last executing test programs: 5m1.642997825s ago: executing program 0 (id=466): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xa, 0x0, &(0x7f0000002200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x3554c3, 0x3e) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x3, 0x6, 0xcb790b31a3427014}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x1001, &(0x7f0000000840)=""/4097, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, '\x00\x00'}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) 4m57.700936404s ago: executing program 0 (id=472): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80044dff, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xae4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4m56.110821528s ago: executing program 0 (id=479): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000280), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m54.134170578s ago: executing program 0 (id=483): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 4m52.375794765s ago: executing program 0 (id=488): syz_open_dev$video(0x0, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, 0x0, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0xfffffffffffffffe}) r2 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500000000003c0012800b000100697036746e6c00002c00028014000200fc"], 0x5c}}, 0x0) 4m52.038579009s ago: executing program 0 (id=494): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x711101, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x9, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) io_uring_setup(0x1c0e, &(0x7f00000002c0)={0x0, 0x1596, 0x8, 0x0, 0x245}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 4m51.119367274s ago: executing program 32 (id=494): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x711101, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x9, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) io_uring_setup(0x1c0e, &(0x7f00000002c0)={0x0, 0x1596, 0x8, 0x0, 0x245}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 10.570243291s ago: executing program 4 (id=1224): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) epoll_create1(0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) 10.458155063s ago: executing program 2 (id=1225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000002380)={[{@mblk_io_submit}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) 10.258187106s ago: executing program 1 (id=1227): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 10.237952156s ago: executing program 3 (id=1228): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.68437315s ago: executing program 3 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x121042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) 8.65777803s ago: executing program 1 (id=1231): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.427412083s ago: executing program 4 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 8.423923444s ago: executing program 2 (id=1242): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x2, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x5, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 6.325989835s ago: executing program 3 (id=1233): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6.317125435s ago: executing program 5 (id=1234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 3.224818952s ago: executing program 5 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) 3.223991072s ago: executing program 1 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.173574302s ago: executing program 2 (id=1237): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockname$packet(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffc69, &(0x7f0000000480)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40c0}, 0x0) 3.161697303s ago: executing program 4 (id=1238): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) listen(0xffffffffffffffff, 0x3) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) 2.916148186s ago: executing program 3 (id=1239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x508, 0x4000086e, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) unshare(0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x3, 0x801}, 0x14}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000dc0)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @local, 0x0, 0x1ff, 0xa856, 0x0, 0x0, 0x43200022}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x141a82, 0x13) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0xfeba) 1.97079793s ago: executing program 5 (id=1240): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x20400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='vfat\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xa81, 0x0) pwritev2(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)="d6", 0x1}], 0x1, 0x10001, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x9, 0x3f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, r3}, 0x38) 1.959508111s ago: executing program 1 (id=1241): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.862051332s ago: executing program 4 (id=1243): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x1, 0x80802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x38, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x13, @multicast, 'macvlan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, "66d7aff8a7eb3af1f6b00ba1d302cec2e74280c1ffff000400"}, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000080), 0x4) 1.775901113s ago: executing program 3 (id=1244): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010100, @in=@loopback, 0x0, 0x9, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x1, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in=@private=0xa010100, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x400000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x8800000, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x3}, {0x4d}, {0x6, 0xfe}]}) socket(0x11, 0x0, 0x0) 1.747828214s ago: executing program 2 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r1, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1f, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES8=r4], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000040000002800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) 1.709312374s ago: executing program 5 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(r2, 0x2) 1.680269785s ago: executing program 1 (id=1247): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) epoll_create1(0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) 1.456572649s ago: executing program 4 (id=1248): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) epoll_create1(0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) 1.173288113s ago: executing program 2 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 306.379696ms ago: executing program 5 (id=1250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x484}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0xc27a, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x5, 0x128, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x0, 0x1, 0xe, 0x3}], 0x10, 0x4, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x65]}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6283, 0x1, 0xeb, 0x1}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 260.461026ms ago: executing program 3 (id=1251): socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) 225.422387ms ago: executing program 4 (id=1252): r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1000, 0x3, 0x2, 0x0, 0x20}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), 0x4) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000640)='workdir\x86\x12d\xa5B\xc4\xa9-\xf9\xc0\x17lB\xe1\xbd=\x14zb\xe5.