit 663 [ 201.026753][ T6376] syzkaller0: tun_net_xmit 663 [ 201.031655][ T6376] syzkaller0: tun_net_xmit 663 [ 201.036521][ T6376] syzkaller0: tun_net_xmit 663 [ 201.041541][ T6376] syzkaller0: tun_net_xmit 663 [ 201.046376][ T6376] syzkaller0: tun_net_xmit 663 [ 201.051407][ T6376] syzkaller0: tun_net_xmit 663 [ 201.056228][ T6376] syzkaller0: tun_net_xmit 663 [ 201.061012][ T6376] syzkaller0: tun_net_xmit 663 [ 201.066085][ T6376] syzkaller0: tun_net_xmit 663 [ 201.070878][ T6376] syzkaller0: tun_net_xmit 663 [ 201.076077][ T6376] syzkaller0: tun_net_xmit 663 [ 201.080980][ T6376] syzkaller0: tun_net_xmit 663 [ 201.085943][ T6376] syzkaller0: tun_net_xmit 663 [ 201.090856][ T6376] syzkaller0: tun_net_xmit 663 [ 201.095786][ T6376] syzkaller0: tun_net_xmit 663 [ 201.100672][ T6376] syzkaller0: tun_net_xmit 663 [ 201.105804][ T6376] syzkaller0: tun_net_xmit 663 [ 201.110756][ T6376] syzkaller0: tun_net_xmit 663 [ 201.115630][ T6376] syzkaller0: tun_net_xmit 663 [ 201.120488][ T6376] syzkaller0: tun_net_xmit 663 [ 201.125622][ T6376] syzkaller0: tun_net_xmit 663 [ 201.130608][ T6376] syzkaller0: tun_net_xmit 663 [ 201.135648][ T6376] syzkaller0: tun_net_xmit 663 [ 201.140484][ T6376] syzkaller0: tun_net_xmit 663 [ 201.145349][ T6376] syzkaller0: tun_net_xmit 663 [ 201.150154][ T6376] syzkaller0: tun_net_xmit 663 [ 201.155203][ T6376] syzkaller0: tun_net_xmit 97 [ 201.162438][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 201.171571][ T6141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.252206][ T6141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.278137][ T6141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.619499][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.761716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.003291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.038950][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.611286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.734907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.916182][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.923593][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.947699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.013992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.091247][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.713885][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.721080][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.917258][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.927130][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.944645][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.651443][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.836014][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.845587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.884368][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.934248][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.970862][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.052416][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.220766][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.341172][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.674682][ T6456] device syzkaller0 entered promiscuous mode [ 205.746647][ T6456] syzkaller0: tun_net_xmit 663 [ 205.751659][ T6456] syzkaller0: tun_net_xmit 663 [ 205.756547][ T6456] syzkaller0: tun_net_xmit 663 [ 205.761423][ T6456] syzkaller0: tun_net_xmit 663 [ 205.766255][ T6456] syzkaller0: tun_net_xmit 663 [ 205.771137][ T6456] syzkaller0: tun_net_xmit 663 [ 205.776068][ T6456] syzkaller0: tun_net_xmit 663 [ 205.780946][ T6456] syzkaller0: tun_net_xmit 663 [ 205.785813][ T6456] syzkaller0: tun_net_xmit 663 [ 205.790774][ T6456] syzkaller0: tun_net_xmit 663 [ 205.795790][ T6456] syzkaller0: tun_net_xmit 663 [ 205.800576][ T6456] syzkaller0: tun_net_xmit 663 [ 205.805577][ T6456] syzkaller0: tun_net_xmit 663 [ 205.810553][ T6456] syzkaller0: tun_net_xmit 663 [ 205.815387][ T6456] syzkaller0: tun_net_xmit 663 [ 205.820471][ T6456] syzkaller0: tun_net_xmit 663 [ 205.825345][ T6456] syzkaller0: tun_net_xmit 663 [ 205.830194][ T6456] syzkaller0: tun_net_xmit 663 [ 205.835193][ T6456] syzkaller0: tun_net_xmit 663 [ 205.839977][ T6456] syzkaller0: tun_net_xmit 663 [ 205.844797][ T6456] syzkaller0: tun_net_xmit 663 [ 205.849678][ T6456] syzkaller0: tun_net_xmit 663 [ 205.854497][ T6456] syzkaller0: tun_net_xmit 663 [ 205.859283][ T6456] syzkaller0: tun_net_xmit 663 [ 205.864370][ T6456] syzkaller0: tun_net_xmit 663 [ 205.869169][ T6456] syzkaller0: tun_net_xmit 663 [ 205.873999][ T6456] syzkaller0: tun_net_xmit 663 [ 205.878787][ T6456] syzkaller0: tun_net_xmit 663 [ 205.883609][ T6456] syzkaller0: tun_net_xmit 663 [ 205.888482][ T6456] syzkaller0: tun_net_xmit 663 [ 205.893308][ T6456] syzkaller0: tun_net_xmit 663 [ 205.898175][ T6456] syzkaller0: tun_net_xmit 663 [ 205.903112][ T6456] syzkaller0: tun_net_xmit 663 [ 205.907982][ T6456] syzkaller0: tun_net_xmit 663 [ 205.912854][ T6456] syzkaller0: tun_net_xmit 663 [ 205.917713][ T6456] syzkaller0: tun_net_xmit 663 [ 205.922499][ T6456] syzkaller0: tun_net_xmit 663 [ 205.927409][ T6456] syzkaller0: tun_net_xmit 663 [ 205.932468][ T6456] syzkaller0: tun_net_xmit 663 [ 205.937293][ T6456] syzkaller0: tun_net_xmit 663 [ 205.942167][ T6456] syzkaller0: tun_net_xmit 663 [ 205.947001][ T6456] syzkaller0: tun_net_xmit 663 [ 205.951798][ T6456] syzkaller0: tun_net_xmit 663 [ 205.956772][ T6456] syzkaller0: tun_net_xmit 663 [ 205.961643][ T6456] syzkaller0: tun_net_xmit 663 [ 205.966477][ T6456] syzkaller0: tun_net_xmit 663 [ 205.971265][ T6456] syzkaller0: tun_net_xmit 663 [ 205.976178][ T6456] syzkaller0: tun_net_xmit 663 [ 205.980978][ T6456] syzkaller0: tun_net_xmit 663 [ 205.985852][ T6456] syzkaller0: tun_net_xmit 663 [ 205.990653][ T6456] syzkaller0: tun_net_xmit 663 [ 205.995608][ T6456] syzkaller0: tun_net_xmit 663 [ 206.000615][ T6456] syzkaller0: tun_net_xmit 663 [ 206.005445][ T6456] syzkaller0: tun_net_xmit 663 [ 206.010416][ T6456] syzkaller0: tun_net_xmit 663 [ 206.015332][ T6456] syzkaller0: tun_net_xmit 663 [ 206.020296][ T6456] syzkaller0: tun_net_xmit 663 [ 206.026023][ T6456] syzkaller0: tun_net_xmit 663 [ 206.030924][ T6456] syzkaller0: tun_net_xmit 663 [ 206.035860][ T6456] syzkaller0: tun_net_xmit 663 [ 206.040673][ T6456] syzkaller0: tun_net_xmit 663 [ 206.045494][ T6456] syzkaller0: tun_net_xmit 663 [ 206.050392][ T6456] syzkaller0: tun_net_xmit 663 [ 206.055225][ T6456] syzkaller0: tun_net_xmit 663 [ 206.060104][ T6456] syzkaller0: tun_net_xmit 663 [ 206.064968][ T6456] syzkaller0: tun_net_xmit 663 [ 206.069773][ T6456] syzkaller0: tun_net_xmit 663 [ 206.074600][ T6456] syzkaller0: tun_net_xmit 663 [ 206.079821][ T6456] syzkaller0: tun_net_xmit 663 [ 206.084648][ T6456] syzkaller0: tun_net_xmit 663 [ 206.089438][ T6456] syzkaller0: tun_net_xmit 663 [ 206.094633][ T6456] syzkaller0: tun_net_xmit 663 [ 206.099439][ T6456] syzkaller0: tun_net_xmit 663 [ 206.104269][ T6456] syzkaller0: tun_net_xmit 663 [ 206.109059][ T6456] syzkaller0: tun_net_xmit 663 [ 206.113884][ T6456] syzkaller0: tun_net_xmit 663 [ 206.118668][ T6456] syzkaller0: tun_net_xmit 663 [ 206.123480][ T6456] syzkaller0: tun_net_xmit 663 [ 206.128277][ T6456] syzkaller0: tun_net_xmit 663 [ 206.133143][ T6456] syzkaller0: tun_net_xmit 663 [ 206.137944][ T6456] syzkaller0: tun_net_xmit 663 [ 206.142853][ T6456] syzkaller0: tun_net_xmit 663 [ 206.147801][ T6456] syzkaller0: tun_net_xmit 663 [ 206.152593][ T6456] syzkaller0: tun_net_xmit 663 [ 206.157543][ T6456] syzkaller0: tun_net_xmit 663 [ 206.162370][ T6456] syzkaller0: tun_net_xmit 663 [ 206.167279][ T6456] syzkaller0: tun_net_xmit 663 [ 206.172164][ T6456] syzkaller0: tun_net_xmit 663 [ 206.177082][ T6456] syzkaller0: tun_net_xmit 663 [ 206.181868][ T6456] syzkaller0: tun_net_xmit 663 [ 206.186785][ T6456] syzkaller0: tun_net_xmit 663 [ 206.191656][ T6456] syzkaller0: tun_net_xmit 663 [ 206.196491][ T6456] syzkaller0: tun_net_xmit 663 [ 206.202593][ T6456] syzkaller0: tun_net_xmit 663 [ 206.208115][ T6456] syzkaller0: tun_net_xmit 663 [ 206.213313][ T6456] syzkaller0: tun_net_xmit 663 [ 206.218377][ T6456] syzkaller0: tun_net_xmit 663 [ 206.224429][ T6456] syzkaller0: tun_net_xmit 663 [ 206.229327][ T6456] syzkaller0: tun_net_xmit 663 [ 206.234167][ T6456] syzkaller0: tun_net_xmit 663 [ 206.239061][ T6456] syzkaller0: tun_net_xmit 663 [ 206.244018][ T6456] syzkaller0: tun_net_xmit 663 [ 206.248819][ T6456] syzkaller0: tun_net_xmit 663 [ 206.253821][ T6456] syzkaller0: tun_net_xmit 663 [ 206.258611][ T6456] syzkaller0: tun_net_xmit 663 [ 206.263784][ T6456] syzkaller0: tun_net_xmit 663 [ 206.268574][ T6456] syzkaller0: tun_net_xmit 663 [ 206.273582][ T6456] syzkaller0: tun_net_xmit 663 [ 206.278458][ T6456] syzkaller0: tun_net_xmit 97 [ 206.997536][ T26] audit: type=1326 audit(1784286571.016:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.0.479" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90fecf8e99 code=0x0 [ 208.535822][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.553811][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.062766][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.965158][ T6535] device syzkaller0 entered