last executing test programs: 5m16.882673945s ago: executing program 1 (id=17): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x2, 0x1518, &(0x7f0000000280)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2001091, 0x0) socket(0x8, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) socket$inet6(0xa, 0xa, 0x8001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) 5m15.167819057s ago: executing program 1 (id=21): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m11.673271444s ago: executing program 1 (id=25): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0) 5m8.666960287s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 5m7.956413581s ago: executing program 4 (id=34): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x1008819, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5590, &(0x7f0000005d00)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000002d00)='./file0\x00', 0x1000c40, &(0x7f0000000000)={[{@i_version}, {@nomblk_io_submit}]}, 0x1, 0x523, &(0x7f00000027c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000002340)='.\x00', 0x12000, 0xa0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 5m6.767394548s ago: executing program 1 (id=36): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)=ANY=[@ANYBLOB="696f636842a438e87c2ed1578945f361727365743d63703934392c73686f72746e616d653d77696e6e742c757466383d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c726f6469722c757466383d312c726f6469722c69727365743d63703836392c73686f72746e616d653d6d697865642c726f6469722c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f63686172"], 0x1, 0x28e, &(0x7f0000001200)="$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") connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/127, 0xfffffffffffffca2}, 0x5}], 0x1, 0x40012041, 0x0) 5m6.180260436s ago: executing program 1 (id=38): syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000004200)=0xb) 5m4.945154265s ago: executing program 32 (id=38): syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000004200)=0xb) 5m3.736001733s ago: executing program 4 (id=45): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x2, 0x1518, &(0x7f0000000280)="$eJzs3Au4TtXWOPAx5pxLm8Sb5D7HHIs3uUySJJeERJIkR5J7QpIkSUhscktCEnJPcg/JLST3+y33JDmSJAkJSeb/0anPOadzTuf8z/k+3/Pt8Xue9ew59nrHeMfa4332u9baz36/7jCoct0qFWszM/xb8E9fUgEgBQD6AkBmAIgAoESWElkAh0J6jan/3pOI/6wHp17pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpOa+VLe1u/8r9/wz/aOfv3v8Huf//v468//8fcrjI6M/XF7m+47+QIvNP22T+aZvMP22T+adtMv+0Teb/f1wEUOEf7Jb5p20yfyHSsit9/1m2K7td6defEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoi04Vy4zADAr+sr3ZcQQgghhBBCCCH+c8JVfx6lu3KNCCGEEEIIIYQQ4r8RggINBiJIB1dBCqSHDHA1ZIRrIBNkhgRcC1ngOsgK10M2yA45ICfkgtyQBywQOGCIIS/kgyTcAPnhRigABaEQFAYPRaAo3ATF4GYoDrdACbgVSsJtUApKQxkoC7dDObgDykMFqAh3QiW4CypDFbgbqsI9UA3uhepwH9SA+6EmPAC14A9QGx6EOvAQ1IWHoR7UhwbQEBpBY2jy/5X/PHSBF6ArdINU6A494EXoCb2gN/SBvvAS9IOXoT+8AgNgIAyCV2EwvAZD4HUYCsNgOLwBI2AkjILRMAbGwjh4E8bDWzAB3oaJMAkmwxSYCtNgOrwDM2AmzIJ3YTa8B3NgLsyD+bAA3oeFsAgWwwewBD6EpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGt8BFsg+2wA3bCLtgNe+Bj2AufwD74FPbDZ3+dn/kf55/9q/yOCAioUKFBg+kwHaZgCmbADJgRM2ImzIQJTGAWzIJZMStmw2yYA3NgLsyFeTAPEhIyMubFvJjEJObH/FgAC2AhLIQePRbFolgMb8biWBxLYAksiSWxFJbG0lgWy2I5LIflsTxWxIpYCSthZayMd+PdeA9Ww2pYHatjDayBNbEm1sJaWBtrYx2sg3WxLtbDetgAG2AjbIRNsAk2xabYDJthC2yBLbEltsJW2BpbYxtsg20RsR22w/bYHjtgB+yInbATPo/P4wv4AnbDSqo79sAe2BN7Ym/sg33wJeyHL+PL+AoOwIE4CF/FV/E1HIJncCgOw+E4HMupkTgKRyOrsTgOx+F4HI8TcAJOxEk4CafgVJyG03E6zsCZOBPfxdn4Hr6Hc3EuzscFuAAX4iJcjItxCZ7FpbgMl+MKXImrcCWuwbW4BtfjBlyPm3ATbsEt+BF+hNtxO+7Enbgbd+PH+DF+gp/gANyP+/EAHsCDeBAP4SE8jIfxCB7Bo3gUj+ExPI7H8QSexFN4Ek/jaTyDZ/EcnsPzeB4v4LO5vqyzu+C6AaAuMcqodCqdSlEpKoPKoDKqjCqTyqQSKqGyqCwqq8qqsqlsKofKoXKpXCqPyqNIkWIVq7wqr0qqpMqv8qsCqoAqpAopr7wqqoqqYqqYKq6KqxLqVlVS3aZKqdKquS+ryqpyqoUvryqoiqqiqqTuUpVVFVVFVVVVVTVVTVVX1VUNVUPVVA+oWqo79sYH1aXJ1FUDsZ4ahA1UQ9VINVav4SOqqRqCzVRz1UI9pobhUGylmvrW6knVRo3CtuppNRqfUe3VWOygnlMdVSfVWT2vuqhmvuuvtzvVFOypeqneqo+agXepSxOrrF5RA9RANUi9qubja2qIel0NVcPUcPWGGqFGqlFqtBqjxqpx6k01Xr2lJqi31UQ1SU1WU9RUNU1NV++oGWqmmqXeVbPVe2qOmqvmqflqgXpfLVSL1GL1gVqiPlRL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9VHapvarnaonWqX2q32qI/VXvWJ2qc+VfvVZ+qA+qM6qD5Xh9QX6rD6Uh1RX6mj6mt1TH2jjqtv1Ql1Up1S36nT6vvEGXVWnVM/qPPqR3VB/aQuqqBAo1Zaa6MjnU5fpVN0ep1BX61BX6Mz6cw6oa/VWfR1Oqu+XmfT2XUOnVPn0rl1Hm01aadZxzqvzqeT+gadX9+oC+iCupAurL0uoovqm3QxfbMurm/RJfStuqS+TZfSpXUZXVbfrsvpO3R5XUFX1HfqSvouXVlX0XfrqvoeXU3fq6vr+3QNfb+uqR/QtfQfdG39oK6jH9J19cO6nq6vG+iGupFurJvoR3RT/ahuppvrFvox3VI/rlvpJ3Rr/aRuo5/SbfXTup1+RrfXz+oO+jndUXfSnfVP+qIOuqvuplN1d91Dv6h76l66t+6j++qXdD/9su6vX9ED9EA9SL+qB+vX9BD9uh6qh+nh+g09Qo/Uo/RoPUaP1eP0m3q8fktP0G/riXqSnqyn6Kl6mu79S6VZ/0T+W38jv//Pz75Fb9Uf6W16u96hd+pderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/qH/R3+rT+Xp/RZ/VZ/YM+r8/rC7/8DMCgUUYbYyKTzlxlUkx6k8FcbTKaa0wmk9kkzLUmi7nOZDXXm2wmu8lhcppcJrfJY6wh4wyb2OQ1+UzS3GDymxtNAVPQFDKFjTdFTFFz07+d/3v9NTFNTFPT1DQzzUwL08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTWfT2XQxXUxX09WkmlTTw7xoeppeprfpY/qal0w/08/0N/3NADPADDKDzGAz2AwxQ8xQM9QMN8PNCDPCjDKjzBgzxowz48x4M95MMBPMRDPRTDaTzVQz1Uw3080MM8PMMrPMbDPbzDFzzDwzzywwC8xCs9AsNovNErPELDXLzDKzwqwwq8wqs8asMevMOrPBbDCbzCaz1Gw1W802s83sMDvMLrPL7DF7zF6z1+wz+8x+s98cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMeXPeXDAXzEVz8dJpX6QiFZnIROmidFFKlBJliDJEGaOMUaYoU5SIElGWKEuUNbo+yhZlj3JEOaNcUe4oFWxEkYs4iqO8Ub4oGd0Q5Y9ujApEBaNCUeHIR0WiotFNUbHo5qh4dEtUIro1KhndFpWKSkdlorLR7VG56I6ofFQhqhjdGVWK7ooqR1Wiu6Oq0T1RtejeqHp0X1Qjuj+qGT0Q1Yr+ENWOHozqRA9FdaOHo3pR/ahB1DBqFDWOmvxH64dwJvujvqvtZlNtd9vDvmh72l62t+1j+9qXbD/7su1vX7ED7EA7yL5qB9vX7BD7uh1qh9nh9g07wo60o+xoO8aOtePsm3a8fctOsG/biXaSnWyn2Kl2mp1u37Ez7Ew7y75rZ9v37Bw7186z8+0C+75daBfZxfYDu8R+aJfaZXa5XWFX2lV2tV1j19p1dr3dYDfaTXaz3WK32o/sNrvd7rA77S672+6xH9u99hO7z35q99vP7AH7R3vQfm4P2S/sYfulPWK/skft1/aY/cYet9/aE/akPWW/s6ft9/aMPWvP2R/sefujvWB/shdtuHRyf+ntnQwZSkfpKIVSKANloIyUkTJRJkpQgrJQFspKWSkbZaMclINyUS7KQ3noEiamvJSXkpSk/JSfClABKkSFyJOnolSUilExKk7FqQSVoJJUkkpRKSpDZeh2up3uoDuoAlWgO+lOuovuoipUhapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oEbUiJpQE2pKTakZNaMW1IJaUktqRa2oNbWmNtSG2lJbakftqD21pw7UgTpSR+pMnakLdaGu1JVSKZV6UA/qST2pN/WmvtSX+lE/6k/9aQANoEE0iAbTYBpCQ2goDaPh9AaNoJE0ikbTGBpL42gcjafxNIEm0ESaSJNpMk2lqTSdptMMmkGzaBbNptk0h+bQPJpHC2gBLaSFtJgW0xJaQktpKS2n5bSSVtJqWk1raS2tp/W0kTbSZtpMW2krbaNttIN20C7aRXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydpx/pAv1EFylQilOQwV3tMrprXCaX2aW49O5SHAHApTiHy+lyudwuj7Mum8v+FzE55wq4gq6QK+y8K+KKupt+E5dypV0ZV9bd7sq5O1z538RV3T2umrvXVXf3uSru7r+Ia7j7XU33sKvl6rvarqGr4xq7utHDrp6r7xq4hq6Ra+xausddK/eEa+2edG3cU7+JF7pFbq1b59a7DW6v+8Sdcz+4o+5rd9796Lq6bq6ve8n1cy+7/u4VN8AN/E083L3hRriRbpQb7ca4sb+JJ7spbqqb5qa7d9wMN/M38QL3vpvtFrs5bq6b5+b/HF/qabH7wC1xH7qlbplb7la4lW6VW+3W/FevK9wmt9ltcXvcx26b2+52uJ1hl9v9c3zpOPa5T91+95k74r5yB93n7pA75g67L3+OLx3fMfeNO+6+dSfcSXfKfedOu+/dGXf25+O/dOzfuZ/cRRccMLJizYYjTsdXcQqn5wx8NWfkazgTZ+YEX8tZ+LrMmfl6zsbZOQfn5Fycm/OwZWLHzDHn5Xyc5Bs4P9/IBbggF+LC7LkIF+WbuBjfzMX5Fi7Bt3JJvo1LcWkuw2X5dq4fQijPFbgi38mVQuDKXIXv5qp8D1fje7k638c1+H6uyQ9wLf4D1+YHuQ4/xHX5Ya7H9bkBN+RG3Jib8CPclB/lZtycW/Bj3JIf51b8BLfmJ7kNP8Vt+Wlux89we36WO/Bz3JE7cWd+nrvwC9yVu3Eqd+ce/CL35F7cm/twX36J+/HL3J9f4QE8kAfxqzyYX+Mh/DoP5WE8nN/gETySR/FoHsNjeRy/yeP5LZ7Ab/NEnsSTeQpP5Wk8nd/hGTyTZ/G7PJvf4zk8l+fxfF7A7/NCXsSL+QNewh/yUl7Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW/oi38XbewTt5F+/mPfwx7+VPeB9/yvv5Mz7Af+SD/Dkf4i/4MH/JR/grPspf8zH+ho/zt3yCT/Ip/o5P8/d8hs/yOf6Bz/OPfIF/4oscGGKMVaxjE0dxuviqOCVOH2eIr44zxtfEmeLMcSK+Ns4SXxdnja+Ps8XZ4xxxzjhXnDvOE9uYYhdzHMd543xxMr4hzh/fGBeIC8aF4sKxj4vEReOb4mLxzXHx+Ja4RHxrXDK+LYbU0vHD95WNb4/LxXfE5eMKccX4zrhSfFdcOa4S3x1Xje+Jq8X3xtXj++Li8f1xzfiBuFb8h7h2/GBcJ34orhs/HNeL68cN4oZxo7hx3CR+JG4aPxo3i5vHLeLH4pbx43Gr+Im4dfxk3CZ+6nf3p8bd4x7xi/GLcQj3ql+uE5MLk4uSi5MfJJckP0wuTS5LLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk5uSYZQ5Srw6JXX3vjIp/NX+RSf3mfwV/uM/hqfyWf2CX+tz+Kv81n99T6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df4/P5GX8AX9IV8Ye99EV/UN/ZNfBPf1D/qm/nmvoV/zD/mH/eP+yf8E/5J38Y/5dv6p307/4xv75/1z/rnfEffyXf2z/su/gXf1XfzqT7V9/A9fE/f0/f2vX1f39f38/18f9/fD/AD/CA/yA/2g/0QP8QP9UP9cD/cj/Aj/Cg/yo/xY/w4P86P9+P9BD/BT/QT/WQ/2U/1U/10P93P8DP8LD/Lzy4w28/xc/w8P88v8Av8Qr/QL/aL/RK/xC/1S/1yv9yv9Cv9ar/ar/Vr/Xq/3m/0G/1mv9lv9Vv9Nr/N7/A7/C6/y+/xe/xev9fv8/v8fr/fH/AH/EF/0B/yX/jD/kt/xH/lj/qv/TH/jT/uv/Un/El/yn/nT/vv/Rl/1p/zP/jz/kd/wf/kL/rgxyXeTIxPvJWYkHg7MTExKTE5MSUxNTEtMT3xTmJGYmZiVuLdxOzEe4k5ibmJeYn5iQWJ9xMLE4sSixMfJJYkPkwsTSxLLE+sSKxMrEqEkHtbHPKGfCEZbgj5w42hQCgYCoXCwYcioWi4KRQLN4fi4ZZQItwaSobbQqlQOpQJ9UOD0DA0Co1Dk/BIaBoeDc1C89AiPBZahsdDq/BEaB2eDG3CU6FteDq0C8+E9uHZ0CE8FzqGTqFzeD50CS+ErqFbSA3dQ4/wYugZeoXeoU/oG14K/cLLoX94JQwIA8Og8GoYHF4LQ8LrYWgYFoaHN8KIMDKMCqPDmDA2jAtvhvHhrTAhvB0mhklhcpgSpoZpYXp4J8wIM8Os8G6YHd4Lc8LcMC/MDwvC+2FhWBQWhw/CkvBhWBqWheVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gaPgrbwvawI+wMu8LusCd8HPaGT8K+8GnYHz4LB8Ifw8HweTgUvgiHw5fhSPgqHA1fh2Phm3A8fBtOhJPhVPgunA7fhzPhbDgXfgjnw4/hQvgpXJT/WRNCCCGE+Kfo39nf/W98Lx0A/HpJ1AMArtme8/Bf19yY7U/rXipXywQAPNmtw4O/bpUqpaam/vLYpRqifHMBIPGX9X+Nl0ELeBxaQ3Mo9jf766U6neffqZ+8FSDDz9GfThFT4Nf4z+vf/HfqP/LY8IUl43NZ/kH9uQAF8l3OSQ+X48v1i/+d+tmb/k7/6T8fB9Dsz3IywuX4cv2i8Cg8Ba3/4pFCCCGEEEIIIcSf9FJl2v3960/9X9fnuczlnKvgcvx71+dCCCGEEEIIIYS48p7p1PmJR1q3bt7un1vgL3+X/tey/u4i5Zcu/t06spDF/9gifdp40V6p30hCCCGEEEKI/y6XT/qvdCdCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTa9T/xcWJX+hiFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+3/BQAA//++0jN5") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2001091, 0x0) socket(0x8, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) socket$inet6(0xa, 0xa, 0x8001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) 5m1.484343671s ago: executing program 4 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = dup3(0xffffffffffffffff, r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4m58.887298925s ago: executing program 4 (id=58): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3204010, &(0x7f0000000d00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c757466383d312c636f6465706167653d3836342c757466383d312c696f636861727365743d63703836332c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c61742beb312c7569643c", @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x2a9, &(0x7f0000000500)="$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") r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000007c0)={"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"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)={0x15, 0x7, 0x1, {{0x8, 'tracefs\x00'}, 0x2}}, 0x15) write(r4, &(0x7f0000000240)='1', 0x1) 4m57.473715702s ago: executing program 4 (id=64): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x38, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4m54.37815356s ago: executing program 4 (id=71): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) clock_gettime(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa, 0xfffffffffeffffff}, 0x0) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"/473, @ANYRES16], 0xfd, 0x554b, &(0x7f0000009440)="$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") setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) 4m53.495682272s ago: executing program 33 (id=71): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) clock_gettime(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa, 0xfffffffffeffffff}, 0x0) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000002d00)=ANY=[@ANYBLOB="7768696e745f6d6f64653d757365722d62617365642c6e6f666c7573685f6d657267652c646973636172645f756e69743d626c6f636b2c636f6d70726573735f63616368652c646973636172642c636f6d70726573735f636163686500636f6d70726573735f63616368652c6e6f646973636172642c6e04000000000000006b67726f756e645f67633d6f66662c6673796e635f6d6f64653d7374726963742c617467632c636865636b706f696e743d64697361626c652c6661756c745f747970653d30303030303030303030303030303030303030362c000bfd62d218a444a68c74f026d4ccec66093eece27fe167b75e67ed0f3b3a51c2b8d1857ec135096f87f1bea6b5fea173b82a6a331ed6a20e7966a79114d49d58aca09dc4cbc08f2ce2ad2c6d576d3babdbc296014f0cb17e6a9d720beaf7459568b858cba1b2d201000000594ac14b0b6d4b160405a05c9b7a14f6b9a37c8ffc9f9b20987a60171b9e5541d7eadf86a1d102cb83caeaf0ff064bd27bb32db4263cfc9821d083fc479cf94b113fa6156274d93a6530b84a92d125ac10ffae140b80ad0569bf76f43d8d490968f8fb5798875bfab54caf996afbd97d0b93b9626acf1b881c6f5d55072164d2e3eff342bb846739c949e100"/473, @ANYRES16], 0xfd, 0x554b, &(0x7f0000009440)="$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") setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) 4m28.589373132s ago: executing program 2 (id=123): writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) r0 = socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000800)) 4m27.228926677s ago: executing program 2 (id=127): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x1, 0x0) 4m26.966415419s ago: executing program 2 (id=129): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4m26.707674501s ago: executing program 2 (id=131): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m26.011390854s ago: executing program 2 (id=132): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) 4m25.452124521s ago: executing program 2 (id=134): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffff78) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f00003ad000/0x400000)=nil, 0x400000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r6, 0x0) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 4m24.911517697s ago: executing program 34 (id=134): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffff78) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f00003ad000/0x400000)=nil, 0x400000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r6, 0x0) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 19.322705377s ago: executing program 7 (id=1075): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/ieee80211/phy0/netdev:wlan0/mesh_config/dot11MeshGateAnnouncementProtocol\x00', 0x0, 0x0) read(r4, &(0x7f0000000600)=""/128, 0x80) 19.010090522s ago: executing program 7 (id=1081): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4620, 0xf69, @mcast2, 0xd}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) llistxattr(&(0x7f00000002c0)='./proc\x00', &(0x7f0000000240)=""/110, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000e2ffffffffffffff00000000000800100000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/42], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 16.122932979s ago: executing program 7 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$inet(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 4.616255089s ago: executing program 0 (id=1137): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) mkdir(&(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/xt_recent/syz1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000400)='+1.2.3.4\n', 0x9, 0x0) pwrite64(r1, &(0x7f0000000400)='+1.2.3.4\n', 0x9, 0x0) 4.208253559s ago: executing program 0 (id=1140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"}]}, 0x54}}, 0x0) 3.670062305s ago: executing program 0 (id=1141): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="01020304", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @local, @loopback}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 2.907955031s ago: executing program 3 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 2.893976232s ago: executing program 6 (id=1144): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb2}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 2.751222009s ago: executing program 0 (id=1145): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4620, 0xf69, @mcast2, 0xd}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) llistxattr(&(0x7f00000002c0)='./proc\x00', &(0x7f0000000240)=""/110, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000e2ffffffffffffff00000000000800100000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/42], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 2.726261029s ago: executing program 3 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)='payload', 0x7, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 2.724975999s ago: executing program 6 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdbdf25040000040c0017000c0000000000000004001900"], 0x24}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'\x00', 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000009400000008000300", @ANYRES32=r2, @ANYBLOB="05003901010000000a0006000200000001000000"], 