\x1c\xc4\xf3\xb8s)\xd49r2\xbaKk\x1d\xdd>\xa2\xf1\xf8/\xee\xf2\xea1\xe9(\xeeW\xcf\xdb\x97X\xa8\x84#:\xf3N\x1b#\xd0\x1d\x83\xd4v\x81\x00\x12\xf2b\xbb f\x01\xb7\xe4\xef\xbb\x9b\xcfq\xa2\x1a\x1f\xb0?\xb4\x18)\xa0\x17\xa4\x8d#,p\xb6\xe2\x83fm\xbb\xd5\x95\xea\x19\xd9/\xa1GIl\xeb|t\xd8\x81T\\E\xf5%\xb2\xde\xbbP7\x13\xac\xf6\xc8\x7f\xcd\x19\x88\xb6SMG\x0fM|GAN\x83\xfd\xa5\xd0\xb1\x11\xbcdbl\xec\xb91&\x86\xd7q}\xcf\x15G6\x1d}W\xcf\x93\xaa\x8c\x1b\xbd\xb2]V\xb2\x9d\nM\xf9=\xc0\xed\xd4(o{#P\xee\xba\x82\x7f\x0fn\xcc\xd5~\x8cf\xf64\x9a\x009cx\x89\x90\x10\xa5c\xc8\x10\x8bB\"w\x01g\xa8\x88\xfc\xb0\xd9\x90\xa6\x17 \xb8\x97EU],\xcc\x8d\xb3\xe5s\x16\xfc\xcb\xb5s`\x03\xeej\xaf\x12\xe0\x9bA\r\xe5Qe\x91\x0e\xb1F\xd81S4\xf6c\x97\xf2\x9f$\xd1\xcdx|\xa7`H]\x89\ft\x11DP\xd9\xb9\xedN\xf2\"\xca\x04\xe9I\bys\x90\x8e\xf4\x94\xf9kI\xf9\x15\xbdz\xab\x0eNn;\xb6C\xbd\x13p\xa3\x81\v\xf1\'\xdd\x95\xb7\xc7\xeb4(9\xb1\xe4\flD!\xf2D\x84\x94\xc7\xc0\xff\x86\xe5\xd3\xbaO\xfe\xcf\f\x17\xf0yv\x7f\xa9\xa9V\xfb\xe1\xf4\xaf \xb8w\x9c\x88\x8a\xa8\xea\xa8\x05\xe6\xffl\x0f=\xe7\xfad\xf6\x0f$cT\x89\xec\xee\x84\x01H\x8c\t\xd7\xa0G\xdf$\x92e\xbc,\xe9\xd8s\xf8\xc2x\xea\xa0\x13\x9d\xedU\xa2\xbb\x88\xfe\xc6x\xa66\xd5\xe8\x83\xe0\x92>\x1dAp\x9f9K~Am>\xe5\xa5\xe1\xca\x9d\n\xad\xa5X\x8b2\x81U\xec\x10$U\x1f7\xc4;I\xe1\xe8\xc8\xaekzb\x8dB\x97\x117\x84X\xf7\x1a@\xb1K\x89^\x0ffB\x13xS\xa0\xa4\xb0\x87\xea^#\x81\xf8\x88\xafZc\xee\xdf1\xab\x99\xb4y\xf6=\xe1\x00\x00\x00\x00\x00\x00\x00', 0x215, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES32=r3], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000e40)=@req={0x2, 0xce63, 0xac2c, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2d000000010001", 0x7) 182.176997ms ago: executing program 1 (id=1253): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x2, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x5, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 181.872187ms ago: executing program 2 (id=1254): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=1255): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0xa000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): f interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.771679][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.797644][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.799538][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.806574][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.955245][ T4040] device hsr_slave_0 entered promiscuous mode [ 46.983739][ T4020] Bluetooth: hci1: command 0x0409 tx timeout [ 46.985490][ T4020] Bluetooth: hci0: command 0x0409 tx timeout [ 46.993734][ T4040] device hsr_slave_1 entered promiscuous mode [ 47.033236][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.035164][ T4040] Cannot create hsr debugfs directory [ 47.063204][ T4074] Bluetooth: hci2: command 0x0409 tx timeout [ 47.065016][ T4074] Bluetooth: hci3: command 0x0409 tx timeout [ 47.066968][ T4074] Bluetooth: hci4: command 0x0409 tx timeout [ 47.104062][ T4031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.189807][ T4031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.225825][ T4031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.267883][ T4031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.388515][ T4030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.446342][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.485791][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.535083][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.654209][ T4029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.688156][ T4029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.735732][ T4029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.786329][ T4029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.847623][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.876321][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.878671][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.882760][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.894572][ T4041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.939606][ T4041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.975990][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.978676][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.981636][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.983782][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.986882][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.993729][ T4041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.045394][ T4041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.120393][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.123959][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.126647][ T258] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.128613][ T258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.154184][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.171652][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.187514][ T4040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.215403][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.222327][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.226659][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.234957][ T4040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.285399][ T4040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.326274][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.332184][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.335107][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.356539][ T4040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.387635][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.391835][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.395646][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.411926][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.415860][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.418571][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.420502][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.441782][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.447228][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.449898][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.452842][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.455754][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.460755][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.478953][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.481828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.484799][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.486791][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.491690][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.519426][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.531554][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.536195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