promiscuous mode [ 211.023394][ T6535] syzkaller0: tun_net_xmit 663 [ 211.028245][ T6535] syzkaller0: tun_net_xmit 663 [ 211.033124][ T6535] syzkaller0: tun_net_xmit 663 [ 211.037940][ T6535] syzkaller0: tun_net_xmit 663 [ 211.042744][ T6535] syzkaller0: tun_net_xmit 663 [ 211.047674][ T6535] syzkaller0: tun_net_xmit 663 [ 211.052482][ T6535] syzkaller0: tun_net_xmit 663 [ 211.057414][ T6535] syzkaller0: tun_net_xmit 663 [ 211.062214][ T6535] syzkaller0: tun_net_xmit 663 [ 211.067054][ T6535] syzkaller0: tun_net_xmit 663 [ 211.071888][ T6535] syzkaller0: tun_net_xmit 663 [ 211.076736][ T6535] syzkaller0: tun_net_xmit 663 [ 211.081630][ T6535] syzkaller0: tun_net_xmit 663 [ 211.086457][ T6535] syzkaller0: tun_net_xmit 663 [ 211.091346][ T6535] syzkaller0: tun_net_xmit 663 [ 211.096309][ T6535] syzkaller0: tun_net_xmit 663 [ 211.101119][ T6535] syzkaller0: tun_net_xmit 663 [ 211.105969][ T6535] syzkaller0: tun_net_xmit 663 [ 211.110858][ T6535] syzkaller0: tun_net_xmit 663 [ 211.115700][ T6535] syzkaller0: tun_net_xmit 663 [ 211.120586][ T6535] syzkaller0: tun_net_xmit 663 [ 211.125494][ T6535] syzkaller0: tun_net_xmit 663 [ 211.130284][ T6535] syzkaller0: tun_net_xmit 663 [ 211.135101][ T6535] syzkaller0: tun_net_xmit 663 [ 211.139906][ T6535] syzkaller0: tun_net_xmit 663 [ 211.144746][ T6535] syzkaller0: tun_net_xmit 663 [ 211.149546][ T6535] syzkaller0: tun_net_xmit 663 [ 211.154366][ T6535] syzkaller0: tun_net_xmit 663 [ 211.159205][ T6535] syzkaller0: tun_net_xmit 663 [ 211.164040][ T6535] syzkaller0: tun_net_xmit 663 [ 211.168835][ T6535] syzkaller0: tun_net_xmit 663 [ 211.173749][ T6535] syzkaller0: tun_net_xmit 663 [ 211.178668][ T6535] syzkaller0: tun_net_xmit 663 [ 211.183517][ T6535] syzkaller0: tun_net_xmit 663 [ 211.188410][ T6535] syzkaller0: tun_net_xmit 663 [ 211.193463][ T6535] syzkaller0: tun_net_xmit 663 [ 211.198350][ T6535] syzkaller0: tun_net_xmit 663 [ 211.203195][ T6535] syzkaller0: tun_net_xmit 663 [ 211.208377][ T6535] syzkaller0: tun_net_xmit 663 [ 211.213321][ T6535] syzkaller0: tun_net_xmit 663 [ 211.218120][ T6535] syzkaller0: tun_net_xmit 663 [ 211.222927][ T6535] syzkaller0: tun_net_xmit 663 [ 211.227893][ T6535] syzkaller0: tun_net_xmit 663 [ 211.232680][ T6535] syzkaller0: tun_net_xmit 663 [ 211.237536][ T6535] syzkaller0: tun_net_xmit 663 [ 211.242342][ T6535] syzkaller0: tun_net_xmit 663 [ 211.247278][ T6535] syzkaller0: tun_net_xmit 663 [ 211.252085][ T6535] syzkaller0: tun_net_xmit 663 [ 211.257111][ T6535] syzkaller0: tun_net_xmit 663 [ 211.262085][ T6535] syzkaller0: tun_net_xmit 663 [ 211.266929][ T6535] syzkaller0: tun_net_xmit 663 [ 211.271726][ T6535] syzkaller0: tun_net_xmit 663 [ 211.276577][ T6535] syzkaller0: tun_net_xmit 663 [ 211.281384][ T6535] syzkaller0: tun_net_xmit 663 [ 211.286333][ T6535] syzkaller0: tun_net_xmit 663 [ 211.291129][ T6535] syzkaller0: tun_net_xmit 663 [ 211.295981][ T6535] syzkaller0: tun_net_xmit 663 [ 211.300776][ T6535] syzkaller0: tun_net_xmit 663 [ 211.305623][ T6535] syzkaller0: tun_net_xmit 663 [ 211.310423][ T6535] syzkaller0: tun_net_xmit 663 [ 211.315381][ T6535] syzkaller0: tun_net_xmit 663 [ 211.320199][ T6535] syzkaller0: tun_net_xmit 663 [ 211.325046][ T6535] syzkaller0: tun_net_xmit 663 [ 211.329838][ T6535] syzkaller0: tun_net_xmit 663 [ 211.334704][ T6535] syzkaller0: tun_net_xmit 663 [ 211.339860][ T6535] syzkaller0: tun_net_xmit 663 [ 211.344709][ T6535] syzkaller0: tun_net_xmit 663 [ 211.349504][ T6535] syzkaller0: tun_net_xmit 663 [ 211.354349][ T6535] syzkaller0: tun_net_xmit 663 [ 211.359146][ T6535] syzkaller0: tun_net_xmit 663 [ 211.363990][ T6535] syzkaller0: tun_net_xmit 663 [ 211.368781][ T6535] syzkaller0: tun_net_xmit 663 [ 211.373624][ T6535] syzkaller0: tun_net_xmit 663 [ 211.378432][ T6535] syzkaller0: tun_net_xmit 663 [ 211.383284][ T6535] syzkaller0: tun_net_xmit 663 [ 211.388090][ T6535] syzkaller0: tun_net_xmit 663 [ 211.392889][ T6535] syzkaller0: tun_net_xmit 663 [ 211.397771][ T6535] syzkaller0: tun_net_xmit 663 [ 211.403017][ T6535] syzkaller0: tun_net_xmit 663 [ 211.407870][ T6535] syzkaller0: tun_net_xmit 663 [ 211.412670][ T6535] syzkaller0: tun_net_xmit 663 [ 211.417514][ T6535] syzkaller0: tun_net_xmit 663 [ 211.422308][ T6535] syzkaller0: tun_net_xmit 663 [ 211.427273][ T6535] syzkaller0: tun_net_xmit 663 [ 211.432098][ T6535] syzkaller0: tun_net_xmit 663 [ 211.437230][ T6535] syzkaller0: tun_net_xmit 663 [ 211.442074][ T6535] syzkaller0: tun_net_xmit 663 [ 211.446940][ T6535] syzkaller0: tun_net_xmit 663 [ 211.451910][ T6535] syzkaller0: tun_net_xmit 663 [ 211.456764][ T6535] syzkaller0: tun_net_xmit 663 [ 211.461833][ T6535] syzkaller0: tun_net_xmit 663 [ 211.466696][ T6535] syzkaller0: tun_net_xmit 663 [ 211.471582][ T6535] syzkaller0: tun_net_xmit 663 [ 211.476427][ T6535] syzkaller0: tun_net_xmit 663 [ 211.481215][ T6535] syzkaller0: tun_net_xmit 663 [ 211.486327][ T6535] syzkaller0: tun_net_xmit 663 [ 211.491723][ T6535] syzkaller0: tun_net_xmit 663 [ 211.496587][ T6535] syzkaller0: tun_net_xmit 663 [ 211.501469][ T6535] syzkaller0: tun_net_xmit 663 [ 211.506320][ T6535] syzkaller0: tun_net_xmit 663 [ 211.511120][ T6535] syzkaller0: tun_net_xmit 663 [ 211.516021][ T6535] syzkaller0: tun_net_xmit 663 [ 211.520811][ T6535] syzkaller0: tun_net_xmit 663 [ 211.525665][ T6535] syzkaller0: tun_net_xmit 663 [ 211.530722][ T6535] syzkaller0: tun_net_xmit 663 [ 211.535634][ T6535] syzkaller0: tun_net_xmit 663 [ 211.540600][ T6535] syzkaller0: tun_net_xmit 663 [ 211.545618][ T6535] syzkaller0: tun_net_xmit 663 [ 211.550417][ T6535] syzkaller0: tun_net_xmit 97 [ 211.703296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.740017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.420110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.431106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.454863][ T6549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.495'. [ 212.479855][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.496'. [ 212.498837][ T6141] device veth0_vlan entered promiscuous mode [ 212.510465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.529564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.599821][ T6141] device veth1_vlan entered promiscuous mode [ 212.922268][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.259403][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.355539][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.437215][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.489959][ T6141] device veth0_macvtap entered promiscuous mode [ 214.540080][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.600716][ T6141] device veth1_macvtap entered promiscuous mode [ 214.792188][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.023851][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.341962][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.373387][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.434818][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.595904][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.751625][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.947932][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.101320][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.337765][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.397890][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.448254][ T6614] 9pnet: Could not find request transport: fdfdno= [ 217.482061][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.513194][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.549037][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.575232][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.597364][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.615660][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.629466][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.661094][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.693735][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.761915][ T6141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.784996][ T6141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.794326][ T6141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.803281][ T6141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.845751][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.863977][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.932897][ T6633] device syzkaller0 entered promiscuous mode [ 218.001336][ T6633] syzkaller0: tun_net_xmit 663 [ 218.006361][ T6633] syzkaller0: tun_net_xmit 663 [ 218.011665][ T6633] syzkaller0: tun_net_xmit 663 [ 218.016829][ T6633] syzkaller0: tun_net_xmit 663 [ 218.021640][ T6633] syzkaller0: tun_net_xmit 663 [ 218.026501][ T6633] syzkaller0: tun_net_xmit 663 [ 218.031307][ T6633] syzkaller0: tun_net_xmit 663 [ 218.036156][ T6633] syzkaller0: tun_net_xmit 663 [ 218.040982][ T6633] syzkaller0: tun_net_xmit 663 [ 218.045938][ T6633] syzkaller0: tun_net_xmit 663 [ 218.050944][ T6633] syzkaller0: tun_net_xmit 663 [ 218.055808][ T6633] syzkaller0: tun_net_xmit 663 [ 218.060606][ T6633] syzkaller0: tun_net_xmit 663 [ 218.065441][ T6633] syzkaller0: tun_net_xmit 663 [ 218.070413][ T6633] syzkaller0: tun_net_xmit 663 [ 218.075251][ T6633] syzkaller0: tun_net_xmit 663 [ 218.080134][ T6633] syzkaller0: tun_net_xmit 663 [ 218.084977][ T6633] syzkaller0: tun_net_xmit 663 [ 218.089774][ T6633] syzkaller0: tun_net_xmit 663 [ 218.094609][ T6633] syzkaller0: tun_net_xmit 663 [ 218.099584][ T6633] syzkaller0: tun_net_xmit 663 [ 218.104503][ T6633] syzkaller0: tun_net_xmit 663 [ 218.109290][ T6633] syzkaller0: tun_net_xmit 663 [ 218.114204][ T6633] syzkaller0: tun_net_xmit 663 [ 218.119228][ T6633] syzkaller0: tun_net_xmit 663 [ 218.124177][ T6633] syzkaller0: tun_net_xmit 663 [ 218.129234][ T6633] syzkaller0: tun_net_xmit 663 [ 218.134252][ T6633] syzkaller0: tun_net_xmit 663 [ 218.139171][ T6633] syzkaller0: tun_net_xmit 663 [ 218.144275][ T6633] syzkaller0: tun_net_xmit 663 [ 218.149297][ T6633] syzkaller0: tun_net_xmit 663 [ 218.154232][ T6633] syzkaller0: tun_net_xmit 663 [ 218.159067][ T6633] syzkaller0: tun_net_xmit 663 [ 218.163909][ T6633] syzkaller0: tun_net_xmit 663 [ 218.168956][ T6633] syzkaller0: tun_net_xmit 663 [ 218.173998][ T6633] syzkaller0: tun_net_xmit 663 [ 218.179165][ T6633] syzkaller0: tun_net_xmit 663 [ 218.184033][ T6633] syzkaller0: tun_net_xmit 663 [ 218.188842][ T6633] syzkaller0: tun_net_xmit 663 [ 218.193687][ T6633] syzkaller0: tun_net_xmit 663 [ 218.198487][ T6633] syzkaller0: tun_net_xmit 663 [ 218.203335][ T6633] syzkaller0: tun_net_xmit 663 [ 218.208134][ T6633] syzkaller0: tun_net_xmit 663 [ 218.212931][ T6633] syzkaller0: tun_net_xmit 663 [ 218.217910][ T6633] syzkaller0: tun_net_xmit 663 [ 218.222711][ T6633] syzkaller0: tun_net_xmit 663 [ 218.222734][ T6633] syzkaller0: tun_net_xmit 663 [ 218.222752][ T6633] syzkaller0: tun_net_xmit 663 [ 218.237282][ T6633] syzkaller0: tun_net_xmit 663 [ 218.242095][ T6633] syzkaller0: tun_net_xmit 663 [ 218.247223][ T6633] syzkaller0: tun_net_xmit 663 [ 218.252072][ T6633] syzkaller0: tun_net_xmit 663 [ 218.257025][ T6633] syzkaller0: tun_net_xmit 663 [ 218.261817][ T6633] syzkaller0: tun_net_xmit 663 [ 218.266765][ T6633] syzkaller0: tun_net_xmit 663 [ 218.271560][ T6633] syzkaller0: tun_net_xmit 663 [ 218.276503][ T6633] syzkaller0: tun_net_xmit 663 [ 218.281403][ T6633] syzkaller0: tun_net_xmit 663 [ 218.286320][ T6633] syzkaller0: tun_net_xmit 663 [ 218.291113][ T6633] syzkaller0: tun_net_xmit 663 [ 218.295942][ T6633] syzkaller0: tun_net_xmit 663 [ 218.300906][ T6633] syzkaller0: tun_net_xmit 663 [ 218.305955][ T6633] syzkaller0: tun_net_xmit 663 [ 218.310768][ T6633] syzkaller0: tun_net_xmit 663 [ 218.315927][ T6633] syzkaller0: tun_net_xmit 663 [ 218.321013][ T6633] syzkaller0: tun_net_xmit 663 [ 218.326359][ T6633] syzkaller0: tun_net_xmit 663 [ 218.331315][ T6633] syzkaller0: tun_net_xmit 663 [ 218.336220][ T6633] syzkaller0: tun_net_xmit 663 [ 218.341443][ T6633] syzkaller0: tun_net_xmit 663 [ 218.346347][ T6633] syzkaller0: tun_net_xmit 663 [ 218.351131][ T6633] syzkaller0: tun_net_xmit 663 [ 218.355953][ T6633] syzkaller0: tun_net_xmit 663 [ 218.360910][ T6633] syzkaller0: tun_net_xmit 663 [ 218.366006][ T6633] syzkaller0: tun_net_xmit 663 [ 218.370943][ T6633] syzkaller0: tun_net_xmit 663 [ 218.375782][ T6633] syzkaller0: tun_net_xmit 663 [ 218.380574][ T6633] syzkaller0: tun_net_xmit 663 [ 218.385477][ T6633] syzkaller0: tun_net_xmit 663 [ 218.390269][ T6633] syzkaller0: tun_net_xmit 663 [ 218.395104][ T6633] syzkaller0: tun_net_xmit 663 [ 218.399894][ T6633] syzkaller0: tun_net_xmit 663 [ 218.405064][ T6633] syzkaller0: tun_net_xmit 663 [ 218.410029][ T6633] syzkaller0: tun_net_xmit 663 [ 218.414852][ T6633] syzkaller0: tun_net_xmit 663 [ 218.419756][ T6633] syzkaller0: tun_net_xmit 663 [ 218.424617][ T6633] syzkaller0: tun_net_xmit 663 [ 218.429421][ T6633] syzkaller0: tun_net_xmit 663 [ 218.434255][ T6633] syzkaller0: tun_net_xmit 663 [ 218.439170][ T6633] syzkaller0: tun_net_xmit 663 [ 218.444194][ T6633] syzkaller0: tun_net_xmit 663 [ 218.449083][ T6633] syzkaller0: tun_net_xmit 663 [ 218.454057][ T6633] syzkaller0: tun_net_xmit 663 [ 218.459058][ T6633] syzkaller0: tun_net_xmit 663 [ 218.464763][ T6633] syzkaller0: tun_net_xmit 663 [ 218.469746][ T6633] syzkaller0: tun_net_xmit 663 [ 218.476942][ T6633] syzkaller0: tun_net_xmit 663 [ 218.481935][ T6633] syzkaller0: tun_net_xmit 663 [ 218.487300][ T6633] syzkaller0: tun_net_xmit 663 [ 218.492084][ T6633] syzkaller0: tun_net_xmit 663 [ 218.496905][ T6633] syzkaller0: tun_net_xmit 663 [ 218.501684][ T6633] syzkaller0: tun_net_xmit 663 [ 218.506511][ T6633] syzkaller0: tun_net_xmit 663 [ 218.511291][ T6633] syzkaller0: tun_net_xmit 663 [ 218.516451][ T6633] syzkaller0: tun_net_xmit 663 [ 218.521324][ T6633] syzkaller0: tun_net_xmit 663 [ 218.526140][ T6633] syzkaller0: tun_net_xmit 663 [ 218.530936][ T6633] syzkaller0: tun_net_xmit 663 [ 218.535755][ T6633] syzkaller0: tun_net_xmit 97 [ 219.187605][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.197108][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.344657][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.364828][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.407099][ T4229] syzkaller0: tun_net_xmit 70 [ 219.425662][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.474091][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.599369][ T6669] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 220.608252][ T6669] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 220.617269][ T6669] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 221.744795][ T6683] device syzkaller0 entered promiscuous mode [ 221.946208][ T6697] device syzkaller0 entered promiscuous mode [ 222.982814][ T6696] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.006004][ T6696] device syzkaller0 entered promiscuous mode [ 223.120423][ T6708] 9pnet: Could not find request transport: fdfdno= [ 223.463822][ T6717] device syzkaller0 entered promiscuous mode [ 223.488877][ T6717] syzkaller0: tun_net_xmit 663 [ 223.493760][ T6717] syzkaller0: tun_net_xmit 663 [ 223.498564][ T6717] syzkaller0: tun_net_xmit 663 [ 223.503422][ T6717] syzkaller0: tun_net_xmit 663 [ 223.508410][ T6717] syzkaller0: tun_net_xmit 663 [ 223.513259][ T6717] syzkaller0: tun_net_xmit 663 [ 223.518246][ T6717] syzkaller0: tun_net_xmit 663 [ 223.523269][ T6717] syzkaller0: tun_net_xmit 663 [ 223.528076][ T6717] syzkaller0: tun_net_xmit 663 [ 223.533050][ T6717] syzkaller0: tun_net_xmit 663 [ 223.537974][ T6717] syzkaller0: tun_net_xmit 663 [ 223.542781][ T6717] syzkaller0: tun_net_xmit 663 [ 223.547722][ T6717] syzkaller0: tun_net_xmit 663 [ 223.552536][ T6717] syzkaller0: tun_net_xmit 663 [ 223.557368][ T6717] syzkaller0: tun_net_xmit 663 [ 223.562343][ T6717] syzkaller0: tun_net_xmit 663 [ 223.567249][ T6717] syzkaller0: tun_net_xmit 663 [ 223.572080][ T6717] syzkaller0: tun_net_xmit 663 [ 223.576934][ T6717] syzkaller0: tun_net_xmit 663 [ 223.581919][ T6717] syzkaller0: tun_net_xmit 663 [ 223.586779][ T6717] syzkaller0: tun_net_xmit 663 [ 223.591765][ T6717] syzkaller0: tun_net_xmit 663 [ 223.596768][ T6717] syzkaller0: tun_net_xmit 663 [ 223.601601][ T6717] syzkaller0: tun_net_xmit 663 [ 223.606734][ T6717] syzkaller0: tun_net_xmit 663 [ 223.612075][ T6717] syzkaller0: tun_net_xmit 663 [ 223.616940][ T6717] syzkaller0: tun_net_xmit 663 [ 223.621747][ T6717] syzkaller0: tun_net_xmit 663 [ 223.626745][ T6717] syzkaller0: tun_net_xmit 663 [ 223.632003][ T6717] syzkaller0: tun_net_xmit 663 [ 223.636861][ T6717] syzkaller0: tun_net_xmit 663 [ 223.641844][ T6717] syzkaller0: tun_net_xmit 663 [ 223.646798][ T6717] syzkaller0: tun_net_xmit 663 [ 223.651950][ T6717] syzkaller0: tun_net_xmit 663 [ 223.656816][ T6717] syzkaller0: tun_net_xmit 663 [ 223.661622][ T6717] syzkaller0: tun_net_xmit 663 [ 223.666491][ T6717] syzkaller0: tun_net_xmit 663 [ 223.671297][ T6717] syzkaller0: tun_net_xmit 663 [ 223.676159][ T6717] syzkaller0: tun_net_xmit 663 [ 223.681057][ T6717] syzkaller0: tun_net_xmit 663 [ 223.685916][ T6717] syzkaller0: tun_net_xmit 663 [ 223.690712][ T6717] syzkaller0: tun_net_xmit 663 [ 223.695578][ T6717] syzkaller0: tun_net_xmit 663 [ 223.700381][ T6717] syzkaller0: tun_net_xmit 663 [ 223.705671][ T6717] syzkaller0: tun_net_xmit 663 [ 223.710738][ T6717] syzkaller0: tun_net_xmit 663 [ 223.715852][ T6717] syzkaller0: tun_net_xmit 663 [ 223.720743][ T6717] syzkaller0: tun_net_xmit 663 [ 223.725816][ T6717] syzkaller0: tun_net_xmit 663 [ 223.730782][ T6717] syzkaller0: tun_net_xmit 663 [ 223.735646][ T6717] syzkaller0: tun_net_xmit 663 [ 223.740449][ T6717] syzkaller0: tun_net_xmit 663 [ 223.745302][ T6717] syzkaller0: tun_net_xmit 663 [ 223.750538][ T6717] syzkaller0: tun_net_xmit 663 [ 223.755389][ T6717] syzkaller0: tun_net_xmit 663 [ 223.760194][ T6717] syzkaller0: tun_net_xmit 663 [ 223.765055][ T6717] syzkaller0: tun_net_xmit 663 [ 223.769940][ T6717] syzkaller0: tun_net_xmit 663 [ 223.774908][ T6717] syzkaller0: tun_net_xmit 663 [ 223.779976][ T6717] syzkaller0: tun_net_xmit 663 [ 223.784920][ T6717] syzkaller0: tun_net_xmit 663 [ 223.789993][ T6717] syzkaller0: tun_net_xmit 663 [ 223.794842][ T6717] syzkaller0: tun_net_xmit 663 [ 223.799639][ T6717] syzkaller0: tun_net_xmit 663 [ 223.804555][ T6717] syzkaller0: tun_net_xmit 663 [ 223.809631][ T6717] syzkaller0: tun_net_xmit 663 [ 223.814652][ T6717] syzkaller0: tun_net_xmit 663 [ 223.819887][ T6717] syzkaller0: tun_net_xmit 663 [ 223.825604][ T6717] syzkaller0: tun_net_xmit 663 [ 223.830666][ T6717] syzkaller0: tun_net_xmit 663 [ 223.835633][ T6717] syzkaller0: tun_net_xmit 663 [ 223.840441][ T6717] syzkaller0: tun_net_xmit 663 [ 223.845263][ T6717] syzkaller0: tun_net_xmit 663 [ 223.850056][ T6717] syzkaller0: tun_net_xmit 663 [ 223.854998][ T6717] syzkaller0: tun_net_xmit 663 [ 223.860747][ T6717] syzkaller0: tun_net_xmit 663 [ 223.866184][ T6717] syzkaller0: tun_net_xmit 663 [ 223.871763][ T6717] syzkaller0: tun_net_xmit 663 [ 223.876799][ T6717] syzkaller0: tun_net_xmit 663 [ 223.881967][ T6717] syzkaller0: tun_net_xmit 663 [ 223.886812][ T6717] syzkaller0: tun_net_xmit 663 [ 223.891613][ T6717] syzkaller0: tun_net_xmit 663 [ 223.896631][ T6717] syzkaller0: tun_net_xmit 663 [ 223.901620][ T6717] syzkaller0: tun_net_xmit 663 [ 223.906450][ T6717] syzkaller0: tun_net_xmit 663 [ 223.911243][ T6717] syzkaller0: tun_net_xmit 663 [ 223.916074][ T6717] syzkaller0: tun_net_xmit 663 [ 223.921042][ T6717] syzkaller0: tun_net_xmit 663 [ 223.926059][ T6717] syzkaller0: tun_net_xmit 663 [ 223.931303][ T6717] syzkaller0: tun_net_xmit 663 [ 223.936251][ T6717] syzkaller0: tun_net_xmit 663 [ 223.941605][ T6717] syzkaller0: tun_net_xmit 663 [ 223.946536][ T6717] syzkaller0: tun_net_xmit 663 [ 223.951525][ T6717] syzkaller0: tun_net_xmit 663 [ 223.956442][ T6717] syzkaller0: tun_net_xmit 663 [ 223.961247][ T6717] syzkaller0: tun_net_xmit 663 [ 223.966237][ T6717] syzkaller0: tun_net_xmit 663 [ 223.971124][ T6717] syzkaller0: tun_net_xmit 663 [ 223.976196][ T6717] syzkaller0: tun_net_xmit 663 [ 223.981127][ T6717] syzkaller0: tun_net_xmit 663 [ 223.987206][ T6717] syzkaller0: tun_net_xmit 663 [ 223.992454][ T6717] syzkaller0: tun_net_xmit 663 [ 223.997857][ T6717] syzkaller0: tun_net_xmit 663 [ 224.003623][ T6717] syzkaller0: tun_net_xmit 663 [ 224.008604][ T6717] syzkaller0: tun_net_xmit 663 [ 224.014952][ T6717] syzkaller0: tun_net_xmit 663 [ 224.020191][ T6717] syzkaller0: tun_net_xmit 663 [ 224.025717][ T6717] syzkaller0: tun_net_xmit 663 [ 224.030865][ T6717] syzkaller0: tun_net_xmit 97 [ 226.147143][ T6758] loop0: detected capacity change from 0 to 256 [ 226.249281][ T6747] device syzkaller0 entered promiscuous mode [ 226.778738][ T6772] 9pnet: Could not find request transport: fdfdno= [ 226.785339][ T6770] overlayfs: missing 'lowerdir' [ 230.898989][ T6801] tipc: Started in network mode [ 230.958832][ T6801] tipc: Node identity 7606eb41684d, cluster identity 4711 [ 230.980794][ T6801] tipc: Enabled bearer , priority 0 [ 231.224703][ T6800] tipc: Disabling bearer [ 232.098051][ T6817] device syzkaller0 entered promiscuous mode [ 232.180755][ T6827] 9pnet: Could not find request transport: fdfdno= [ 232.313681][ T6831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.552'. [ 233.710704][ T6837] comedi comedi0: comedi_config --init_data is deprecated [ 233.845970][ T6842] device syzkaller0 entered promiscuous mode [ 234.989410][ T6854] loop4: detected capacity change from 0 to 512 [ 236.280306][ T6854] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 236.295650][ T6854] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.467576][ T26] audit: type=1800 audit(1784286600.466:6): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.558" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 237.319557][ T6871] tipc: Enabled bearer , priority 0 [ 238.065587][ T6870] tipc: Disabling bearer [ 239.943830][ T6900] 9pnet: Could not find request transport: fdfdno= [ 241.252234][ T6921] device syzkaller0 entered promiscuous mode [ 242.998125][ T6943] device syzkaller0 entered promiscuous mode [ 243.241926][ T6949] tipc: Enabled bearer , priority 0 [ 243.330478][ T6948] tipc: Disabling bearer [ 243.558690][ T6959] loop3: detected capacity change from 0 to 512 [ 243.959579][ T6959] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 243.975288][ T6959] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.121190][ T26] audit: type=1800 audit(1784286608.126:7): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.574" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 244.842327][ T6966] loop1: detected capacity change from 0 to 1024 [ 246.306073][ T6966] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.792231][ T6992] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 247.441662][ T7005] 9pnet: Could not find request transport: fdfdno= [ 247.489278][ T6999] device syzkaller0 entered promiscuous mode [ 249.573837][ T7033] overlayfs: missing 'workdir' [ 250.308971][ T7024] device syzkaller0 entered promiscuous mode [ 251.320236][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 252.608039][ T7082] loop4: detected capacity change from 0 to 256 [ 252.652465][ T7083] 9pnet: Could not find request transport: fdfdno= [ 254.298093][ T7085] device syzkaller0 entered promiscuous mode [ 254.521451][ T7102] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 254.650159][ T7108] device syzkaller0 entered promiscuous mode [ 255.656048][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.662561][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.485005][ T7160] 9pnet: Could not find request transport: fdfdno= [ 257.195786][ T7172] device syzkaller0 entered promiscuous mode [ 257.218777][ T7174] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 257.310724][ T7182] device syzkaller0 entered promiscuous mode [ 258.973022][ T7220] loop5: detected capacity change from 0 to 512 [ 259.058183][ T7220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 259.122496][ T7220] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.624: bad orphan inode 131083 [ 259.134396][ T7220] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 259.230611][ T7230] loop4: detected capacity change from 0 to 8192 [ 259.285742][ T7230] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.457459][ T7236] 9pnet: Could not find request transport: fdfdno= [ 260.472286][ T7238] device syzkaller0 entered promiscuous mode [ 260.754352][ T7252] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 261.104564][ T7263] device syzkaller0 entered promiscuous mode [ 262.694065][ T7292] 9pnet: Could not find request transport: fdfdno= [ 267.360317][ T7311] loop4: detected capacity change from 0 to 128 [ 267.387687][ T7309] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 267.392306][ T7311] EXT4-fs (loop4): Ignoring removed nobh option [ 267.444383][ T7311] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 267.470645][ T7311] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.496423][ T7306] device syzkaller0 entered promiscuous mode [ 267.557915][ T7311] EXT4-fs (loop4): shut down requested (1) [ 267.832906][ T7312] device syzkaller0 entered promiscuous mode [ 268.614160][ T7346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 268.797448][ T7346] loop3: detected capacity change from 0 to 4096 [ 272.487285][ T7338] device syzkaller0 entered promiscuous mode [ 272.711765][ T7358] loop3: detected capacity change from 0 to 128 [ 274.953489][ T7358] EXT4-fs (loop3): Test dummy encryption mode enabled [ 275.164583][ T7358] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 275.280159][ T7358] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.711636][ T7409] device syzkaller0 entered promiscuous mode [ 277.849401][ T7381] chnl_net:caif_netlink_parms(): no params data found [ 278.135397][ T7425] loop0: detected capacity change from 0 to 1024 [ 278.507833][ T7425] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.668249][ T4607] Bluetooth: hci5: command 0x0409 tx timeout [ 278.707117][ T7425] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 278.813312][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.831073][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.894007][ T7381] device bridge_slave_0 entered promiscuous mode [ 278.929206][ T7425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 278.935578][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.953245][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.961541][ T7381] device bridge_slave_1 entered promiscuous mode [ 279.163677][ T7440] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 279.696090][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.731209][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.823855][ T7444] device syzkaller0 entered promiscuous mode [ 279.880679][ T7381] team0: Port device team_slave_0 added [ 280.006124][ T7381] team0: Port device team_slave_1 added [ 280.070130][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.154312][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.260994][ T7381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.433655][ T7452] device syzkaller0 entered promiscuous mode [ 280.463860][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.509949][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.557657][ T7381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.723201][ T4226] Bluetooth: hci5: command 0x041b tx timeout [ 280.785683][ T7473] loop1: detected capacity change from 0 to 1024 [ 280.820764][ T7476] loop3: detected capacity change from 0 to 128 [ 280.892150][ T7473] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.895908][ T7476] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 281.013520][ T7476] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.079512][ T7381] device hsr_slave_0 entered promiscuous mode [ 281.331417][ T7381] device hsr_slave_1 entered promiscuous mode [ 281.693554][ T7381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.768535][ T7476] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 63: comm syz.3.676: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 281.781718][ T7381] Cannot create hsr debugfs directory [ 281.913519][ T7476] EXT4-fs (loop3): Remounting filesystem read-only [ 281.938273][ T7476] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 281.973284][ T7476] EXT4-fs (loop3): Remounting filesystem read-only [ 282.776074][ T4226] Bluetooth: hci5: command 0x040f tx timeout [ 283.830715][ T7381] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.916066][ T7517] loop0: detected capacity change from 0 to 8 [ 283.953567][ T7381] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.014001][ T7381] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.081739][ T7381] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.092770][ T7514] loop3: detected capacity change from 0 to 4096 [ 284.410763][ T7520] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 284.512210][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.572897][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.594017][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.616184][ T7381] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.652839][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.670527][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.697508][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.704941][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.770891][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.800293][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.830943][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.853619][ T4607] Bluetooth: hci5: command 0x0419 tx timeout [ 284.872395][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.879603][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.921301][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.971542][ T7514] EXT4-fs (loop3): inline encryption not supported [ 285.014274][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.050685][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.061719][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.103692][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.153359][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.203625][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.266704][ T7514] EXT4-fs (loop3): Test dummy encryption mode enabled [ 285.291099][ T7514] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 285.327884][ T7514] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 285.358570][ T7514] System zones: 0-5 [ 285.391011][ T7531] device syzkaller0 entered promiscuous mode [ 285.397880][ T7514] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 285.429103][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.453998][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.472737][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.485659][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.497227][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.811880][ T7514] fs-verity: sha512 using implementation "sha512-avx2" [ 286.099952][ T7547] syz.3.688 uses obsolete (PF_INET,SOCK_PACKET) [ 286.170633][ T7544] device syzkaller0 entered promiscuous mode [ 286.336808][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.355983][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.400038][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.801329][ T7570] loop4: detected capacity change from 0 to 4096 [ 287.815002][ T7572] device syzkaller0 entered promiscuous mode [ 287.913774][ T7570] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.524751][ T7583] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.694: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 288.560384][ T7583] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.694: directory missing '..' [ 288.641132][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.657219][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.735166][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.761686][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.804249][ T7381] device veth0_vlan entered promiscuous mode [ 288.821709][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.840639][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.972721][ T7381] device veth1_vlan entered promiscuous mode [ 289.077886][ T7381] device veth0_macvtap entered promiscuous mode [ 289.086620][ T7590] loop0: detected capacity change from 0 to 8 [ 289.097634][ T7381] device veth1_macvtap entered promiscuous mode [ 289.163367][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.223628][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.255655][ T7588] loop4: detected capacity change from 0 to 4096 [ 289.262979][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.273839][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.283712][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.466011][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.522017][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.574115][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.631243][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.699086][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.747925][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.762778][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.780568][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.839061][ T7588] EXT4-fs (loop4): inline encryption not supported [ 289.864720][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.895603][ T7588] EXT4-fs (loop4): Test dummy encryption mode enabled [ 289.912899][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.931308][ T7588] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 289.955509][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.965227][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.974153][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.985266][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.111365][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.163696][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.178069][ T7588] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 290.187817][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.198886][ T7588] System zones: 0-5 [ 290.210425][ T7588] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 290.220320][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.356261][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.387288][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.408352][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.421734][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.431957][ T7381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.443088][ T7381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.489333][ T7381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.512393][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.567440][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.601576][ T7381] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.642535][ T7381] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.652697][ T7381] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.680328][ T7381] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.805544][ T7614] device syzkaller0 entered promiscuous mode [ 291.061212][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.101635][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.141228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.273551][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.295561][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.323318][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.701118][ T7644] 9pnet: Could not find request transport: fdfdno= [ 293.937669][ T7663] netlink: 56 bytes leftover after parsing attributes in process `syz.1.717'. [ 294.703281][ T7669] device syzkaller0 entered promiscuous mode [ 294.868419][ T7673] device syzkaller0 entered promiscuous mode [ 295.089266][ T7682] loop1: detected capacity change from 0 to 4096 [ 295.152009][ T7682] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 295.203256][ T7682] EXT4-fs (loop1): Test dummy encryption mode enabled [ 295.501422][ T7682] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 296.198399][ T7699] device syzkaller0 entered promiscuous mode [ 296.372816][ T7682] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 296.466034][ T7697] overlayfs: failed to resolve './bus': -2 [ 296.597968][ T7715] 9pnet: Could not find request transport: fdfdno= [ 298.046966][ T7733] device syzkaller0 entered promiscuous mode [ 298.113098][ T7743] loop0: detected capacity change from 0 to 512 [ 298.478758][ T7743] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 298.493700][ T7743] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.659764][ T7741] input: syz0 as /devices/virtual/input/input6 [ 301.399916][ T7775] loop4: detected capacity change from 0 to 128 [ 301.529282][ T7775] EXT4-fs (loop4): Test dummy encryption mode enabled [ 301.571731][ T7775] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 301.596112][ T7775] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.124612][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 305.717570][ T7807] device syzkaller0 entered promiscuous mode [ 310.485262][ T7858] device syzkaller0 entered promiscuous mode [ 310.527479][ T7869] loop1: detected capacity change from 0 to 1024 [ 311.287409][ T7869] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 312.069950][ T7891] device syzkaller0 entered promiscuous mode [ 312.275503][ T7901] 0x000000000010-0x000300000020 : "" [ 312.286244][ T7901] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff0 [ 312.326383][ T7901] ftl_cs: FTL header corrupt! [ 313.670397][ T4395] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.399702][ T7922] device syzkaller0 entered promiscuous mode [ 314.569002][ T4395] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.679357][ T7958] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 314.804820][ T4395] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.825236][ T7958] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 314.839319][ T7965] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 314.891479][ T7956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.920127][ T4395] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.776119][ T7974] device syzkaller0 entered promiscuous mode [ 315.814959][ T7985] loop0: detected capacity change from 0 to 256 [ 317.100768][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.107310][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.142716][ T4395] tipc: Left network mode [ 317.188832][ T8001] loop0: detected capacity change from 0 to 4096 [ 317.241247][ T8001] EXT4-fs (loop0): inline encryption not supported [ 317.289084][ T8001] EXT4-fs (loop0): Test dummy encryption mode enabled [ 317.323918][ T8001] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 317.381131][ T8001] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 317.392970][ T8014] device syzkaller0 left promiscuous mode [ 317.401869][ T8001] System zones: 0-5 [ 317.425165][ T8001] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 317.446380][ T8019] device syzkaller0 entered promiscuous mode [ 319.102491][ T8057] loop0: detected capacity change from 0 to 256 [ 320.031705][ T8070] device syzkaller0 entered promiscuous mode [ 320.057634][ T8073] overlayfs: upper fs does not support file handles, falling back to index=off. [ 320.106610][ T8077] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 320.137598][ T8076] device syzkaller0 entered promiscuous mode [ 320.254848][ T8083] device syzkaller0 entered promiscuous mode [ 322.736238][ T8122] device syzkaller1 entered promiscuous mode [ 324.195033][ T4395] device hsr_slave_0 left promiscuous mode [ 324.208067][ T4395] device hsr_slave_1 left promiscuous mode [ 324.271744][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.283155][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.356630][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.372937][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.382168][ T4395] device bridge_slave_1 left promiscuous mode [ 324.389127][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.402395][ T4395] device bridge_slave_0 left promiscuous mode [ 324.409510][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.432778][ T4395] device veth1_macvtap left promiscuous mode [ 324.439453][ T4395] device veth0_macvtap left promiscuous mode [ 324.447333][ T4395] device veth1_vlan left promiscuous mode [ 324.463612][ T4395] device veth0_vlan left promiscuous mode [ 324.564953][ T8166] loop0: detected capacity change from 0 to 4096 [ 324.590762][ T8166] EXT4-fs (loop0): inline encryption not supported [ 324.614247][ T8166] EXT4-fs (loop0): Test dummy encryption mode enabled [ 324.622302][ T8166] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 324.640536][ T8166] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 324.652199][ T8166] System zones: 0-5 [ 324.661947][ T8166] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 324.825030][ T4395] team0 (unregistering): Port device team_slave_1 removed [ 324.876488][ T4395] team0 (unregistering): Port device team_slave_0 removed [ 324.892852][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.916895][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.056576][ T4395] bond0 (unregistering): Released all slaves [ 325.144924][ T8132] device syzkaller0 entered promiscuous mode [ 332.740729][ T8229] device syzkaller0 left promiscuous mode [ 333.266180][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.844'. [ 335.254613][ T8267] loop4: detected capacity change from 0 to 4096 [ 335.588984][ T8267] EXT4-fs (loop4): inline encryption not supported [ 335.856169][ T8267] EXT4-fs (loop4): Test dummy encryption mode enabled [ 336.673276][ T8267] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 336.840161][ T8267] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 336.893278][ T8267] System zones: 0-5 [ 336.973792][ T8267] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 337.103524][ T8284] device syzkaller0 entered promiscuous mode [ 339.861577][ T8335] loop6: detected capacity change from 0 to 4096 [ 339.938015][ T8335] EXT4-fs (loop6): inline encryption not supported [ 339.983427][ T8335] EXT4-fs (loop6): Test dummy encryption mode enabled [ 340.018454][ T8335] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 340.099879][ T8335] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 340.134676][ T8335] System zones: 0-5 [ 340.273571][ T8335] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 341.667406][ T8357] device syzkaller0 entered promiscuous mode [ 342.442797][ T8360] loop6: detected capacity change from 0 to 512 [ 342.567613][ T8367] device syzkaller0 entered promiscuous mode [ 342.591663][ T8360] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 342.683926][ T8360] EXT4-fs (loop6): 1 truncate cleaned up [ 342.689820][ T8360] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 344.069717][ T8392] loop0: detected capacity change from 0 to 1024 [ 344.237583][ T8392] EXT4-fs (loop0): inline encryption not supported [ 344.467688][ T8392] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue. Quota mode: none. [ 344.503206][ T8392] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.756963][ T8419] loop0: detected capacity change from 0 to 8 [ 345.792481][ T8418] loop6: detected capacity change from 0 to 512 [ 346.343291][ T8418] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 346.531233][ T8418] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.880: bg 0: block 104: invalid block bitmap [ 346.572112][ T8418] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 346.666556][ T8427] device syzkaller0 entered promiscuous mode [ 346.673245][ T8418] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.880: invalid indirect mapped block 1 (level 1) [ 346.801985][ T8418] EXT4-fs (loop6): 1 truncate cleaned up [ 346.829128][ T8418] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.332340][ T8440] device syzkaller0 left promiscuous mode [ 347.959478][ T8447] device syzkaller0 entered promiscuous mode [ 348.420703][ T8459] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 348.429468][ T8459] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 348.438330][ T8459] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 350.815536][ T8479] device syzkaller0 entered promiscuous mode [ 350.953581][ T8484] binder: 8483:8484 unknown command 0 [ 350.983224][ T8484] binder: 8483:8484 ioctl c0306201 2000000001c0 returned -22 [ 351.132242][ T8494] device syzkaller0 entered promiscuous mode [ 352.583577][ T8533] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 352.593239][ T8533] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 352.602287][ T8533] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 353.571774][ T8540] device syzkaller0 entered promiscuous mode [ 353.790382][ T8545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.908'. [ 355.441880][ T8573] device syzkaller1 entered promiscuous mode [ 355.719770][ T8583] loop1: detected capacity change from 0 to 512 [ 356.316762][ T8583] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 356.564937][ T8583] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.704163][ T8602] device syzkaller0 entered promiscuous mode [ 356.837798][ T8613] device syzkaller0 entered promiscuous mode [ 359.280877][ T8661] loop3: detected capacity change from 0 to 8 [ 359.337367][ T8661] SQUASHFS error: zlib decompression failed, data probably corrupt [ 359.376768][ T8663] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 359.385041][ T8663] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 359.393692][ T8663] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 359.464374][ T8661] SQUASHFS error: Failed to read block 0x9b: -5 [ 359.486091][ T8661] SQUASHFS error: Unable to read metadata cache entry [99] [ 359.573820][ T8661] SQUASHFS error: Unable to read inode 0x127 [ 360.465187][ T8670] device syzkaller0 entered promiscuous mode [ 360.853630][ T8684] device syzkaller0 entered promiscuous mode [ 361.000804][ T8693] loop4: detected capacity change from 0 to 1024 [ 361.112496][ T8693] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,nombcache,barrier,noinit_itable,debug_want_extra_isize=0x0000000000000080,lazytime,dax=inode,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 361.264742][ T8704] device syzkaller0 entered promiscuous mode [ 361.596100][ T8713] overlayfs: failed to clone upperpath [ 363.420618][ T8738] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 363.429083][ T8738] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 363.437763][ T8738] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 364.079194][ T8763] device syzkaller0 entered promiscuous mode [ 365.672712][ T8795] device syzkaller0 entered promiscuous mode [ 365.743677][ T8799] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 365.753724][ T8799] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 365.762903][ T8799] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 367.958103][ T8825] siw: device registration error -23 [ 370.552599][ T8849] tipc: Enabling of bearer rejected, failed to enable media [ 371.094763][ T8864] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 371.103438][ T8864] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 371.112032][ T8864] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 372.056064][ T8874] device syzkaller0 entered promiscuous mode [ 372.590346][ T8887] loop4: detected capacity change from 0 to 4096 [ 372.780521][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 373.442880][ T8897] loop1: detected capacity change from 0 to 4096 [ 373.552463][ T8897] EXT4-fs (loop1): inline encryption not supported [ 373.593523][ T8897] EXT4-fs (loop1): Test dummy encryption mode enabled [ 373.660258][ T8897] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 373.732564][ T8897] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 373.769853][ T8897] System zones: 0-5 [ 373.846286][ T8897] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 374.226364][ T8918] device syzkaller0 entered promiscuous mode [ 374.461595][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 374.644141][ T8932] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 374.652585][ T8932] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 374.661523][ T8932] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 377.134538][ T8971] loop1: detected capacity change from 0 to 4096 [ 377.205196][ T8971] EXT4-fs (loop1): inline encryption not supported [ 377.251160][ T8971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 377.307171][ T8971] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 377.371075][ T8971] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 377.393217][ T8971] System zones: 0-5 [ 377.405353][ T8971] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 378.142134][ T8983] device syzkaller0 entered promiscuous mode [ 378.382358][ T8997] tipc: Enabling of bearer rejected, failed to enable media [ 378.484064][ T8999] device syzkaller0 entered promiscuous mode [ 378.546117][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.553100][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.204932][ T9010] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 380.213982][ T9010] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 380.222895][ T9010] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 380.839938][ T9020] loop1: detected capacity change from 0 to 4096 [ 381.436059][ T9020] EXT4-fs (loop1): inline encryption not supported [ 381.461787][ T9020] EXT4-fs (loop1): Test dummy encryption mode enabled [ 381.500240][ T9020] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 381.573995][ T9043] device syzkaller0 entered promiscuous mode [ 381.596126][ T9020] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 381.633223][ T9020] System zones: 0-5 [ 381.711143][ T9020] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 381.866272][ T9051] device syzkaller0 entered promiscuous mode [ 382.406717][ T9077] device syzkaller0 entered promiscuous mode [ 383.429647][ T9105] device syzkaller0 entered promiscuous mode [ 384.322312][ T9112] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 384.395905][ T9112] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 384.431153][ T9112] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 384.781482][ T9131] device syzkaller0 entered promiscuous mode [ 386.437667][ T9158] tipc: Enabling of bearer rejected, failed to enable media [ 386.553946][ T9162] loop1: detected capacity change from 0 to 8 [ 386.716583][ T9163] device syzkaller0 entered promiscuous mode [ 387.305090][ T9176] device syzkaller0 entered promiscuous mode [ 387.385462][ T9182] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 387.394138][ T9182] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 387.402818][ T9182] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 388.771281][ T9202] loop3: detected capacity change from 0 to 4096 [ 388.854214][ T9206] device syzkaller0 entered promiscuous mode [ 388.889020][ T9202] EXT4-fs (loop3): inline encryption not supported [ 388.913436][ T9202] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.946196][ T9202] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 389.007183][ T9202] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 389.039385][ T9202] System zones: 0-5 [ 389.090785][ T9202] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 389.721503][ T9228] device syzkaller0 entered promiscuous mode [ 389.828202][ T9231] tipc: Enabled bearer , priority 0 [ 389.976211][ T9233] ================================================================== [ 389.984797][ T9233] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 389.993456][ T9233] Read of size 2 at addr ffff88805f97f942 by task syz.1.1057/9233 [ 390.001302][ T9233] [ 390.003680][ T9233] CPU: 1 PID: 9233 Comm: syz.1.1057 Not tainted syzkaller #0 [ 390.011432][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 390.021706][ T9233] Call Trace: [ 390.025021][ T9233] [ 390.028090][ T9233] dump_stack_lvl+0x188/0x250 [ 390.032803][ T9233] ? show_regs_print_info+0x20/0x20 [ 390.038202][ T9233] ? _printk+0xda/0x130 [ 390.042411][ T9233] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 390.048696][ T9233] ? load_image+0x410/0x410 [ 390.053234][ T9233] print_address_description+0x60/0x2d0 [ 390.058896][ T9233] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 390.065165][ T9233] kasan_report+0xdf/0x130 [ 390.069607][ T9233] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 390.075873][ T9233] ieee80211_monitor_select_queue+0x23a/0x240 [ 390.081974][ T9233] ? ieee80211_recalc_smps_work+0x20/0x20 [ 390.087815][ T9233] netdev_core_pick_tx+0x12c/0x300 [ 390.092965][ T9233] __dev_queue_xmit+0x797/0x2e50 [ 390.098031][ T9233] ? __might_sleep+0xf0/0xf0 [ 390.102690][ T9233] ? dev_queue_xmit+0x20/0x20 [ 390.107393][ T9233] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 390.112974][ T9233] ? packet_cached_dev_get+0x270/0x270 [ 390.118471][ T9233] packet_sendmsg+0x3cf9/0x50b0 [ 390.123460][ T9233] ? __might_sleep+0xf0/0xf0 [ 390.128089][ T9233] ? aa_sk_perm+0x7dc/0x910 [ 390.132631][ T9233] ? packet_getsockopt+0x9a0/0x9a0 [ 390.137777][ T9233] ? aa_sock_msg_perm+0x94/0x150 [ 390.142742][ T9233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 390.148182][ T9233] ? security_socket_sendmsg+0x7c/0xa0 [ 390.153684][ T9233] ? packet_getsockopt+0x9a0/0x9a0 [ 390.158831][ T9233] ____sys_sendmsg+0x5be/0x8f0 [ 390.163642][ T9233] ? __sys_sendmsg_sock+0x30/0x30 [ 390.168813][ T9233] ? import_iovec+0x6f/0xa0 [ 390.173359][ T9233] ___sys_sendmsg+0x236/0x2e0 [ 390.178073][ T9233] ? __sys_sendmsg+0x290/0x290 [ 390.182910][ T9233] __se_sys_sendmsg+0x1b7/0x2a0 [ 390.187796][ T9233] ? __x64_sys_sendmsg+0x80/0x80 [ 390.192758][ T9233] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 390.198781][ T9233] ? lockdep_hardirqs_on+0x94/0x140 [ 390.204015][ T9233] do_syscall_64+0x4c/0xa0 [ 390.208452][ T9233] ? clear_bhb_loop+0x30/0x80 [ 390.213154][ T9233] ? clear_bhb_loop+0x30/0x80 [ 390.217861][ T9233] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.223778][ T9233] RIP: 0033:0x7f79bbd31e99 [ 390.228226][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.248045][ T9233] RSP: 002b:00007f79b9f8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.256519][ T9233] RAX: ffffffffffffffda RBX: 00007f79bbfb9fa0 RCX: 00007f79bbd31e99 [ 390.264557][ T9233] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000008 [ 390.272565][ T9233] RBP: 00007f79bbdc7eaf R08: 0000000000000000 R09: 0000000000000000 [ 390.280569][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.288586][ T9233] R13: 00007f79bbfba038 R14: 00007f79bbfb9fa0 R15: 00007ffc584210b8 [ 390.296616][ T9233] [ 390.299663][ T9233] [ 390.302013][ T9233] Allocated by task 9231: [ 390.306444][ T9233] __kasan_kmalloc+0xaf/0xe0 [ 390.311059][ T9233] __alloc_skb+0x22c/0x750 [ 390.315494][ T9233] __napi_alloc_skb+0x151/0x2d0 [ 390.320368][ T9233] page_to_skb+0x279/0xce0 [ 390.324805][ T9233] receive_buf+0x1496/0x5870 [ 390.329423][ T9233] virtnet_poll+0x511/0xe90 [ 390.333968][ T9233] __napi_poll+0xbb/0x430 [ 390.338322][ T9233] net_rx_action+0x522/0xa80 [ 390.342941][ T9233] handle_softirqs+0x336/0x830 [ 390.347734][ T9233] __irq_exit_rcu+0x13b/0x230 [ 390.352435][ T9233] irq_exit_rcu+0x5/0x20 [ 390.356695][ T9233] common_interrupt+0xb5/0xd0 [ 390.361390][ T9233] asm_common_interrupt+0x22/0x40 [ 390.366536][ T9233] [ 390.368875][ T9233] Freed by task 9231: [ 390.372870][ T9233] kasan_set_track+0x4b/0x70 [ 390.377481][ T9233] kasan_set_free_info+0x1f/0x40 [ 390.382444][ T9233] ____kasan_slab_free+0xd5/0x110 [ 390.387502][ T9233] slab_free_freelist_hook+0xec/0x170 [ 390.392908][ T9233] kfree+0xef/0x2a0 [ 390.396737][ T9233] skb_release_data+0x667/0x830 [ 390.401604][ T9233] __kfree_skb+0x4c/0x60 [ 390.405866][ T9233] tcp_rcv_established+0xeb4/0x1d00 [ 390.411131][ T9233] tcp_v4_do_rcv+0x435/0x9b0 [ 390.415761][ T9233] tcp_v4_rcv+0x264c/0x2c80 [ 390.420393][ T9233] ip_protocol_deliver_rcu+0x38c/0x740 [ 390.425885][ T9233] ip_local_deliver_finish+0x1d8/0x320 [ 390.431596][ T9233] NF_HOOK+0x303/0x390 [ 390.435692][ T9233] ip_sublist_rcv+0xa17/0xd10 [ 390.440398][ T9233] ip_list_rcv+0x3e9/0x440 [ 390.444887][ T9233] __netif_receive_skb_list_core+0x57e/0x770 [ 390.450892][ T9233] netif_receive_skb_list_internal+0x898/0xbd0 [ 390.457073][ T9233] napi_complete_done+0x37e/0x850 [ 390.462124][ T9233] virtnet_poll+0x8f5/0xe90 [ 390.466652][ T9233] __napi_poll+0xbb/0x430 [ 390.471003][ T9233] net_rx_action+0x522/0xa80 [ 390.475612][ T9233] handle_softirqs+0x336/0x830 [ 390.480394][ T9233] __irq_exit_rcu+0x13b/0x230 [ 390.485187][ T9233] irq_exit_rcu+0x5/0x20 [ 390.489460][ T9233] common_interrupt+0xb5/0xd0 [ 390.494165][ T9233] asm_common_interrupt+0x22/0x40 [ 390.499214][ T9233] [ 390.501661][ T9233] Last potentially related work creation: [ 390.507392][ T9233] kasan_save_stack+0x35/0x60 [ 390.512286][ T9233] kasan_record_aux_stack+0xb8/0x100 [ 390.517603][ T9233] insert_work+0x54/0x3d0 [ 390.522054][ T9233] __queue_work+0x90b/0xc80 [ 390.526668][ T9233] call_timer_fn+0x17b/0x540 [ 390.531289][ T9233] __run_timers+0x598/0x810 [ 390.536002][ T9233] run_timer_softirq+0x63/0xf0 [ 390.540885][ T9233] handle_softirqs+0x336/0x830 [ 390.545683][ T9233] run_ksoftirqd+0xa4/0x100 [ 390.550215][ T9233] smpboot_thread_fn+0x520/0x990 [ 390.555184][ T9233] kthread+0x42e/0x520 [ 390.559461][ T9233] ret_from_fork+0x1f/0x30 [ 390.563909][ T9233] [ 390.566256][ T9233] The buggy address belongs to the object at ffff88805f97f800 [ 390.566256][ T9233] which belongs to the cache kmalloc-512 of size 512 [ 390.580339][ T9233] The buggy address is located 322 bytes inside of [ 390.580339][ T9233] 512-byte region [ffff88805f97f800, ffff88805f97fa00) [ 390.593839][ T9233] The buggy address belongs to the page: [ 390.599594][ T9233] page:ffffea00017e5f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f97c [ 390.609876][ T9233] head:ffffea00017e5f00 order:2 compound_mapcount:0 compound_pincount:0 [ 390.618230][ T9233] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 390.626233][ T9233] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 390.634834][ T9233] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 390.643418][ T9233] page dumped because: kasan: bad access detected [ 390.649889][ T9233] page_owner tracks the page as allocated [ 390.655622][ T9233] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4190, ts 63122819685, free_ts 63121531908 [ 390.674721][ T9233] get_page_from_freelist+0x24f6/0x2670 [ 390.680280][ T9233] __alloc_pages+0x1ee/0x480 [ 390.684869][ T9233] new_slab+0xc0/0x4b0 [ 390.688935][ T9233] ___slab_alloc+0x807/0xdd0 [ 390.693633][ T9233] __kmalloc+0x11d/0x340 [ 390.697873][ T9233] fib6_info_alloc+0x2e/0xe0 [ 390.702465][ T9233] ip6_route_info_create+0x455/0x1220 [ 390.707836][ T9233] ip6_route_add+0x24/0x130 [ 390.712337][ T9233] addrconf_add_dev+0x295/0x3c0 [ 390.717196][ T9233] inet6_addr_add+0x19f/0x9b0 [ 390.721958][ T9233] inet6_rtm_newaddr+0x64c/0x8f0 [ 390.726978][ T9233] rtnetlink_rcv_msg+0x82c/0xf00 [ 390.731915][ T9233] netlink_rcv_skb+0x1e9/0x430 [ 390.736676][ T9233] netlink_unicast+0x78f/0x940 [ 390.741444][ T9233] netlink_sendmsg+0x8ba/0xbe0 [ 390.746208][ T9233] __sys_sendto+0x46d/0x620 [ 390.750740][ T9233] page last free stack trace: [ 390.755408][ T9233] free_unref_page_prepare+0x637/0x6c0 [ 390.760866][ T9233] free_unref_page+0x8f/0x2a0 [ 390.765539][ T9233] stack_depot_save+0x42f/0x460 [ 390.770389][ T9233] __kasan_slab_alloc+0xa9/0xc0 [ 390.775235][ T9233] slab_post_alloc_hook+0x4c/0x380 [ 390.780346][ T9233] kmem_cache_alloc+0x15d/0x280 [ 390.785195][ T9233] fib6_add_1+0x71c/0x13c0 [ 390.789616][ T9233] fib6_add+0x1e0/0x3ee0 [ 390.793856][ T9233] ip6_route_add+0x86/0x130 [ 390.798358][ T9233] add_v4_addrs+0x930/0xcc0 [ 390.802876][ T9233] addrconf_init_auto_addrs+0x358/0xab0 [ 390.808435][ T9233] addrconf_notify+0xa6b/0xf20 [ 390.813370][ T9233] raw_notifier_call_chain+0xcb/0x160 [ 390.818743][ T9233] __dev_notify_flags+0x194/0x300 [ 390.823769][ T9233] dev_change_flags+0xda/0x1a0 [ 390.828531][ T9233] do_setlink+0xca4/0x29d0 [ 390.832947][ T9233] [ 390.835268][ T9233] Memory state around the buggy address: [ 390.840893][ T9233] ffff88805f97f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.849039][ T9233] ffff88805f97f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.857097][ T9233] >ffff88805f97f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.865149][ T9233] ^ [ 390.871380][ T9233] ffff88805f97f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.879436][ T9233] ffff88805f97fa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 390.887491][ T9233] ================================================================== [ 390.895544][ T9233] Disabling lock debugging due to kernel taint [ 390.901824][ T9233] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 390.909020][ T9233] CPU: 1 PID: 9233 Comm: syz.1.1057 Tainted: G B syzkaller #0 [ 390.917942][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 390.928031][ T9233] Call Trace: [ 390.931320][ T9233] [ 390.934250][ T9233] dump_stack_lvl+0x188/0x250 [ 390.938937][ T9233] ? show_regs_print_info+0x20/0x20 [ 390.944137][ T9233] ? load_image+0x410/0x410 [ 390.948644][ T9233] panic+0x2f8/0x850 [ 390.952538][ T9233] ? bpf_jit_dump+0xd0/0xd0 [ 390.957037][ T9233] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 390.962929][ T9233] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 390.968821][ T9233] ? _raw_spin_unlock+0x40/0x40 [ 390.973673][ T9233] ? print_memory_metadata+0x314/0x400 [ 390.979144][ T9233] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 390.985424][ T9233] check_panic_on_warn+0x80/0xa0 [ 390.990530][ T9233] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 390.996800][ T9233] end_report+0x6d/0xf0 [ 391.000965][ T9233] kasan_report+0x102/0x130 [ 391.005476][ T9233] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 391.011721][ T9233] ieee80211_monitor_select_queue+0x23a/0x240 [ 391.017895][ T9233] ? ieee80211_recalc_smps_work+0x20/0x20 [ 391.023612][ T9233] netdev_core_pick_tx+0x12c/0x300 [ 391.029007][ T9233] __dev_queue_xmit+0x797/0x2e50 [ 391.033947][ T9233] ? __might_sleep+0xf0/0xf0 [ 391.038541][ T9233] ? dev_queue_xmit+0x20/0x20 [ 391.043214][ T9233] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 391.048760][ T9233] ? packet_cached_dev_get+0x270/0x270 [ 391.054222][ T9233] packet_sendmsg+0x3cf9/0x50b0 [ 391.059076][ T9233] ? __might_sleep+0xf0/0xf0 [ 391.063665][ T9233] ? aa_sk_perm+0x7dc/0x910 [ 391.068342][ T9233] ? packet_getsockopt+0x9a0/0x9a0 [ 391.073451][ T9233] ? aa_sock_msg_perm+0x94/0x150 [ 391.078389][ T9233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 391.083669][ T9233] ? security_socket_sendmsg+0x7c/0xa0 [ 391.089127][ T9233] ? packet_getsockopt+0x9a0/0x9a0 [ 391.094232][ T9233] ____sys_sendmsg+0x5be/0x8f0 [ 391.098998][ T9233] ? __sys_sendmsg_sock+0x30/0x30 [ 391.104023][ T9233] ? import_iovec+0x6f/0xa0 [ 391.108540][ T9233] ___sys_sendmsg+0x236/0x2e0 [ 391.113245][ T9233] ? __sys_sendmsg+0x290/0x290 [ 391.118118][ T9233] __se_sys_sendmsg+0x1b7/0x2a0 [ 391.122970][ T9233] ? __x64_sys_sendmsg+0x80/0x80 [ 391.127916][ T9233] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 391.133900][ T9233] ? lockdep_hardirqs_on+0x94/0x140 [ 391.139098][ T9233] do_syscall_64+0x4c/0xa0 [ 391.143508][ T9233] ? clear_bhb_loop+0x30/0x80 [ 391.148354][ T9233] ? clear_bhb_loop+0x30/0x80 [ 391.153115][ T9233] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.159007][ T9233] RIP: 0033:0x7f79bbd31e99 [ 391.163507][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.183205][ T9233] RSP: 002b:00007f79b9f8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.191637][ T9233] RAX: ffffffffffffffda RBX: 00007f79bbfb9fa0 RCX: 00007f79bbd31e99 [ 391.199613][ T9233] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000008 [ 391.207587][ T9233] RBP: 00007f79bbdc7eaf R08: 0000000000000000 R09: 0000000000000000 [ 391.215559][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.223527][ T9233] R13: 00007f79bbfba038 R14: 00007f79bbfb9fa0 R15: 00007ffc584210b8 [ 391.231589][ T9233] [ 391.234705][ T9233] Kernel Offset: disabled [ 391.239024][ T9233] Rebooting in 86400 seconds..