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000200000002000000080013000c1830600600100001000000"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000009600000008000300", @ANYRES32=r2, @ANYBLOB="0a003a0102000000020000000a00060002000000020100000500390101000000080013000c183060"], 0x44}}, 0x0) 2.676311922s ago: executing program 5 (id=1148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, @void, @void, [{0xdd, 0x18, "0050f2020101000003a4000027a4000042435e0062322f00"}]}, 0x6c) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, [{0xdd, 0x18, "0050f2020101000003a4000027a4000042435e0062322f00"}]}, 0x5e) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000600)="0802110000000802110000010800450000280001000040117ce70a0000020a00000112341234001400006162636465666768", 0x36, 0x0, &(0x7f0000000700)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random}, 0x14) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 2.430136204s ago: executing program 3 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4095, 0xfff) 1.427706221s ago: executing program 6 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dbg\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='debugfs\x00', &(0x7f0000000400)='./dbg\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy0/netdev:wlan0/mesh_config/path_refresh_time\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dbg/ieee80211/phy0/netdev:wlan1/mesh_config/path_refresh_time\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dbg/ieee80211/phy1/netdev:wlan0/mesh_config/path_refresh_time\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./dbg/ieee80211/phy1/netdev:wlan1/mesh_config/path_refresh_time\x00', 0x0, 0x0) 1.376065694s ago: executing program 5 (id=1151): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}}, 0x0) 1.126383376s ago: executing program 7 (id=1152): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback}}, 0xe8) sendto$inet6(r0, &(0x7f0000000200)='trigger', 0x7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.004242942s ago: executing program 6 (id=1153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d800500010003000000050004000000000008000200f9"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 1.004006082s ago: executing program 5 (id=1154): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5000, @loopback}, 0x10) 804.853771ms ago: executing program 3 (id=1155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newsa={0x124, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x0, 0x2b}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0x124}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, &(0x7f0000000600)="abcdef123456", 0x6, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 712.379135ms ago: executing program 5 (id=1156): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 667.903918ms ago: executing program 7 (id=1157): socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 360.300873ms ago: executing program 3 (id=1158): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb2}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 360.111453ms ago: executing program 5 (id=1159): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='test_pkt', 0x8, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) 344.726313ms ago: executing program 0 (id=1160): syz_emit_ethernet(0x3c, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaac0a80102000000000000c0a8010100"/60], 0x0) 328.700764ms ago: executing program 7 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, @void, @void, [{0xdd, 0x18, "0050f2020101000003a4000027a4000042435e0062322f00"}]}, 0x6c) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, [{0xdd, 0x18, "0050f2020101000003a4000027a4000042435e0062322f00"}]}, 0x5e) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000600)="0802110000000802110000010800450000280001000040117ce70a0000020a00000112341234001400006162636465666768", 0x36, 0x0, &(0x7f0000000700)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random}, 0x14) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 187.966671ms ago: executing program 6 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) 151.093342ms ago: executing program 5 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="34005080140001000102030405060708090a0b0c0d0e0f1005000200060000000800030006ac0f000a0004000000000000000000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 132.108293ms ago: executing program 0 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}]}, 0x40}}, 0x0) 88.182385ms ago: executing program 3 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4095, 0xfff) 0s ago: executing program 6 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x0, 0x2, 0x6, 0x1, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}}}, 0x0) kernel console output (not intermixed with test programs): SSID 50:50:50:50:50:50 [ 86.885400][ T4275] device veth1_macvtap entered promiscuous mode [ 86.903938][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.909737][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.930185][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.952186][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.976507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.985159][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.005505][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.014415][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.040295][ T4287] device veth0_macvtap entered promiscuous mode [ 87.060875][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.105818][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140910][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.155819][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.191606][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.206595][ T4287] device veth1_macvtap entered promiscuous mode [ 87.230428][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.245954][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.260542][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.272291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.285809][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.296394][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.307483][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.319134][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.334002][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.359168][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.396291][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.431796][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.462908][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.491170][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.504827][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.515462][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.527009][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.556375][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.566530][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.577444][ T4361] loop2: detected capacity change from 0 to 256 [ 87.615182][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.623963][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.673591][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.712359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.734878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.768362][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.800080][ T4365] loop0: detected capacity change from 0 to 512 [ 87.806660][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.824636][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.843988][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.882735][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.916480][ T4365] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1: Unimplemented hash flags: 0x0001 [ 87.948615][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.985405][ T4365] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 88.025695][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.045932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.054747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.065486][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 88.095311][ T4365] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 88.124523][ T4365] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1: corrupted in-inode xattr [ 88.139426][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.146198][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 88.153595][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 88.159895][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 88.159913][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 88.196561][ T4365] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 88.219740][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.232945][ T4365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.259188][ T4287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.269043][ T4287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.278231][ T4287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.287884][ T4287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.385626][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.404546][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.414637][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.429063][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.440612][ T4365] EXT4-fs error (device loop0): ext4_xattr_set_entry:1619: inode #2: comm syz.0.1: corrupted xattr entries [ 88.455744][ T4283] device veth0_vlan entered promiscuous mode [ 88.559475][ T4283] device veth1_vlan entered promiscuous mode [ 88.610299][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.640200][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.681912][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.695269][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.703569][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.724802][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.739106][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 88.740413][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.774068][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.828376][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.837005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.851386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.860491][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.890962][ T4283] device veth0_macvtap entered promiscuous mode [ 88.900239][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.920399][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.963719][ T4283] device veth1_macvtap entered promiscuous mode [ 88.985816][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.006392][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.017193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.026463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.261345][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.302577][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.346755][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.371640][ T4384] loop1: detected capacity change from 0 to 2048 [ 90.390264][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.417425][ T4384] ext4: Unknown parameter 'dont_hash' [ 90.462957][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.728415][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.005049][ C0] sched: RT throttling activated [ 91.550245][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.945580][ T27] cfg80211: failed to load regulatory.db [ 91.990534][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.013179][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.392149][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.423823][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.464325][ T4390] loop0: detected capacity change from 0 to 512 [ 92.489337][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.745512][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.019927][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.032613][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.005256][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.025771][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.041549][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.052776][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.065953][ T4390] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 94.079051][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.094430][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.104742][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.115534][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.124435][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.133359][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142612][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.166865][ T4390] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.10: corrupted in-inode xattr [ 94.222098][ T4390] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.10: couldn't read orphan inode 15 (err -117) [ 94.237704][ T4401] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure [ 94.332984][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.410587][ T4404] loop2: detected capacity change from 0 to 256 [ 94.507467][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 94.546926][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.554845][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.763550][ T4412] loop1: detected capacity change from 0 to 1024 [ 94.775786][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.789731][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.815509][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.834533][ T4414] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.872302][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.920570][ T4412] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.975306][ T4412] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.076340][ T4412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 95.132855][ T4412] System zones: 0-1, 3-36 [ 95.141235][ T4412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.608170][ T4287] EXT4-fs (loop1): unmounting filesystem. [ 95.619221][ T4425] loop2: detected capacity change from 0 to 128 [ 95.778581][ T26] audit: type=1800 audit(1789171250.819:2): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 95.853967][ T4429] loop1: detected capacity change from 0 to 256 [ 95.880556][ T4429] exfat: Unknown parameter 'Â’' [ 95.945260][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.294227][ T4441] loop3: detected capacity change from 0 to 512 [ 97.401051][ T4441] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.20: bad orphan inode 11862016 [ 97.436559][ T4441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.452676][ T4441] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.636442][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 101.049158][ T4464] netlink: 104 bytes leftover after parsing attributes in process `syz.2.24'. [ 103.026345][ T4472] loop4: detected capacity change from 0 to 512 [ 103.266138][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 103.727090][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.857512][ T4472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.885419][ T4472] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.921489][ T4474] device bridge_slave_1 left promiscuous mode [ 103.927803][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.001195][ T4481] loop1: detected capacity change from 0 to 4096 [ 104.051921][ T4484] loop3: detected capacity change from 0 to 512 [ 104.127492][ T4484] ======================================================= [ 104.127492][ T4484] WARNING: The mand mount option has been deprecated and [ 104.127492][ T4484] and is ignored by this kernel. Remove the mand [ 104.127492][ T4484] option from the mount to silence this warning. [ 104.127492][ T4484] ======================================================= [ 104.207367][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.384837][ T4481] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 104.458725][ T4481] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 