.557083][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.559796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.569862][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.578631][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.581580][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.610274][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.617334][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.619797][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.622164][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.628492][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.636094][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.640843][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.644498][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.657536][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.660538][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.666058][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.668051][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.670765][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.674321][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.676837][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.678663][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.680886][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.685054][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.692343][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.696871][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.699512][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.702298][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.711167][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.713114][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.721609][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.724518][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.732381][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.740194][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.745170][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.764380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.767142][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.769623][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.771465][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.776978][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.779799][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.799552][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.802667][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.812400][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.815803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.818779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.821652][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.845888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.848608][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.851598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.859371][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.862206][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.866676][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.869653][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.872509][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.882431][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.889043][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.891822][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.905626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.908406][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.930262][ T4041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.934428][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.939594][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.942381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.956309][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.972319][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.977459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.979615][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.982304][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.988168][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.990768][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.999243][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.011787][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.019197][ T4031] device veth0_vlan entered promiscuous mode [ 49.042054][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.052268][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.060388][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.064178][ T3318] Bluetooth: hci0: command 0x041b tx timeout [ 49.065837][ T3318] Bluetooth: hci1: command 0x041b tx timeout [ 49.071449][ T4031] device veth1_vlan entered promiscuous mode [ 49.075522][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.078002][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.080684][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.117602][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.120403][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.125037][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.127818][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.129677][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.132125][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.153654][ T4075] Bluetooth: hci4: command 0x041b tx timeout [ 49.156308][ T4075] Bluetooth: hci3: command 0x041b tx timeout [ 49.158024][ T4075] Bluetooth: hci2: command 0x041b tx timeout [ 49.169192][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.172194][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.176987][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.178892][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.181182][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.184824][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.202161][ T4031] device veth0_macvtap entered promiscuous mode [ 49.209599][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.212213][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.216082][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.219647][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.222331][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.225152][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.227237][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.230245][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.240364][ T4030] device veth0_vlan entered promiscuous mode [ 49.251380][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.256631][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.266712][ T4031] device veth1_macvtap entered promiscuous mode [ 49.281827][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.286055][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.288156][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.290224][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.294618][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.299860][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.305216][ T4030] device veth1_vlan entered promiscuous mode [ 