104.495609][ T4481] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.31: Failed to acquire dquot type 1 [ 104.548522][ T4484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.568987][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 104.593662][ T4484] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.695424][ T4481] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 104.825515][ T4497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.045898][ T4495] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 105.388491][ T4495] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 105.415393][ T4495] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 105.460219][ T4484] overlayfs: conflicting lowerdir path [ 105.468212][ T4495] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.31: Failed to acquire dquot type 1 [ 105.542673][ T4495] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 105.744848][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 107.162272][ T4395] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.682928][ T4501] loop4: detected capacity change from 0 to 40427 [ 107.776665][ T4501] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64) [ 107.784863][ T4501] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 107.892621][ T4501] F2FS-fs (loop4): invalid crc value [ 107.901305][ T4388] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.960493][ T4501] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 108.117836][ T4388] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.223114][ T4388] usb 1-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 108.304763][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.394194][ T4395] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.418208][ T4501] F2FS-fs (loop4): recover fsync data on readonly fs [ 108.431374][ T4388] usb 1-1: config 0 descriptor?? [ 108.455907][ T4501] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 108.483734][ T4501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.539352][ T4395] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.690684][ T4395] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.846815][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.863064][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.892748][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.902581][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.910341][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.922504][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.956177][ T4388] thrustmaster 0003:044F:B651.0001: unknown main item tag 0x0 [ 108.963873][ T4388] thrustmaster 0003:044F:B651.0001: unknown main item tag 0x0 [ 108.995167][ T4388] thrustmaster 0003:044F:B651.0001: unknown main item tag 0x0 [ 109.002730][ T4388] thrustmaster 0003:044F:B651.0001: unknown main item tag 0x0 [ 109.048485][ T4388] thrustmaster 0003:044F:B651.0001: hidraw0: USB HID v0.04 Device [HID 044f:b651] on usb-dummy_hcd.0-1/input0 [ 109.075096][ T4388] thrustmaster 0003:044F:B651.0001: no inputs found [ 109.112501][ T4388] usb 1-1: USB disconnect, device number 2 [ 109.332426][ T4533] loop3: detected capacity change from 0 to 512 [ 109.379071][ T4533] EXT4-fs: Ignoring removed orlov option [ 109.430937][ T4526] fido_id[4526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.512173][ T4533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.526848][ T4533] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.552769][ T4533] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.47: bad entry in directory: inode out of bounds - offset=60, inode=327695, rec_len=16, size=2048 fake=0 [ 109.623524][ T4538] loop4: detected capacity change from 0 to 256 [ 109.683516][ T4538] exfat: Unknown parameter 'Â’' [ 109.759013][ T4413] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.866222][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 110.759019][ T4553] loop3: detected capacity change from 0 to 256 [ 110.916021][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 110.945333][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 111.313663][ T4553] device hsr_slave_0 left promiscuous mode [ 111.953348][ T4522] chnl_net:caif_netlink_parms(): no params data found [ 112.183640][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.221743][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.269148][ T4522] device bridge_slave_0 entered promiscuous mode [ 112.299112][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.375285][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.440183][ T4522] device bridge_slave_1 entered promiscuous mode [ 112.639024][ T4522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.921616][ T4522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.442346][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 114.187313][ T4522] team0: Port device team_slave_0 added [ 114.262235][ T4522] team0: Port device team_slave_1 added [ 114.343885][ T4593] tipc: Started in network mode [ 114.349254][ T4593] tipc: Node identity 1000001, cluster identity 4369 [ 114.400349][ T4593] tipc: Node number set to 16777217 [ 114.431229][ T4587] loop4: detected capacity change from 0 to 256 [ 114.495987][ T4522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.511785][ T4522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.630114][ T4522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.943416][ T4283] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 114.998220][ T4283] FAT-fs (loop4): Filesystem has been set read-only [ 115.055563][ T4283] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 115.142283][ T4593] tipc: New replicast peer: 127.0.0.1 [ 115.151433][ T4593] tipc: Enabled bearer , priority 10 [ 115.335679][ T4522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.342714][ T4522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.499672][ T4522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.561114][ T4614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.627329][ T4614] loop2: detected capacity change from 0 to 1024 [ 115.647003][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 115.861940][ T4614] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.65: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 115.883790][ T4614] EXT4-fs (loop2): Remounting filesystem read-only [ 115.891272][ T4614] EXT4-fs (loop2): get root inode failed [ 115.897133][ T4614] EXT4-fs (loop2): mount failed [ 116.540603][ T4595] loop3: detected capacity change from 0 to 40427 [ 116.602543][ T4595] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 116.804999][ T4595] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.191335][ T4595] F2FS-fs (loop3): invalid crc value [ 117.305281][ T4595] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 117.418544][ T4522] device hsr_slave_0 entered promiscuous mode [ 117.470422][ T4522] device hsr_slave_1 entered promiscuous mode [ 117.513721][ T4522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.552658][ T4522] Cannot create hsr debugfs directory [ 117.665252][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 117.735112][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 117.921590][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 117.965387][ T4629] loop3: detected capacity change from 0 to 256 [ 117.973328][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 118.068710][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.174804][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.275215][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.340590][ T7] usb 3-1: SerialNumber: syz [ 118.403385][ T4627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.440282][ T4627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.587769][ T4522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.724123][ T4522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.750945][ T4627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.795443][ T4627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.931418][ T4522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.953192][ T4522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.148169][ T26] audit: type=1800 audit(1789171274.189:3): pid=4629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="file1" dev="loop3" ino=1048608 res=0 errno=0 [ 119.256435][ T26] audit: type=1800 audit(1789171274.189:4): pid=4630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="file1" dev="loop3" ino=1048608 res=0 errno=0 [ 119.263070][ T7] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 119.507237][ T7] usb 3-1: USB disconnect, device number 2 [ 119.799368][ T4522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.835171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.856275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.869236][ T4522] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.893857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.906578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.935711][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.942880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.977033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.013434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.036643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.045622][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.052762][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.095547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.126807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.172091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.225302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.306967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.347142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.391522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.426087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.434204][ T4652] loop2: detected capacity change from 0 to 256 [ 120.442958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.485925][ T4652] exfat: Unknown parameter 'Â’' [ 120.487137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.505845][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.516006][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.523587][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.531099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.539535][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.552469][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.560270][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.697006][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.631857][ T4395] device hsr_slave_0 left promiscuous mode [ 121.676562][ T4395] device hsr_slave_1 left promiscuous mode [ 121.692109][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.705732][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.734579][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.742925][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.762675][ T4395] device bridge_slave_1 left promiscuous mode [ 121.772271][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.797853][ T4395] device bridge_slave_0 left promiscuous mode [ 121.804163][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.870080][ T4395] device veth1_macvtap left promiscuous mode [ 121.879419][ T4395] device veth0_macvtap left promiscuous mode [ 121.890348][ T4395] device veth1_vlan left promiscuous mode [ 121.898889][ T4395] device veth0_vlan left promiscuous mode [ 121.925462][ T4678] loop3: detected capacity change from 0 to 2048 [ 121.994497][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.003476][ T4678] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.025985][ T4678] fs-verity: sha512 using implementation "sha512-avx2" [ 122.151937][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 122.268559][ T4683] loop3: detected capacity change from 0 to 256 [ 122.625584][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 123.214228][ T4695] loop3: detected capacity change from 0 to 1024 [ 123.457419][ T4695] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.85: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 123.477537][ T4695] EXT4-fs (loop3): Remounting filesystem read-only [ 123.484503][ T4695] EXT4-fs (loop3): get root inode failed [ 123.490741][ T4695] EXT4-fs (loop3): mount failed [ 123.759796][ T4395] team0 (unregistering): Port device team_slave_1 removed [ 123.899795][ T4395] team0 (unregistering): Port device team_slave_0 removed [ 123.994147][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.164921][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.188078][ T4699] loop3: detected capacity change from 0 to 512 [ 124.201478][ T4699] EXT4-fs: inline encryption not supported [ 124.216000][ T4699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.222773][ T4699] ext4: Unknown parameter 'noacl' [ 124.583741][ T4395] bond0 (unregistering): Released all slaves [ 124.715219][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 124.777667][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 125.017825][ T4711] loop3: detected capacity change from 0 to 256 [ 125.056872][ T4711] exfat: Unknown parameter 'Â’' [ 125.867587][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.885717][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.954172][ T4522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.024553][ T4726] loop2: detected capacity change from 0 to 512 [ 126.070213][ T4726] EXT4-fs: Ignoring removed i_version option [ 126.187270][ T4726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.219700][ T4653] chnl_net:caif_netlink_parms(): no params data found [ 126.292350][ T4726] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.91: invalid indirect mapped block 4294967295 (level 1) [ 126.384919][ T4726] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.91: invalid indirect mapped block 4294967295 (level 1) [ 126.424724][ T4731] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.451930][ T4726] EXT4-fs (loop2): 2 truncates cleaned up [ 126.491416][ T4726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.683645][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.782329][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.809831][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 126.824027][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 126.825903][ T4653] device bridge_slave_0 entered promiscuous mode [ 126.839487][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.846784][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.855158][ T4653] device bridge_slave_1 entered promiscuous mode [ 127.357763][ T4653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.377225][ T4745] loop3: detected capacity change from 0 to 1024 [ 127.581426][ T4745] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.607018][ T4653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.688237][ T4745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.791022][ T4745] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 127.825821][ T4395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.837004][ T4745] System zones: 0-1, 3-36 [ 127.893521][ T4745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.006059][ T1188] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.014080][ T1188] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.021938][ T1188] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.029767][ T1188] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.222009][ T4395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.291269][ T4653] team0: Port device team_slave_0 added [ 128.326049][ T4653] team0: Port device team_slave_1 added [ 128.447454][ T4395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.520083][ T4653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.575714][ T4653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.739035][ T4653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.774054][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 128.854039][ T4395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.894804][ T4653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.912667][ T4653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.965199][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 128.995106][ T1188] rtc rtc0: __rtc_set_alarm: err=-22 [ 129.005298][ T4653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.063901][ T4522] device veth0_vlan entered promiscuous mode [ 129.076639][ T4522] device veth1_vlan entered promiscuous mode [ 129.146659][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.164458][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.210297][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.235947][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.256114][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.273235][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.292103][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.310585][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.388160][ T4522] device veth0_macvtap entered promiscuous mode [ 129.410350][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.427865][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.468019][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.503622][ T4653] device hsr_slave_0 entered promiscuous mode [ 129.561357][ T4653] device hsr_slave_1 entered promiscuous mode [ 129.580983][ T4653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.609494][ T4653] Cannot create hsr debugfs directory [ 129.701450][ T4522] device veth1_macvtap entered promiscuous mode [ 129.866221][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.930568][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.943647][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.969131][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.986145][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.002628][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.012857][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.030803][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.049236][ T4522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.092084][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.107306][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.133144][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.152241][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.166182][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.183114][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.195508][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.211714][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.223340][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.277632][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.301154][ T4522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.708296][ T4793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.352587][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.368315][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.414433][ T4522] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.464872][ T4522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.498929][ T4522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.585556][ T4522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.999432][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006227][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.375045][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.392087][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.753214][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.864059][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 134.948498][ T4817] device syzkaller0 entered promiscuous mode [ 135.005940][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.013813][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.105731][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.194289][ T4653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.274092][ T4653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.306248][ T4653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.349687][ T4653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.415259][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.625157][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 135.643302][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.697656][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.736599][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 135.767562][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 135.795444][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.823968][ T7] usb 1-1: Product: syz [ 135.834103][ T7] usb 1-1: Manufacturer: syz [ 135.844232][ T7] usb 1-1: SerialNumber: syz [ 136.117583][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 136.156297][ T7] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 136.233533][ T4653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.364185][ T4395] device hsr_slave_0 left promiscuous mode [ 136.372758][ T7] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 136.429550][ T7] usb 1-1: USB disconnect, device number 3 [ 136.472373][ T4395] device hsr_slave_1 left promiscuous mode [ 136.510809][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.528715][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.563278][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.588503][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.612883][ T4395] device bridge_slave_1 left promiscuous mode [ 136.644823][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.657054][ T4845] udevd[4845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.721436][ T4395] device bridge_slave_0 left promiscuous mode [ 136.749067][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.846134][ T4395] device veth1_macvtap left promiscuous mode [ 136.870103][ T4395] device veth0_macvtap left promiscuous mode [ 136.886058][ T4395] device veth1_vlan left promiscuous mode [ 136.914232][ T4836] loop5: detected capacity change from 0 to 40427 [ 136.988732][ T4395] device veth0_vlan left promiscuous mode [ 136.999373][ T4836] F2FS-fs (loop5): invalid crc value [ 137.057514][ T4836] F2FS-fs (loop5): Found nat_bits in checkpoint [ 137.860299][ T4836] F2FS-fs (loop5): Start checkpoint disabled! [ 137.987088][ T4836] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 138.686805][ T9] kworker/u4:0: attempt to access beyond end of device [ 138.686805][ T9] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 139.363952][ T4871] loop5: detected capacity change from 0 to 512 [ 139.400890][ T4871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.462164][ T4871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 139.481975][ T4871] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.570473][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 139.883807][ T4395] team0 (unregistering): Port device team_slave_1 removed [ 139.931908][ T4395] team0 (unregistering): Port device team_slave_0 removed [ 140.029158][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.096611][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.531931][ T4395] bond0 (unregistering): Released all slaves [ 140.666681][ T4653] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.686432][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.695643][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.750860][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.760670][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.770424][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.777639][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.788704][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.817241][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.836450][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.843621][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.931648][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.941709][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.972839][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.983242][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.994643][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.013844][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.023704][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.085520][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.110364][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.136262][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.161586][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.264741][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.362506][ T27] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 141.381151][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.599750][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.672028][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.816448][ T27] usb 1-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 141.969446][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.135627][ T27] usb 1-1: SerialNumber: syz [ 142.441502][ T27] usb 1-1: 0:2 : does not exist [ 142.515398][ T27] usb 1-1: USB disconnect, device number 4 [ 142.817999][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.141727][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.174588][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.225736][ T4653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.427647][ T4918] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.822068][ T4914] FAULT_INJECTION: forcing a failure. [ 145.822068][ T4914] name failslab, interval 1, probability 0, space 0, times 1 [ 145.835557][ T4939] loop2: detected capacity change from 0 to 512 [ 145.853768][ T4914] CPU: 1 PID: 4914 Comm: syz.3.125 Not tainted syzkaller #0 [ 145.861173][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.871297][ T4914] Call Trace: [ 145.874616][ T4914] [ 145.877592][ T4914] dump_stack_lvl+0x188/0x24e [ 145.882387][ T4914] ? show_regs_print_info+0x12/0x12 [ 145.887648][ T4914] ? load_image+0x410/0x410 [ 145.892206][ T4914] ? __might_sleep+0xd0/0xd0 [ 145.896846][ T4914] ? __lock_acquire+0x7c40/0x7c40 [ 145.901935][ T4914] should_fail_ex+0x390/0x4c0 [ 145.906712][ T4914] should_failslab+0x5/0x20 [ 145.911261][ T4914] slab_pre_alloc_hook+0x59/0x300 [ 145.916350][ T4914] ? mark_lock+0x94/0x320 [ 145.920235][ T4939] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.131: iget: bad i_size value: 38620345925642 [ 145.920719][ T4914] kmem_cache_alloc+0x56/0x2f0 [ 145.938045][ T4914] ? mas_alloc_nodes+0x2ec/0x880 [ 145.943061][ T4914] mas_alloc_nodes+0x2ec/0x880 [ 145.947894][ T4914] mas_preallocate+0x162/0x3b0 [ 145.952719][ T4914] do_mas_align_munmap+0x239/0x12d0 [ 145.957974][ T4914] ? verify_lock_unused+0x140/0x140 [ 145.964213][ T4914] ? do_mas_munmap+0x2b0/0x2b0 [ 145.969039][ T4914] ? mtree_range_walk+0x664/0x780 [ 145.974134][ T4914] ? mas_walk+0x15f/0x180 [ 145.978523][ T4914] ? mas_find+0x1ba/0x220 [ 145.982935][ T4914] do_mas_munmap+0x240/0x2b0 [ 145.987616][ T4914] __vm_munmap+0x1aa/0x2d0 [ 145.992092][ T4914] ? vm_munmap+0x20/0x20 [ 145.996398][ T4914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.002450][ T4914] ? syscall_enter_from_user_mode+0x21/0x80 [ 146.008413][ T4914] __x64_sys_munmap+0x5c/0x70 [ 146.013156][ T4914] do_syscall_64+0x4c/0xa0 [ 146.017633][ T4914] ? clear_bhb_loop+0x60/0xb0 [ 146.022369][ T4914] ? clear_bhb_loop+0x60/0xb0 [ 146.027109][ T4914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.030701][ T4939] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.131: couldn't read orphan inode 15 (err -117) [ 146.033049][ T4914] RIP: 0033:0x7fba96f9e159 [ 146.049238][ T4914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.068895][ T4914] RSP: 002b:00007fba951f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 146.077366][ T4914] RAX: ffffffffffffffda RBX: 00007fba97225fa0 RCX: 00007fba96f9e159 [ 146.085397][ T4914] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ff8000 [ 146.093445][ T4914] RBP: 00007fba9703503b R08: 0000000000000000 R09: 0000000000000000 [ 146.101467][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.109482][ T4914] R13: 00007fba97226038 R14: 00007fba97225fa0 R15: 00007ffc352f23a8 [ 146.117512][ T4914] [ 146.125664][ T4939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.230261][ T4939] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.131: bg 0: block 5: invalid block bitmap [ 146.746493][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.756394][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.821677][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.842276][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.856252][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 146.873625][ T4653] device veth0_vlan entered promiscuous mode [ 147.043536][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.118042][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.129746][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.168609][ T4653] device veth1_vlan entered promiscuous mode [ 147.231350][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.299960][ T4961] loop3: detected capacity change from 0 to 1024 [ 147.362541][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.373233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.383159][ T4961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.422222][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.422399][ T4961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.466156][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.503116][ T4961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 147.513433][ T4961] System zones: 0-1, 3-36 [ 147.530895][ T4961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.548401][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.640785][ T4653] device veth0_macvtap entered promiscuous mode [ 147.696899][ T4653] device veth1_macvtap entered promiscuous mode [ 147.726718][ T26] audit: type=1800 audit(1789171302.719:5): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 147.893990][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.992241][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.143548][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.331302][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.423844][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.443907][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.465724][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.485073][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.510125][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.535888][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.556690][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.600426][ T4653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.622142][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.637753][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.642297][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 148.677914][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.715050][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.760877][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.813108][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.856233][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.905752][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.915464][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.924235][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.936334][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.943950][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.952487][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.952508][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.018475][ T4653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.071294][ T4653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.107033][ T4653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.121046][ T4653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.129862][ T4653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.145203][ T4653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.157625][ T4653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.208040][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.247502][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.693544][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.718969][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.758673][ T4986] loop5: detected capacity change from 0 to 512 [ 149.816201][ T4986] EXT4-fs: Ignoring removed orlov option [ 149.834513][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.895208][ T4986] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 149.904679][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.917122][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.930673][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.005132][ T4986] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2921: inode #15: comm syz.5.141: corrupted xattr block 252 [ 150.125271][ T4986] EXT4-fs (loop5): Remounting filesystem read-only [ 150.179542][ T4974] chnl_net:caif_netlink_parms(): no params data found [ 150.195565][ T4986] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 150.210400][ T4986] EXT4-fs (loop5): 1 orphan inode deleted [ 150.231696][ T4986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 150.278539][ T4388] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.315674][ T4986] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 4: comm syz.5.141: lblock 0 mapped to illegal pblock 4 (length 1) [ 150.344535][ T4986] EXT4-fs (loop5): Remounting filesystem read-only [ 150.415608][ T4986] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 4: comm syz.5.141: lblock 0 mapped to illegal pblock 4 (length 1) [ 150.457802][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.466736][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.485421][ T4388] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 7 [ 150.498317][ T4986] EXT4-fs (loop5): Remounting filesystem read-only [ 150.502360][ T4974] device bridge_slave_0 entered promiscuous mode [ 150.511381][ T4388] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 150.511437][ T4388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.565142][ T4388] usb 4-1: Product: syz [ 150.580356][ T4388] usb 4-1: Manufacturer: syz [ 150.596028][ T4388] usb 4-1: SerialNumber: syz [ 150.612931][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.633444][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.656507][ T4974] device bridge_slave_1 entered promiscuous mode [ 150.710805][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 150.878634][ T4974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.964430][ T4974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.015618][ T4388] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.025648][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 151.033094][ T4388] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 151.048355][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.057496][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.065270][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.072942][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.085761][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.093524][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.101612][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.129348][ T4388] usb 4-1: unable to issue vendor read request (ret = -71) [ 151.296016][ T5010] loop5: detected capacity change from 0 to 256 [ 152.026283][ T4388] usb 4-1: USB disconnect, device number 2 [ 152.034519][ T5010] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 152.177064][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.807628][ T4974] team0: Port device team_slave_0 added [ 152.836347][ T5023] loop5: detected capacity change from 0 to 4096 [ 152.878155][ T4974] team0: Port device team_slave_1 added [ 153.091143][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.105937][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 153.154070][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.333051][ T4974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.567629][ T1188] hid-generic 0005:046E:0007.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 153.617122][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.634468][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.741997][ T4974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.815803][ T5023] ext4: Unknown parameter 'noacl' [ 153.946702][ T5035] fido_id[5035]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.214366][ T4974] device hsr_slave_0 entered promiscuous mode [ 154.231128][ T4974] device hsr_slave_1 entered promiscuous mode [ 154.345759][ T5048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.410541][ T5048] loop3: detected capacity change from 0 to 1024 [ 154.550170][ T4974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.585393][ T1188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.616925][ T5048] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.154: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 154.643598][ T5048] EXT4-fs (loop3): Remounting filesystem read-only [ 154.650775][ T5048] EXT4-fs (loop3): get root inode failed [ 154.656608][ T5048] EXT4-fs (loop3): mount failed [ 154.778648][ T4974] Cannot create hsr debugfs directory [ 154.866167][ T1188] usb 6-1: Using ep0 maxpacket: 16 [ 154.880358][ T1188] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.990785][ T5049] loop6: detected capacity change from 0 to 512 [ 155.046194][ T1188] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.093935][ T5049] EXT4-fs (loop6): Test dummy encryption mode enabled [ 155.105170][ T5049] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 155.115697][ T1188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 155.145114][ T1188] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 155.148631][ T5049] EXT4-fs (loop6): group descriptors corrupted! [ 155.196181][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 155.285101][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.312090][ T1188] usb 6-1: config 0 descriptor?? [ 155.510913][ T5057] loop6: detected capacity change from 0 to 128 [ 155.590319][ T5057] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 155.675295][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.767852][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.784451][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.803998][ T4453] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 155.818403][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.847571][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.870631][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.897040][ T127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.902125][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.921719][ T127] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.950088][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.972990][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 155.995731][ T127] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 156.002666][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 156.022842][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 156.025901][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.045195][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 156.064878][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 156.077312][ T127] usb 4-1: Product: syz [ 156.091932][ T127] usb 4-1: Manufacturer: syz [ 156.096292][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 156.104038][ T1188] pantherlord 0003:0810:0001.0003: unknown main item tag 0x0 [ 156.111717][ T127] usb 4-1: SerialNumber: syz [ 156.142078][ T1188] pantherlord 0003:0810:0001.0003: unbalanced collection at end of report description [ 156.176382][ T1188] pantherlord 0003:0810:0001.0003: parse failed [ 156.182728][ T1188] pantherlord: probe of 0003:0810:0001.0003 failed with error -22 [ 156.241735][ T1188] usb 6-1: USB disconnect, device number 2 [ 156.366356][ T127] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 156.450655][ T4974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.718852][ T4974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.753407][ T4974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.792396][ T127] usb 4-1: USB disconnect, device number 3 [ 156.834627][ T127] usblp0: removed [ 157.005531][ T4974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.083126][ T11] device hsr_slave_0 left promiscuous mode [ 157.103464][ T11] device hsr_slave_1 left promiscuous mode [ 157.141412][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.159729][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.194898][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.212911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.233302][ T11] device bridge_slave_1 left promiscuous mode [ 157.253579][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.275537][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 157.337149][ T11] device bridge_slave_0 left promiscuous mode [ 157.343517][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.575629][ T5086] netlink: 'syz.3.164': attribute type 3 has an invalid length. [ 157.603558][ T11] device veth1_macvtap left promiscuous mode [ 157.620174][ T11] device veth0_macvtap left promiscuous mode [ 157.650745][ T11] device veth1_vlan left promiscuous mode [ 157.677348][ T11] device veth0_vlan left promiscuous mode [ 157.693780][ T5088] loop5: detected capacity change from 0 to 256 [ 157.794380][ T5088] FAT-fs (loop5): Directory bread(block 64) failed [ 157.833975][ T5088] FAT-fs (loop5): Directory bread(block 65) failed [ 157.892401][ T5088] FAT-fs (loop5): Directory bread(block 66) failed [ 157.920704][ T5088] FAT-fs (loop5): Directory bread(block 67) failed [ 157.934117][ T5088] FAT-fs (loop5): Directory bread(block 68) failed [ 157.943053][ T5088] FAT-fs (loop5): Directory bread(block 69) failed [ 157.966904][ T5088] FAT-fs (loop5): Directory bread(block 70) failed [ 157.973564][ T5088] FAT-fs (loop5): Directory bread(block 71) failed [ 158.003305][ T5088] FAT-fs (loop5): Directory bread(block 72) failed [ 158.025244][ T5088] FAT-fs (loop5): Directory bread(block 73) failed [ 158.396347][ T5098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.459679][ T5098] loop3: detected capacity change from 0 to 1024 [ 158.807883][ T5098] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 158.832410][ T5098] EXT4-fs (loop3): Remounting filesystem read-only [ 158.839637][ T5098] EXT4-fs (loop3): get root inode failed [ 158.845500][ T5098] EXT4-fs (loop3): mount failed [ 159.450610][ T5102] loop3: detected capacity change from 0 to 256 [ 162.344251][ T5113] loop3: detected capacity change from 0 to 4096 [ 162.394339][ T5113] EXT4-fs: Ignoring removed orlov option [ 162.448863][ T5113] EXT4-fs (loop3): Test dummy encryption mode enabled [ 162.492041][ T5113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.523123][ T26] audit: type=1800 audit(1789171317.559:6): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.172" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 162.613914][ T5113] EXT4-fs (loop3): unmounting filesystem. [ 163.314026][ T11] team0 (unregistering): Port device team_slave_1 removed [ 163.519485][ T11] team0 (unregistering): Port device team_slave_0 removed [ 163.593650][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.677435][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.734094][ T11] bond0 (unregistering): Released all slaves [ 165.247343][ T4974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.305366][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.345823][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.367353][ T4974] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.393731][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.426682][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.470341][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.477597][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.543357][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.665700][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.713811][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.785875][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.793216][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.351930][ T5160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.026929][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.169694][ T4974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.241121][ T4974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.497032][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.516484][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.597946][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.681924][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.741742][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.826265][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.906099][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.975901][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.125723][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.206880][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.275900][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.007462][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.045405][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.082833][ T4974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.224593][ T5204] loop6: detected capacity change from 0 to 512 [ 170.383536][ T5204] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.188: inode has both inline data and extents flags [ 170.505400][ T5204] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.188: couldn't read orphan inode 15 (err -117) [ 170.636486][ T5204] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 171.668371][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.706018][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.838416][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.862468][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.958301][ T5226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.285355][ T4974] device veth0_vlan entered promiscuous mode [ 172.340802][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.359279][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.412372][ T4974] device veth1_vlan entered promiscuous mode [ 172.582408][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.600532][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.645599][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.686127][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.713099][ T4974] device veth0_macvtap entered promiscuous mode [ 172.746855][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.768904][ T4974] device veth1_macvtap entered promiscuous mode [ 172.792776][ T4653] EXT4-fs (loop6): unmounting filesystem. [ 172.847381][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.907114][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.948506][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.995056][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.004945][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.055066][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.099571][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.171783][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.243170][ T4974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.284347][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.296638][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.339320][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.379626][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.408692][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.448940][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.478378][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.498046][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.511666][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.538809][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.553121][ T4974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.596307][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.614417][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.644414][ T4974] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.661999][ T4974] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.674618][ T4974] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.689668][ T4974] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.382494][ T5245] input: syz0 as /devices/virtual/input/input5 [ 174.420735][ T5245] input: failed to attach handler leds to device input5, error: -6 [ 174.571043][ T5240] loop5: detected capacity