49.309690][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.312349][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.322932][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.331432][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.334957][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.337562][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.348518][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.372037][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.375029][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.377700][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.380431][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.383954][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.399794][ T4040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.412212][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.429737][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.432412][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.436333][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.438966][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.446478][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.449188][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.451394][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.454867][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.505210][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.508115][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.511280][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.516547][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.520274][ T4029] device veth0_vlan entered promiscuous mode [ 49.523272][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.525711][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.554984][ T4029] device veth1_vlan entered promiscuous mode [ 49.559305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.562198][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.566337][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.585411][ T4030] device veth0_macvtap entered promiscuous mode [ 49.604355][ T4030] device veth1_macvtap entered promiscuous mode [ 49.611530][ T4041] device veth0_vlan entered promiscuous mode [ 49.618295][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.620891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.625415][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.628028][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.630638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.640987][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.644676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.647175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.649204][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.674664][ T4041] device veth1_vlan entered promiscuous mode [ 49.688213][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.691735][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.698182][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.716308][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.719068][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.725496][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.729206][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.731808][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.736846][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.739421][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.742105][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.746423][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.749158][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.760312][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.763223][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.775365][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.777803][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.780114][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.782441][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.790496][ T4029] device veth0_macvtap entered promiscuous mode [ 49.796539][ T4029] device veth1_macvtap entered promiscuous mode [ 49.831962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.835837][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.838349][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.840996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.846524][ T4041] device veth0_macvtap entered promiscuous mode [ 49.852416][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.862204][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.869829][ T4041] device veth1_macvtap entered promiscuous mode [ 49.877874][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.880556][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.884020][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.900517][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.911458][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.917011][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.919649][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.924038][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.928458][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.931495][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.934550][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.937215][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.940886][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.951877][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.962447][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.965887][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.968581][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.971311][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.980604][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.005421][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.009008][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.013480][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.016321][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.018902][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.021702][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.027164][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.029918][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.036440][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.041809][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.047089][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.049738][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.052506][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.055356][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.058054][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.061755][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.065867][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.068489][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.071288][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.075435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.078196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.081798][ T4029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.084414][ T4029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.086713][ T4029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.088966][ T4029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.126779][ T4041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.129254][ T4041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.131657][ T4041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.134863][ T4041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.164772][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.167620][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.205675][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.209254][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.234126][ T416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.236281][ T416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.240957][ T4040] device veth0_vlan entered promiscuous mode [ 50.270433][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.294498][ T4040] device veth1_vlan entered promiscuous mode [ 50.338431][ T416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.340662][ T416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.369070][ T4108] Zero length message leads to an empty skb [ 50.378447][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.381189][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.384550][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.394030][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.396188][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.400568][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.423653][ T416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.425883][ T416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.445220][ T4040] device veth0_macvtap entered promiscuous mode [ 50.450762][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.460903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.464958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.472173][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.592399][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.605403][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.608643][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.651053][ T4040] device veth1_macvtap entered promiscuous mode [ 50.657909][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.661717][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.675156][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.677887][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.687730][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.688154][ T4113] loop2: detected capacity change from 0 to 512 [ 50.690593][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.880177][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.155291][ T4077] Bluetooth: hci1: command 0x040f tx timeout [ 51.158614][ T4077] Bluetooth: hci0: command 0x040f tx timeout [ 51.277113][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 51.280734][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 51.287174][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 51.348834][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.351604][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.363431][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.368555][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.371611][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.392374][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.454486][ T4113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.458290][ T4113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.483458][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.486264][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.505622][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.508418][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.510942][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.569979][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.572701][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.586543][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.589184][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.591921][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.625220][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.642819][ T4124] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5'. [ 51.652161][ T4040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.655675][ T4040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.664829][ T4040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.664929][ T4113] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.667237][ T4040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.337816][ T4077] Bluetooth: hci0: command 0x0419 tx timeout [ 53.346061][ T4077] Bluetooth: hci1: command 0x0419 tx timeout [ 53.368425][ T4113] EXT4-fs (loop2): 1 truncate cleaned up [ 53.369918][ T4113] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback. [ 53.402114][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.405798][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.410152][ T4077] Bluetooth: hci4: command 0x0419 tx timeout [ 53.411872][ T4077] Bluetooth: hci3: command 0x0419 tx timeout [ 53.422953][ T4077] Bluetooth: hci2: command 0x0419 tx timeout [ 53.519486][ T26] audit: type=1326 audit(53.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.538232][ T26] audit: type=1326 audit(53.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.550449][ T26] audit: type=1326 audit(53.520:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.598503][ T26] audit: type=1326 audit(53.520:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.650893][ T26] audit: type=1326 audit(53.520:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.657268][ T26] audit: type=1326 audit(53.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.663148][ T26] audit: type=1326 audit(53.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.678807][ T26] audit: type=1326 audit(53.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.685608][ T26] audit: type=1326 audit(53.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 53.691320][ T26] audit: type=1326 audit(53.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=12 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 55.679639][ T1668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.681985][ T1668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.695445][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.802755][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.805220][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.809241][ T4116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.943266][ T4159] loop3: detected capacity change from 0 to 512 [ 58.172891][ T4159] EXT4-fs (loop3): inline encryption not supported [ 58.238929][ T4167] netlink: 'syz.4.17': attribute type 21 has an invalid length. [ 58.241072][ T4167] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 58.256240][ T4159] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.259326][ T4159] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 58.262042][ T4159] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 58.269216][ T4159] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 58.271557][ T4159] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.4: corrupted in-inode xattr [ 58.280048][ T4159] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 58.283623][ T4159] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noblock_validity,abort,init_itable,inlinecrypt,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 60.331764][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 60.635475][ T4184] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 60.646826][ T4189] udc-core: couldn't find an available UDC or it's busy [ 60.647305][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 60.649130][ T4189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.838425][ T4193] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 60.842538][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.845582][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.889474][ T4196] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 60.892828][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.894998][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.897799][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.899754][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.915673][ T4196] team0: Port device bridge0 added [ 61.559181][ T4230] loop2: detected capacity change from 0 to 512 [ 61.668780][ T4231] loop3: detected capacity change from 0 to 256 [ 62.305303][ T4230] ======================================================= [ 62.305303][ T4230] WARNING: The mand mount option has been deprecated and [ 62.305303][ T4230] and is ignored by this kernel. Remove the mand [ 62.305303][ T4230] option from the mount to silence this warning. [ 62.305303][ T4230] ======================================================= [ 62.357037][ T4230] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 62.359551][ T4230] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.370256][ T4230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 62.381079][ T4230] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.395149][ T4230] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.35: attempt to clear invalid blocks 1024 len 1 [ 62.409049][ T4230] EXT4-fs (loop2): Remounting filesystem read-only [ 62.412398][ T4230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.35: bg 0: block 361: padding at end of block bitmap is not set [ 62.421262][ T4230] EXT4-fs (loop2): Remounting filesystem read-only [ 62.432682][ T4230] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 62.454959][ T4239] loop1: detected capacity change from 0 to 256 [ 62.509967][ T4230] EXT4-fs (loop2): Remounting filesystem read-only [ 62.512541][ T4230] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.35: invalid indirect mapped block 1811939328 (level 0) [ 62.546780][ T4230] EXT4-fs (loop2): Remounting filesystem read-only [ 62.548565][ T4230] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.35: invalid indirect mapped block 2185560079 (level 1) [ 62.560517][ T4239] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 62.564431][ T4239] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 62.573459][ T4230] EXT4-fs (loop2): Remounting filesystem read-only [ 62.576492][ T4239] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 62.578442][ T4239] UDF-fs: Scanning with blocksize 512 failed [ 62.581374][ T4230] EXT4-fs (loop2): 1 truncate cleaned up [ 62.582812][ T4230] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 62.609650][ T4239] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 62.643160][ T4239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.753815][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 62.753829][ T26] audit: type=1326 audit(62.720:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4229 comm="syz.2.35" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x0 [ 67.587567][ T4276] loop0: detected capacity change from 0 to 512 [ 67.680165][ T4276] EXT4-fs (loop0): journaled quota format not specified [ 68.535597][ T4285] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 69.030668][ T4294] tmpfs: Bad value for 'mpol' [ 69.625634][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.627584][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.714517][ T7] cfg80211: failed to load regulatory.db [ 69.802053][ T4296] netlink: 'syz.3.54': attribute type 4 has an invalid length. [ 71.027233][ T4302] device syzkaller0 entered promiscuous mode [ 75.477908][ T4332] loop3: detected capacity change from 0 to 2048 [ 76.631810][ T4332] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 77.670172][ T4345] loop2: detected capacity change from 0 to 2048 [ 77.901989][ T4367] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 78.722673][ T4367] team0: Cannot enslave team device to itself [ 78.736708][ C0] Unknown status report in ack skb [ 78.740103][ T4369] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 78.751683][ T4369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 78.947730][ T4369] team0: Port device geneve0 added [ 79.006284][ T4375] loop0: detected capacity change from 0 to 128 [ 80.734041][ T4355] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 81.003440][ T4388] IPv6: addrconf: prefix option has invalid lifetime [ 81.005280][ T4388] IPv6: addrconf: prefix option has invalid lifetime [ 81.009909][ T4387] attempt to access beyond end of device [ 81.009909][ T4387] loop0: rw=2049, want=673, limit=128 [ 81.053297][ T4388] fuse: Bad value for 'fd' [ 81.330115][ T4375] attempt to access beyond end of device [ 81.330115][ T4375] loop0: rw=524288, want=673, limit=128 [ 82.312592][ T4404] loop1: detected capacity change from 0 to 4096 [ 83.119114][ T4409] loop0: detected capacity change from 0 to 256 [ 83.238985][ T4404] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 83.304189][ T4415] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.306772][ T4415] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.309085][ T4415] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.311362][ T4415] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.389921][ T4404] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 83.395095][ T4415] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 84.424604][ T4404] netlink: 'syz.1.84': attribute type 10 has an invalid length. [ 85.475870][ T4404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.481362][ T4430] device vlan2 entered promiscuous mode [ 85.538153][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 86.334430][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 86.528492][ T4432] device hsr_slave_1 left promiscuous mode [ 86.537804][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 86.580963][ T4443] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.620070][ T4443] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.438172][ T4466] loop0: detected capacity change from 0 to 64 [ 89.488087][ T4468] device vlan2 entered promiscuous mode [ 89.560215][ T4472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 89.573672][ T4472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 89.604371][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 89.754843][ T4476] loop1: detected capacity change from 0 to 2048 [ 90.629578][ T4468] device hsr_slave_1 left promiscuous mode [ 90.710611][ T4476] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 92.284498][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 92.301547][ T4476] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.109: bg 0: block 234: padding at end of block bitmap is not set [ 92.310844][ T4499] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 92.347161][ T4476] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 370 with error 28 [ 92.367295][ T4476] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.367295][ T4476] [ 92.369960][ T4476] EXT4-fs (loop1): Total free blocks count 0 [ 92.392102][ T4476] EXT4-fs (loop1): Free/Dirty block details [ 92.428435][ T4476] EXT4-fs (loop1): free_blocks=0 [ 92.429876][ T4476] EXT4-fs (loop1): dirty_blocks=384 [ 92.431273][ T4476] EXT4-fs (loop1): Block reservation details [ 92.432985][ C1] sched: RT throttling activated [ 92.449047][ T4476] EXT4-fs (loop1): i_reserved_data_blocks=24 [ 92.509846][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 92.630507][ T4503] udc-core: couldn't find an available UDC or it's busy [ 92.643215][ T4503] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.708135][ T4503] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 92.732090][ T4503] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.735921][ T4503] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.788115][ T4503] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 93.241523][ T26] audit: type=1107 audit(92.970:15): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.675697][ T4513] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 93.760155][ T4514] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 94.034306][ T4522] loop3: detected capacity change from 0 to 128 [ 94.049114][ T4524] loop1: detected capacity change from 0 to 8 [ 95.212090][ T4524] SQUASHFS error: xz decompression failed, data probably corrupt [ 95.223519][ T4524] SQUASHFS error: Failed to read block 0x108: -5 [ 95.228041][ T4524] SQUASHFS error: Unable to read metadata cache entry [106] [ 95.230073][ T4524] SQUASHFS error: Unable to read inode 0x0 [ 95.319093][ T4534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'. [ 96.477183][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.589209][ T4036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 96.592140][ T4036] CPU: 1 PID: 4036 Comm: kworker/u5:3 Not tainted 5.15.179-syzkaller #0 [ 96.594344][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.597170][ T4036] Workqueue: hci4 hci_rx_work [ 96.598469][ T4036] Call trace: [ 96.599345][ T4036] dump_backtrace+0x0/0x530 [ 96.600625][ T4036] show_stack+0x2c/0x3c [ 96.601768][ T4036] dump_stack_lvl+0x108/0x170 [ 96.603072][ T4036] dump_stack+0x1c/0x58 [ 96.604211][ T4036] sysfs_create_dir_ns+0x278/0x318 [ 96.605581][ T4036] kobject_add_internal+0x384/0x8f0 [ 96.607013][ T4036] kobject_add+0x14c/0x21c [ 96.608246][ T4036] device_add+0x400/0xef4 [ 96.609489][ T4036] hci_conn_add_sysfs+0xc4/0x1cc [ 96.610839][ T4036] le_conn_complete_evt+0x954/0x1228 [ 96.612301][ T4036] hci_le_meta_evt+0x234/0x31c0 [ 96.613693][ T4036] hci_event_packet+0xd34/0x12b4 [ 96.615021][ T4036] hci_rx_work+0x1d0/0x830 [ 96.616271][ T4036] process_one_work+0x790/0x11b8 [ 96.617635][ T4036] worker_thread+0x910/0x1034 [ 96.618957][ T4036] kthread+0x37c/0x45c [ 96.620049][ T4036] ret_from_fork+0x10/0x20 [ 96.624305][ T4036] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.627801][ T4036] Bluetooth: hci4: failed to register connection device [ 96.662229][ T4550] netlink: 104 bytes leftover after parsing attributes in process `syz.2.131'. [ 96.896049][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.070872][ T4571] input: syz0 as /devices/virtual/input/input2 [ 98.493640][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 99.012564][ T4593] sctp: [Deprecated]: syz.3.141 (pid 4593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.012564][ T4593] Use struct sctp_sack_info instead [ 99.721623][ T4589] netlink: 280 bytes leftover after parsing attributes in process `syz.1.144'. [ 99.796376][ T4589] team0 (unregistering): Port device team_slave_0 removed [ 99.836704][ T4589] team0 (unregistering): Port device team_slave_1 removed [ 99.840004][ T4600] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 99.849495][ T4600] PKCS7: Only support pkcs7_signedData type [ 100.027600][ T4606] loop2: detected capacity change from 0 to 1024 [ 100.049854][ T4589] team0 (unregistering): Port device geneve0 removed [ 101.351198][ T4620] siw: device registration error -23 [ 101.365791][ T4619] tipc: Started in network mode [ 101.390713][ T4619] tipc: Node identity ac14142f, cluster identity 4711 [ 101.396612][ T4619] tipc: New replicast peer: 0.0.0.0 [ 101.399432][ T4619] tipc: Enabled bearer , priority 10 [ 101.620293][ T4625] loop3: detected capacity change from 0 to 40427 [ 101.716013][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 101.735921][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 101.778687][ T4625] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 101.781019][ T4625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.795791][ T4625] F2FS-fs (loop3): invalid crc value [ 101.821213][ T4635] device netdevsim0 entered promiscuous mode [ 102.560000][ T4079] tipc: Node number set to 2886997039 [ 102.745987][ T4625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.778052][ T4635] device syz_tun entered promiscuous mode [ 102.805587][ T4625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 102.807824][ T4625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.845343][ T4653] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.899570][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 103.915156][ T4659] loop2: detected capacity change from 0 to 256 [ 104.872086][ T26] audit: type=1326 audit(104.840:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.2.163" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x0 [ 104.883829][ T4117] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 104.886351][ T4117] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 106.073621][ T4680] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 107.203530][ T4689] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 107.208177][ T4678] loop0: detected capacity change from 0 to 1024 [ 108.077122][ T4694] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 108.083206][ T4678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.133155][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 108.278782][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 108.288185][ T4694] device bond1 entered promiscuous mode [ 108.290082][ T4694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.344285][ T4694] device ip6gretap1 entered promiscuous mode [ 108.350034][ T4694] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 108.398889][ T4117] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 108.411591][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 108.513288][ T4117] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.316459][ T4710] udc-core: couldn't find an available UDC or it's busy [ 109.318407][ T4710] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.767300][ T4729] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 110.779933][ T4729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 110.896319][ T4729] team0: Port device geneve0 added [ 110.905067][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 110.915046][ T4732] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 110.973261][ T4732] 8021q: adding VLAN 0 to HW filter on device team1 [ 112.095000][ T4745] loop1: detected