change from 0 to 40427 [ 175.104176][ T5187] udevd[5187]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 175.739535][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.768252][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.900989][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.926472][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.432459][ T5269] loop6: detected capacity change from 0 to 512 [ 176.481176][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.497674][ T5192] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.543923][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.792518][ T5269] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 176.825774][ T5269] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.422679][ T5286] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.950825][ T4653] EXT4-fs (loop6): unmounting filesystem. [ 178.301082][ T5291] loop5: detected capacity change from 0 to 256 [ 178.422695][ T5291] FAT-fs (loop5): Directory bread(block 64) failed [ 178.451352][ T5291] FAT-fs (loop5): Directory bread(block 65) failed [ 178.513710][ T5291] FAT-fs (loop5): Directory bread(block 66) failed [ 178.520451][ T5291] FAT-fs (loop5): Directory bread(block 67) failed [ 178.565788][ T5291] FAT-fs (loop5): Directory bread(block 68) failed [ 178.581047][ T5291] FAT-fs (loop5): Directory bread(block 69) failed [ 178.875460][ T5291] FAT-fs (loop5): Directory bread(block 70) failed [ 178.988222][ T5291] FAT-fs (loop5): Directory bread(block 71) failed [ 179.525743][ T5291] FAT-fs (loop5): Directory bread(block 72) failed [ 179.563028][ T5291] FAT-fs (loop5): Directory bread(block 73) failed [ 180.660708][ T5313] overlayfs: overlapping lowerdir path [ 181.238758][ T5317] loop7: detected capacity change from 0 to 1024 [ 181.471922][ T5317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.588781][ T5317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.850843][ T5329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.351166][ T5326] loop6: detected capacity change from 0 to 2048 [ 183.362104][ T5317] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 183.381000][ T5317] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.523503][ T5326] loop6: p1 p2 < > p3 p4 < p5 > [ 183.551482][ T5317] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.214: lblock 0 mapped to illegal pblock 0 (length 1) [ 183.592737][ T5326] loop6: partition table partially beyond EOD, truncated [ 183.696125][ T5326] loop6: p2 start 4294902784 is beyond EOD, truncated [ 183.715849][ T5317] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 183.775088][ T5326] loop6: p3 start 3724543488 is beyond EOD, truncated [ 183.806339][ T5317] EXT4-fs (loop7): This should not happen!! Data will be lost [ 183.806339][ T5317] [ 183.857249][ T5339] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.214: bg 0: block 112: padding at end of block bitmap is not set [ 183.897432][ T5339] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 184.041037][ T5339] EXT4-fs (loop7): This should not happen!! Data will be lost [ 184.041037][ T5339] [ 184.095434][ T5347] sd 0:0:1:0: PR command failed: 1026 [ 184.122699][ T5339] EXT4-fs (loop7): Total free blocks count 0 [ 184.129163][ T5347] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 184.130726][ T5339] EXT4-fs (loop7): Free/Dirty block details [ 184.142471][ T5347] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 184.223249][ T5339] EXT4-fs (loop7): free_blocks=0 [ 184.245197][ T5339] EXT4-fs (loop7): dirty_blocks=0 [ 184.250321][ T5339] EXT4-fs (loop7): Block reservation details [ 184.485887][ T5356] ip_tables: iptables: counters copy to user failed while replacing table [ 185.426897][ T5192] udevd[5192]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 185.460038][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 185.506485][ T5260] udevd[5260]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 186.656261][ T5376] overlayfs: failed to clone lowerpath [ 186.830820][ T5377] netlink: 104 bytes leftover after parsing attributes in process `syz.5.225'. [ 189.081875][ T5406] loop5: detected capacity change from 0 to 1024 [ 189.191732][ T5406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.294615][ T5406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.406877][ T5406] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 189.471746][ T5406] System zones: 0-1, 3-36 [ 189.553887][ T5406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.793818][ T5422] overlayfs: failed to clone lowerpath [ 189.905117][ T26] audit: type=1800 audit(1789171344.919:7): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.234" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 189.966042][ T5424] loop6: detected capacity change from 0 to 256 [ 190.081738][ T5424] FAT-fs (loop6): Directory bread(block 64) failed [ 190.157303][ T5424] FAT-fs (loop6): Directory bread(block 65) failed [ 190.164000][ T5424] FAT-fs (loop6): Directory bread(block 66) failed [ 190.286433][ T5424] FAT-fs (loop6): Directory bread(block 67) failed [ 190.293167][ T5424] FAT-fs (loop6): Directory bread(block 68) failed [ 190.393329][ T5417] loop7: detected capacity change from 0 to 4096 [ 190.404813][ T5424] FAT-fs (loop6): Directory bread(block 69) failed [ 190.411603][ T5424] FAT-fs (loop6): Directory bread(block 70) failed [ 190.418234][ T5424] FAT-fs (loop6): Directory bread(block 71) failed [ 190.424864][ T5424] FAT-fs (loop6): Directory bread(block 72) failed [ 190.431533][ T5424] FAT-fs (loop6): Directory bread(block 73) failed [ 190.456954][ T5417] EXT4-fs: Ignoring removed bh option [ 190.733160][ T5417] EXT4-fs (loop7): Test dummy encryption mode enabled [ 190.778653][ T5417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 190.983625][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 191.559493][ T5458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.578785][ T5458] loop5: detected capacity change from 0 to 1024 [ 191.890824][ T5458] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.244: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 191.920394][ T5458] EXT4-fs (loop5): Remounting filesystem read-only [ 191.927706][ T5458] EXT4-fs (loop5): get root inode failed [ 191.933446][ T5458] EXT4-fs (loop5): mount failed [ 192.553737][ T5414] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 192.995946][ T5481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.069343][ T5481] loop6: detected capacity change from 0 to 1024 [ 193.775736][ T5481] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #2: comm syz.6.248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 193.794160][ T5481] EXT4-fs (loop6): Remounting filesystem read-only [ 193.800929][ T5481] EXT4-fs (loop6): get root inode failed [ 193.806719][ T5481] EXT4-fs (loop6): mount failed [ 193.882520][ T4974] EXT4-fs (loop7): unmounting filesystem. [ 194.213597][ T5486] Zero length message leads to an empty skb [ 194.231835][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.238305][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566750][ T5498] device wireguard0 entered promiscuous mode [ 194.640709][ T5500] loop7: detected capacity change from 0 to 4096 [ 194.660545][ T5500] EXT4-fs: inline encryption not supported [ 194.666956][ T5500] EXT4-fs: Ignoring removed nobh option [ 194.676509][ T5500] EXT4-fs (loop7): Test dummy encryption mode enabled [ 194.757188][ T5500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 195.398102][ T5500] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 195.457857][ T5512] overlayfs: failed to resolve './bus': -2 [ 195.509489][ T5513] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 195.750330][ T4974] EXT4-fs (loop7): unmounting filesystem. [ 196.845156][ T4324] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 197.035264][ T4324] usb 8-1: Using ep0 maxpacket: 8 [ 197.045940][ T4324] usb 8-1: unable to get BOS descriptor or descriptor too short [ 197.820809][ T5575] loop5: detected capacity change from 0 to 2048 [ 197.921559][ T5575] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 198.158390][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 198.495835][ T4324] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.517030][ T4324] usb 8-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 199.683643][ T4324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.705109][ T4324] usb 8-1: Product: syz [ 199.709349][ T4324] usb 8-1: Manufacturer: syz [ 199.713989][ T4324] usb 8-1: SerialNumber: syz [ 199.740402][ T4324] usb 8-1: can't set config #1, error -71 [ 199.792350][ T4324] usb 8-1: USB disconnect, device number 2 [ 200.341078][ T5608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.462727][ T1188] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.165193][ T1188] usb 7-1: Using ep0 maxpacket: 8 [ 201.172276][ T1188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.390811][ T1188] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.404587][ T1188] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 201.414219][ T1188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.449844][ T1188] usb 7-1: config 0 descriptor?? [ 201.571139][ T5622] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 203.658267][ T5611] loop5: detected capacity change from 0 to 40427 [ 204.486004][ T1188] usbhid 7-1:0.0: can't add hid device: -71 [ 204.492544][ T1188] usbhid: probe of 7-1:0.0 failed with error -71 [ 204.648037][ T1188] usb 7-1: USB disconnect, device number 2 [ 204.925203][ T5662] loop6: detected capacity change from 0 to 128 [ 205.094368][ T5664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.735087][ T26] audit: type=1326 audit(1789171360.769:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.7.295" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4988b9e159 code=0x0 [ 205.796775][ T5660] xt_NFQUEUE: number of total queues is 0 [ 206.545315][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 206.553624][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 206.774438][ T5646] loop5: detected capacity change from 0 to 40427 [ 206.813383][ T5646] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 206.860571][ T5646] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 206.929737][ T5646] F2FS-fs (loop5): invalid crc value [ 206.955278][ T5646] F2FS-fs (loop5): Found nat_bits in checkpoint [ 207.109387][ T5646] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 207.145081][ T5646] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 208.406427][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.307'. [ 208.466706][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.949197][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.211986][ T5713] loop5: detected capacity change from 0 to 256 [ 210.663030][ T26] audit: type=1800 audit(1789171365.699:9): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.306" name="file1" dev="loop5" ino=1048628 res=0 errno=0 [ 210.898731][ T4321] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 210.952693][ T5734] overlayfs: failed to resolve './file0': -2 [ 211.097675][ T4321] usb 8-1: unable to get BOS descriptor or descriptor too short [ 211.114278][ T4321] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.159592][ T4321] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 211.204649][ T4321] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 211.236717][ T4321] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 211.288493][ T4321] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 211.333838][ T4321] usb 8-1: config 1 interface 1 has no altsetting 0 [ 211.383540][ T4321] usb 8-1: string descriptor 0 read error: -22 [ 211.406017][ T4321] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 211.435615][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.310895][ T5745] ipt_CLUSTERIP: Please specify destination IP [ 212.542795][ T4321] usb 8-1: 2:0: failed to get current value for ch 1 (-71) [ 212.648187][ T4321] usb 8-1: USB disconnect, device number 3 [ 215.318795][ T5795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.204067][ T5801] loop5: detected capacity change from 0 to 256 [ 218.840864][ T5839] loop5: detected capacity change from 0 to 512 [ 219.045327][ T5839] EXT4-fs (loop5): 1 truncate cleaned up [ 219.069568][ T5839] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.175930][ T5845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.979403][ T4453] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:12: bg 0: block 465: padding at end of block bitmap is not set [ 220.075355][ T4453] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1168 with error 28 [ 220.105060][ T4453] EXT4-fs (loop5): This should not happen!! Data will be lost [ 220.105060][ T4453] [ 220.135187][ T4453] EXT4-fs (loop5): Total free blocks count 0 [ 220.141302][ T4453] EXT4-fs (loop5): Free/Dirty block details [ 220.157867][ T4453] EXT4-fs (loop5): free_blocks=0 [ 220.162887][ T4453] EXT4-fs (loop5): dirty_blocks=1168 [ 220.195088][ T4453] EXT4-fs (loop5): Block reservation details [ 220.215087][ T4453] EXT4-fs (loop5): i_reserved_data_blocks=1168 [ 220.470839][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 220.670098][ T5870] overlayfs: overlapping lowerdir path [ 221.474589][ T5882] ip_tables: iptables: counters copy to user failed while replacing table [ 222.857941][ T5917] overlayfs: failed to clone lowerpath [ 223.463578][ T5934] ip_tables: iptables: counters copy to user failed while replacing table [ 226.101616][ T5981] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.085227][ T4370] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 228.286911][ T4370] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 228.308178][ T4370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.355214][ T4370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.418287][ T4370] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 228.471504][ T6014] netlink: 104 bytes leftover after parsing attributes in process `syz.3.395'. [ 228.532035][ T4370] usb 6-1: New USB device found, idVendor=05ac, idProduct=049c, bcdDevice=40.00 [ 228.592840][ T4370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=23 [ 228.602155][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.398'. [ 228.654413][ T4370] usb 6-1: SerialNumber: syz [ 228.683338][ T4370] usb 6-1: config 0 descriptor?? [ 228.860075][ T6020] ipt_CLUSTERIP: Please specify destination IP [ 229.116640][ T4370] usbhid 6-1:0.0: can't add hid device: -71 [ 229.122726][ T4370] usbhid: probe of 6-1:0.0 failed with error -71 [ 229.192280][ T4370] usb 6-1: USB disconnect, device number 3 [ 230.417552][ T6056] loop5: detected capacity change from 0 to 128 [ 230.480151][ T6056] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 232.145088][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 232.576261][ T6075] netlink: 104 bytes leftover after parsing attributes in process `syz.7.410'. [ 232.849250][ T57] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 232.971903][ T6080] loop5: detected capacity change from 0 to 512 [ 233.014473][ T6080] EXT4-fs: Ignoring removed oldalloc option [ 233.052517][ T6080] EXT4-fs (loop5): Test dummy encryption mode enabled [ 233.130164][ T6080] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 240.528612][ T6151] ip_tables: iptables: counters copy to user failed while replacing table [ 240.953844][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 241.404440][ T6172] loop5: detected capacity change from 0 to 256 [ 241.525805][ T6172] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 244.308639][ T6208] tipc: Enabling of bearer rejected, failed to enable media [ 244.643569][ T6215] ip_tables: iptables: counters copy to user failed while replacing table [ 245.242388][ T6233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 245.628491][ T6231] loop5: detected capacity change from 0 to 1024 [ 246.007119][ T6231] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 246.026405][ T6238] process 'syz.0.456' launched './file0' with NULL argv: empty string added [ 246.051101][ T6243] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 246.083697][ T6231] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 246.183559][ T6231] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.245662][ T6231] EXT4-fs (loop5): This should not happen!! Data will be lost [ 246.245662][ T6231] [ 246.305354][ T6231] EXT4-fs (loop5): Total free blocks count 0 [ 246.311482][ T6231] EXT4-fs (loop5): Free/Dirty block details [ 246.346242][ T6231] EXT4-fs (loop5): free_blocks=20480 [ 246.351666][ T6231] EXT4-fs (loop5): dirty_blocks=80 [ 246.422719][ T6231] EXT4-fs (loop5): Block reservation details [ 246.454589][ T6231] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 246.483294][ T6247] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 246.584753][ T6262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.197325][ T6264] device veth1_to_bond entered promiscuous mode [ 247.399946][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 247.505350][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 247.653973][ T6264] device veth1_to_bond left promiscuous mode [ 247.815398][ T6264] bond0: (slave bond_slave_1): Releasing backup interface [ 248.026446][ T6279] ip_tables: iptables: counters copy to user failed while replacing table [ 250.605901][ T6294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.537294][ T6299] loop5: detected capacity change from 0 to 2048 [ 251.715965][ T6299] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 251.745468][ T6299] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.186614][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 252.384403][ T6319] loop5: detected capacity change from 0 to 256 [ 252.836550][ T6325] fuse: Bad value for 'fd' [ 252.850755][ T6325] 9pnet_fd: Insufficient options for proto=fd [ 255.775614][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.782006][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.887165][ T6335] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.713943][ T6351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.851771][ T6415] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.485967][ T6431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.924786][ T6482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.105354][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 273.185866][ T6503] overlayfs: failed to clone lowerpath [ 273.842530][ T6510] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.891746][ T6546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.917838][ T6563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.543177][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 280.413668][ T6596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 282.574807][ T6626] overlayfs: missing 'lowerdir' [ 283.565578][ T6647] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.769327][ T6651] loop5: detected capacity change from 0 to 4096 [ 283.790061][ T6651] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 284.008735][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 284.856561][ T6672] overlayfs: unrecognized mount option "/" or missing value [ 288.472347][ T6718] loop5: detected capacity change from 0 to 256 [ 288.671569][ T6718] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 289.281774][ T6737] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.431221][ T6742] overlayfs: unrecognized mount option "/" or missing value [ 290.527973][ T26] audit: type=1326 audit(1789171445.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.0.590" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2702f9e159 code=0x0 [ 292.512985][ T6736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.788633][ T6736] loop5: detected capacity change from 0 to 1024 [ 293.497619][ T6736] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.584: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 293.656970][ T6736] EXT4-fs (loop5): Remounting filesystem read-only [ 293.663703][ T6736] EXT4-fs (loop5): get root inode failed [ 294.515530][ T6736] EXT4-fs (loop5): mount failed [ 295.774371][ T6803] overlayfs: unrecognized mount option "/" or missing value [ 296.985638][ T6841] overlayfs: failed to clone lowerpath [ 298.674505][ T6867] netlink: 'syz.6.614': attribute type 9 has an invalid length. [ 298.762904][ T6867] netlink: 399 bytes leftover after parsing attributes in process `syz.6.614'. [ 299.370575][ T6875] netlink: 'syz.0.615': attribute type 2 has an invalid length. [ 299.435487][ T6875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'. [ 300.046190][ T6891] overlayfs: failed to clone lowerpath [ 303.539732][ T6925] loop5: detected capacity change from 0 to 40427 [ 303.570893][ T6925] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 303.597491][ T6925] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 303.630893][ T6945] overlayfs: failed to clone lowerpath [ 303.636816][ T6925] F2FS-fs (loop5): invalid crc value [ 303.667427][ T6925] F2FS-fs (loop5): Found nat_bits in checkpoint [ 303.864406][ T6925] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 303.889730][ T6925] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 304.824043][ T6957] netlink: 'syz.3.637': attribute type 4 has an invalid length. [ 304.835344][ T6957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.637'. [ 305.639585][ T6978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.670294][ T6967] syz.7.641 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.825145][ T6989] overlayfs: failed to clone lowerpath [ 307.716116][ T7007] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 307.756343][ T7007] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 307.793033][ T7008] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 307.854878][ T7007] netlink: 'syz.5.652': attribute type 29 has an invalid length. [ 308.100046][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.656'. [ 308.518456][ T7031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.184198][ T7044] netlink: 76 bytes leftover after parsing attributes in process `syz.0.662'. [ 310.733646][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.008349][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.666'. [ 311.462943][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.670'. [ 311.947499][ T7086] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 312.023454][ T7087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.042584][ T7087] loop5: detected capacity change from 0 to 1024 [ 312.161789][ T7087] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.672: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 312.205179][ T7087] EXT4-fs (loop5): Remounting filesystem read-only [ 312.212602][ T7087] EXT4-fs (loop5): get root inode failed [ 312.218504][ T7087] EXT4-fs (loop5): mount failed [ 312.750592][ T7107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.948744][ T7097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.029752][ T7097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.283151][ T7122] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.174700][ T4290] wlan1: authenticate with 08:02:11:00:00:00 [ 315.195223][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.254445][ T4290] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 315.336593][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.717890][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 315.797558][ T4888] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 315.877247][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.695'. [ 315.916421][ T4888] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 316.050728][ T4383] wlan1: authentication with 08:02:11:00:00:00 timed out [ 316.174524][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 316.603375][ T7186] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.109834][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.116325][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.313158][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.702'. [ 318.966236][ T7218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.703'. [ 319.454126][ T7236] netlink: 56 bytes leftover after parsing attributes in process `syz.5.708'. [ 319.796993][ T7249] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 319.824088][ T7250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.712'. [ 319.898399][ T7253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.714'. [ 320.080451][ T7260] x_tables: duplicate underflow at hook 3 [ 320.113645][ T7264] IPVS: stopping master sync thread 7249 ... [ 320.246440][ T7266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.331110][ T7265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.424031][ T7265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.992873][ T7296] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.815889][ T7335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.892213][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.6.753'. [ 324.905127][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.753'. [ 324.975945][ T7376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.112976][ T7382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.957334][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.761'. [ 326.006035][ T7403] netlink: 44 bytes leftover after parsing attributes in process `syz.7.761'. [ 326.042812][ T7403] netlink: 140 bytes leftover after parsing attributes in process `syz.7.761'. [ 326.262975][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 326.292488][ T7416] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 326.301429][ T7418] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 327.450726][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 328.516943][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 330.466336][ T7477] netlink: 88 bytes leftover after parsing attributes in process `syz.0.783'. [ 330.565610][ T7479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.677828][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.7.787'. [ 330.976870][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.7.787'. [ 331.861687][ T7503] Cannot find set identified by id 4 to match [ 332.185741][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.077509][ T7529] netlink: 'syz.6.801': attribute type 20 has an invalid length. [ 334.155127][ T7529] netlink: 'syz.6.801': attribute type 21 has an invalid length. [ 334.489252][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.6.805'. [ 334.700361][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.833137][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.689092][ T7573] netlink: 72 bytes leftover after parsing attributes in process `syz.6.811'. [ 337.700019][ T7597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.219968][ T7602] netlink: 40 bytes leftover after parsing attributes in process `syz.6.819'. [ 338.740432][ T7614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.058818][ T7637] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.541975][ T7705] device veth1_to_bond entered promiscuous mode [ 345.566489][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.843'. [ 345.767294][ T7705] device veth1_to_bond left promiscuous mode [ 345.848950][ T7705] bond0: (slave bond_slave_1): Releasing backup interface [ 346.455540][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.672789][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.859'. [ 348.722669][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.859'. [ 349.838462][ T7796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.869'. [ 349.890857][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.870'. [ 350.199884][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.405230][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.413173][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.461379][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.486428][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.642135][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.486873][ T7849] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.974875][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.887'. [ 355.698426][ T7899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 357.941000][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.031451][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.602729][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.637854][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.662973][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.666630][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.692968][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 358.733277][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.827507][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.229869][ T7957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.723335][ T7984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.525770][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.566081][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.629305][ T7997] netlink: 104 bytes leftover after parsing attributes in process `syz.5.914'. [ 363.236222][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.254332][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.500380][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 363.812814][ T8035] IPVS: Error joining to the multicast group [ 364.063042][ T8041] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 365.740291][ T8053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.857174][ T8056] netlink: 52 bytes leftover after parsing attributes in process `syz.0.933'. [ 366.581644][ T8066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.937'. [ 366.619064][ T8069] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.653222][ T8070] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.962696][ T8075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.189121][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.942'. [ 367.255108][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.339110][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.422108][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.553552][ T8094] ip_tables: iptables: counters copy to user failed while replacing table [ 367.832053][ T8098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.481966][ T8102] netlink: 76 bytes leftover after parsing attributes in process `syz.3.951'. [ 371.551750][ T8143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.571633][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.5.962'. [ 371.634167][ T8145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.724606][ T8145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.795584][ T8145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.715632][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 372.771265][ T8172] netlink: 'syz.5.974': attribute type 4 has an invalid length. [ 373.501788][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.535969][ T8182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 373.609415][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.685481][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.794000][ T8188] netlink: 104 bytes leftover after parsing attributes in process `syz.0.973'. [ 374.962078][ T8190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.978'. [ 374.971961][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.978'. [ 375.009181][ T8192] netlink: 'syz.3.979': attribute type 2 has an invalid length. [ 375.287543][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.378195][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.460710][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.098631][ T8219] netlink: 'syz.5.986': attribute type 20 has an invalid length. [ 376.144668][ T8219] netlink: 'syz.5.986': attribute type 21 has an invalid length. [ 377.151373][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.990'. [ 377.199466][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.6.990'. [ 377.225635][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.250745][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.6.990'. [ 377.307526][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.359446][ T8252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.386973][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.471534][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.552933][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.550593][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557048][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.629431][ T8270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.722954][ T8270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.813896][ T8272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.852579][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 380.892981][ T8293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1003'. [ 382.815920][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1008'. [ 383.085022][ T8310] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 383.173216][ T8312] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1010'. [ 384.519176][ T8327] netlink: 'syz.5.1014': attribute type 20 has an invalid length. [ 384.560325][ T8327] netlink: 'syz.5.1014': attribute type 21 has an invalid length. [ 384.616864][ T8330] netlink: 'syz.5.1014': attribute type 20 has an invalid length. [ 384.704535][ T8330] netlink: 'syz.5.1014': attribute type 21 has an invalid length. [ 384.815472][ T8327] netlink: 'syz.5.1014': attribute type 20 has an invalid length. [ 384.874036][ T8327] netlink: 'syz.5.1014': attribute type 21 has an invalid length. [ 384.940438][ T8330] netlink: 'syz.5.1014': attribute type 20 has an invalid length. [ 385.057573][ T8330] netlink: 'syz.5.1014': attribute type 21 has an invalid length. [ 385.110704][ T8333] netlink: 'syz.5.1014': attribute type 20 has an invalid length. [ 385.182018][ T8333] netlink: 'syz.5.1014': attribute type 21 has an invalid length. [ 385.863049][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1024'. [ 386.020273][ T8359] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1016'. [ 386.766721][ T8373] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 386.949214][ T8375] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1030'. [ 387.582956][ T8392] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1037'. [ 387.981882][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.655518][ T8418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 388.753930][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 388.780985][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 389.137720][ T8430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.892751][ T8432] validate_nla: 4 callbacks suppressed [ 389.892770][ T8432] netlink: 'syz.7.1056': attribute type 20 has an invalid length. [ 389.907363][ T8432] netlink: 'syz.7.1056': attribute type 21 has an invalid length. [ 390.002305][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.371770][ T8443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 390.990407][ T8447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1059'. [ 391.329179][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.855154][ T8462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.923115][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.938159][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.964566][ T1188] wlan1: authenticate with 08:02:11:00:00:00 [ 391.973109][ T1188] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 392.000200][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.020842][ T2915] wlan1: authenticated [ 392.030279][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.035961][ T1188] mac80211_hwsim hwsim17 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 392.069442][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.083858][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.086179][ T57] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 392.104271][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.114859][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 392.138023][ T57] wlan1: associated [ 392.165086][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.243554][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.831727][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1071'. [ 392.958367][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1073'. [ 393.272363][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.440607][ T8494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.523561][ T8496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.605119][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.682532][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1083'. [ 393.697245][ T8496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.779841][ T8505] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1081'. [ 395.356340][ T8522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.159972][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1089'. [ 396.787807][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.875174][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.952574][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.271020][ T8563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.606845][ T8570] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1103'. [ 400.134615][ T8572] netlink: 'syz.0.1106': attribute type 20 has an invalid length. [ 400.191555][ T8572] netlink: 'syz.0.1106': attribute type 21 has an invalid length. [ 400.218226][ T8576] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1107'. [ 400.622617][ T8586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.045164][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.139185][ T8598] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 401.170592][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.263283][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.318945][ T8601] IPVS: stopping master sync thread 8598 ... [ 403.188488][ T8615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1120'. [ 404.649005][ T8635] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1125'. [ 405.561746][ T8639] ip_tables: iptables: counters copy to user failed while replacing table [ 405.868436][ T8643] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1131'. [ 406.713485][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.785367][ T8656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.847820][ T8657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.885355][ T8665] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 408.825320][ T8675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.539996][ T8681] ip_tables: iptables: counters copy to user failed while replacing table [ 409.794837][ T8690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.945762][ T8690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.027548][ T8698] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1145'. [ 411.204501][ T8705] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1151'. [ 411.776262][ T8715] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1155'. [ 412.170847][ T8725] wlan1: authenticate with 08:02:11:00:00:00 [ 412.198085][ T8725] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 412.223863][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.325057][ T2915] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 412.333030][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1163'. [ 412.358468][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.373219][ T8736] ------------[ cut here ]------------ [ 412.379237][ T8736] WARNING: CPU: 0 PID: 8736 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 412.390165][ T8736] Modules linked in: [ 412.394124][ T8736] CPU: 0 PID: 8736 Comm: syz.0.1164 Not tainted syzkaller #0 [ 412.401671][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.411918][ T8736] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 412.418881][ T8736] Code: 7c 2d 00 00 74 08 48 89 df e8 2c 36 1a f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 35 f0 80 00 e8 d0 f8 c8 f7 <0f> 0b eb c5 48 c7 c1 64 4b 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 412.438947][ T8736] RSP: 0018:ffffc90003357250 EFLAGS: 00010287 [ 412.445108][ T8736] RAX: ffffffff89b948c0 RBX: ffff888054d495a8 RCX: 0000000000080000 [ 412.453155][ T8736] RDX: ffffc9000ccd9000 RSI: 0000000000003a59 RDI: 0000000000003a5a [ 412.461276][ T8736] RBP: 0000000000000000 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 412.469353][ T8736] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: ffff888054d4aab0 [ 412.477438][ T8736] R13: 1ffff1100a9a92b5 R14: ffff888054d4a228 R15: dffffc0000000000 [ 412.485499][ T8736] FS: 00007f2703e336c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 412.494488][ T8736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.501195][ T8736] CR2: 00007fba96faedc0 CR3: 000000005cdf8000 CR4: 00000000003506f0 [ 412.509270][ T8736] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.517344][ T8736] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.522805][ T30] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 412.525378][ T8736] Call Trace: [ 412.525452][ T8736] [ 412.525468][ T8736] ieee80211_if_change_type+0x205/0xa80 [ 412.543833][ T8736] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 412.550632][ T8736] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 412.557249][ T8736] ieee80211_change_iface+0x58/0x4c0 [ 412.562620][ T8736] cfg80211_change_iface+0x786/0xf10 [ 412.568022][ T8736] nl80211_set_interface+0x601/0x860 [ 412.573383][ T8736] ? nl80211_dump_interface+0x560/0x560 [ 412.579055][ T8736] genl_family_rcv_msg_doit+0x22f/0x350 [ 412.584749][ T8736] ? end_current_label_crit_section+0x170/0x170 [ 412.591127][ T8736] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 412.597131][ T8736] ? bpf_lsm_capable+0x5/0x10 [ 412.601873][ T8736] ? security_capable+0x85/0xb0 [ 412.606846][ T8736] genl_rcv_msg+0x601/0x790 [ 412.611425][ T8736] ? genl_bind+0x360/0x360 [ 412.615953][ T8736] ? nl80211_dump_interface+0x560/0x560 [ 412.621573][ T8736] netlink_rcv_skb+0x1ef/0x440 [ 412.626464][ T8736] ? genl_bind+0x360/0x360 [ 412.630948][ T8736] ? netlink_ack+0x1160/0x1160 [ 412.635820][ T8736] ? down_read+0x1a8/0x2d0 [ 412.640281][ T8736] genl_rcv+0x24/0x40 [ 412.644298][ T8736] netlink_unicast+0x7ad/0x920 [ 412.649187][ T8736] netlink_sendmsg+0x8ad/0xbd0 [ 412.654058][ T8736] ? netlink_getsockopt+0x550/0x550 [ 412.659372][ T8736] ? apparmor_socket_sendmsg+0x8a/0x330 [ 412.665019][ T8736] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 412.665376][ T2915] wlan1: authentication with 08:02:11:00:00:00 timed out [ 412.670334][ T8736] ? security_socket_sendmsg+0x7c/0xa0 [ 412.670367][ T8736] ? netlink_getsockopt+0x550/0x550 [ 412.670405][ T8736] ____sys_sendmsg+0x5ed/0x9a0 [ 412.670453][ T8736] ? __sys_sendmsg_sock+0x30/0x30 [ 412.698173][ T8736] ? __import_iovec+0x306/0x510 [ 412.703108][ T8736] ? import_iovec+0x6f/0xa0 [ 412.707719][ T8736] ___sys_sendmsg+0x2a2/0x360 [ 412.712476][ T8736] ? __sys_sendmsg+0x2a0/0x2a0 [ 412.717416][ T8736] __se_sys_sendmsg+0x1c3/0x2b0 [ 412.722335][ T8736] ? __x64_sys_sendmsg+0x80/0x80 [ 412.727412][ T8736] ? lockdep_hardirqs_on+0x94/0x140 [ 412.732670][ T8736] do_syscall_64+0x4c/0xa0 [ 412.737190][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 412.741937][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 412.746722][ T8736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.752680][ T8736] RIP: 0033:0x7f2702f9e159 [ 412.757200][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.776936][ T8736] RSP: 002b:00007f2703e33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.785486][ T8736] RAX: ffffffffffffffda RBX: 00007f2703225fa0 RCX: 00007f2702f9e159 [ 412.793521][ T8736] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 412.801588][ T8736] RBP: 00007f270303503b R08: 0000000000000000 R09: 0000000000000000 [ 412.809660][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.817760][ T8736] R13: 00007f2703226038 R14: 00007f2703225fa0 R15: 00007ffc6ecd2888 [ 412.825843][ T8736] [ 412.828925][ T8736] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.836241][ T8736] CPU: 0 PID: 8736 Comm: syz.0.1164 Not tainted syzkaller #0 [ 412.843648][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.853729][ T8736] Call Trace: [ 412.857031][ T8736] [ 412.859980][ T8736] dump_stack_lvl+0x188/0x24e [ 412.864693][ T8736] ? memcpy+0x3c/0x60 [ 412.868722][ T8736] ? show_regs_print_info+0x12/0x12 [ 412.873958][ T8736] ? load_image+0x410/0x410 [ 412.878524][ T8736] panic+0x2d3/0x710 [ 412.882455][ T8736] ? bpf_jit_dump+0xd0/0xd0 [ 412.887014][ T8736] __warn+0x2f8/0x4f0 [ 412.891030][ T8736] ? ieee80211_link_release_channel+0x150/0x180 [ 412.897308][ T8736] ? ieee80211_link_release_channel+0x150/0x180 [ 412.903578][ T8736] report_bug+0x2ba/0x4f0 [ 412.907941][ T8736] ? ieee80211_link_release_channel+0x150/0x180 [ 412.914211][ T8736] handle_bug+0x3a/0x70 [ 412.918401][ T8736] exc_invalid_op+0x16/0x40 [ 412.922939][ T8736] asm_exc_invalid_op+0x16/0x20 [ 412.927823][ T8736] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 412.934699][ T8736] Code: 7c 2d 00 00 74 08 48 89 df e8 2c 36 1a f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 35 f0 80 00 e8 d0 f8 c8 f7 <0f> 0b eb c5 48 c7 c1 64 4b 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 412.954415][ T8736] RSP: 0018:ffffc90003357250 EFLAGS: 00010287 [ 412.960506][ T8736] RAX: ffffffff89b948c0 RBX: ffff888054d495a8 RCX: 0000000000080000 [ 412.968515][ T8736] RDX: ffffc9000ccd9000 RSI: 0000000000003a59 RDI: 0000000000003a5a [ 412.976513][ T8736] RBP: 0000000000000000 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 412.984600][ T8736] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: ffff888054d4aab0 [ 412.992612][ T8736] R13: 1ffff1100a9a92b5 R14: ffff888054d4a228 R15: dffffc0000000000 [ 413.000614][ T8736] ? ieee80211_link_release_channel+0x150/0x180 [ 413.006893][ T8736] ieee80211_if_change_type+0x205/0xa80 [ 413.012491][ T8736] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 413.019198][ T8736] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 413.025750][ T8736] ieee80211_change_iface+0x58/0x4c0 [ 413.031074][ T8736] cfg80211_change_iface+0x786/0xf10 [ 413.036390][ T8736] nl80211_set_interface+0x601/0x860 [ 413.041702][ T8736] ? nl80211_dump_interface+0x560/0x560 [ 413.047274][ T8736] genl_family_rcv_msg_doit+0x22f/0x350 [ 413.052841][ T8736] ? end_current_label_crit_section+0x170/0x170 [ 413.059114][ T8736] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 413.065037][ T8736] ? bpf_lsm_capable+0x5/0x10 [ 413.069746][ T8736] ? security_capable+0x85/0xb0 [ 413.074638][ T8736] genl_rcv_msg+0x601/0x790 [ 413.079181][ T8736] ? genl_bind+0x360/0x360 [ 413.083620][ T8736] ? nl80211_dump_interface+0x560/0x560 [ 413.089208][ T8736] netlink_rcv_skb+0x1ef/0x440 [ 413.094025][ T8736] ? genl_bind+0x360/0x360 [ 413.098481][ T8736] ? netlink_ack+0x1160/0x1160 [ 413.103304][ T8736] ? down_read+0x1a8/0x2d0 [ 413.107778][ T8736] genl_rcv+0x24/0x40 [ 413.111813][ T8736] netlink_unicast+0x7ad/0x920 [ 413.116721][ T8736] netlink_sendmsg+0x8ad/0xbd0 [ 413.121525][ T8736] ? netlink_getsockopt+0x550/0x550 [ 413.126750][ T8736] ? apparmor_socket_sendmsg+0x8a/0x330 [ 413.132337][ T8736] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 413.137664][ T8736] ? security_socket_sendmsg+0x7c/0xa0 [ 413.143154][ T8736] ? netlink_getsockopt+0x550/0x550 [ 413.148402][ T8736] ____sys_sendmsg+0x5ed/0x9a0 [ 413.153217][ T8736] ? __sys_sendmsg_sock+0x30/0x30 [ 413.158288][ T8736] ? __import_iovec+0x306/0x510 [ 413.163190][ T8736] ? import_iovec+0x6f/0xa0 [ 413.167734][ T8736] ___sys_sendmsg+0x2a2/0x360 [ 413.172467][ T8736] ? __sys_sendmsg+0x2a0/0x2a0 [ 413.177340][ T8736] __se_sys_sendmsg+0x1c3/0x2b0 [ 413.182252][ T8736] ? __x64_sys_sendmsg+0x80/0x80 [ 413.187243][ T8736] ? lockdep_hardirqs_on+0x94/0x140 [ 413.192472][ T8736] do_syscall_64+0x4c/0xa0 [ 413.196928][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 413.201643][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 413.206355][ T8736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.212285][ T8736] RIP: 0033:0x7f2702f9e159 [ 413.216757][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.236418][ T8736] RSP: 002b:00007f2703e33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.244865][ T8736] RAX: ffffffffffffffda RBX: 00007f2703225fa0 RCX: 00007f2702f9e159 [ 413.252908][ T8736] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 413.260910][ T8736] RBP: 00007f270303503b R08: 0000000000000000 R09: 0000000000000000 [ 413.268911][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.276920][ T8736] R13: 00007f2703226038 R14: 00007f2703225fa0 R15: 00007ffc6ecd2888 [ 413.284950][ T8736] [ 413.288178][ T8736] Kernel Offset: disabled [ 413.292610][ T8736] Rebooting in 86400 seconds..