capacity change from 0 to 8 [ 112.266855][ T4753] xt_hashlimit: max too large, truncated to 1048576 [ 112.270985][ T4753] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 112.989718][ T4745] SQUASHFS error: xz decompression failed, data probably corrupt [ 112.992071][ T4745] SQUASHFS error: Failed to read block 0x108: -5 [ 112.994524][ T4745] SQUASHFS error: Unable to read metadata cache entry [106] [ 113.007044][ T4745] SQUASHFS error: Unable to read inode 0x11f [ 113.469441][ T4772] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 113.471795][ T4772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 113.484477][ T4772] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.495996][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 113.512305][ T4772] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.947229][ T4808] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 117.165113][ T4812] loop2: detected capacity change from 0 to 8 [ 117.386493][ T4076] Bluetooth: hci4: command 0x0407 tx timeout [ 117.414695][ T4812] SQUASHFS error: xz decompression failed, data probably corrupt [ 117.419138][ T4812] SQUASHFS error: Failed to read block 0x108: -5 [ 117.420792][ T4812] SQUASHFS error: Unable to read metadata cache entry [106] [ 117.422659][ T4812] SQUASHFS error: Unable to read inode 0x11f [ 118.767239][ T4833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 119.483410][ T4833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 119.712853][ T4840] loop3: detected capacity change from 0 to 164 [ 119.721343][ T4831] loop1: detected capacity change from 0 to 40427 [ 119.745119][ T4840] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.767265][ T4831] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.769414][ T4831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.774870][ T4840] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.785033][ T4840] rock: directory entry would overflow storage [ 119.786664][ T4840] rock: sig=0x4f50, size=4, remaining=3 [ 119.788053][ T4840] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.931044][ T4831] F2FS-fs (loop1): invalid crc value [ 120.016600][ T4831] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.033348][ T4831] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.035374][ T4831] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.487657][ T4072] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.490340][ T1668] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 121.490381][ T1668] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 122.433284][ T4072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.436550][ T4072] usb 1-1: config 0 has no interfaces? [ 122.438053][ T4072] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 122.440625][ T4072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.469067][ T4072] usb 1-1: config 0 descriptor?? [ 122.546331][ T4883] loop3: detected capacity change from 0 to 256 [ 122.641840][ T4883] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 123.996070][ T4181] usb 1-1: USB disconnect, device number 2 [ 125.439321][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.442199][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.445100][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.447864][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.450489][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.453267][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.455928][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.458576][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.461247][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 125.464264][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 126.244814][ T4913] loop0: detected capacity change from 0 to 40427 [ 128.206219][ T4933] device gretap0 entered promiscuous mode [ 128.218417][ T4933] device vlan2 entered promiscuous mode [ 128.507208][ T4913] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 128.509377][ T4913] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.518463][ T4913] F2FS-fs (loop0): invalid crc value [ 129.705897][ T4913] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 131.738771][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.741749][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.831635][ T4956] process 'syz.0.262' launched './file0' with NULL argv: empty string added [ 131.849423][ T4970] loop3: detected capacity change from 0 to 8 [ 131.967044][ T4969] device wireguard0 entered promiscuous mode [ 132.456657][ T4970] SQUASHFS error: zlib decompression failed, data probably corrupt [ 132.461443][ T4970] SQUASHFS error: Failed to read block 0x9b: -5 [ 132.473303][ T4970] SQUASHFS error: Unable to read metadata cache entry [99] [ 132.643814][ T4970] SQUASHFS error: Unable to read inode 0x127 [ 133.901578][ T4970] xt_TCPMSS: Only works on TCP SYN packets [ 134.435706][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.437769][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.218003][ T4995] __nla_validate_parse: 43 callbacks suppressed [ 135.218017][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 135.363752][ T5002] netlink: 'syz.1.270': attribute type 3 has an invalid length. [ 135.382866][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 135.401546][ T5002] loop1: detected capacity change from 0 to 1024 [ 135.411994][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.647141][ T5002] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.674766][ T4181] kernel write not supported for file /uhid (pid: 4181 comm: kworker/1:7) [ 136.686708][ T5017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 136.829292][ T5023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 136.846010][ T26] audit: type=1326 audit(136.810:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.864340][ T26] audit: type=1326 audit(136.830:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.908581][ T26] audit: type=1326 audit(136.870:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.923920][ T26] audit: type=1326 audit(136.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.941099][ T26] audit: type=1326 audit(136.870:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.954855][ T26] audit: type=1326 audit(136.890:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.972771][ T26] audit: type=1326 audit(136.890:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 136.992713][ T26] audit: type=1326 audit(136.890:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 137.012938][ T26] audit: type=1326 audit(136.890:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 137.032366][ T26] audit: type=1326 audit(136.890:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 137.066626][ T4165] tipc: Subscription rejected, illegal request [ 137.693629][ T5048] netlink: 56 bytes leftover after parsing attributes in process `syz.0.286'. [ 138.770205][ T5057] loop3: detected capacity change from 0 to 2048 [ 138.817389][ T5060] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 139.945378][ T5057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.152052][ T5083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.184821][ T5077] loop1: detected capacity change from 0 to 512 [ 141.465976][ T5077] EXT4-fs (loop1): Ignoring removed nobh option [ 141.467739][ T5077] EXT4-fs (loop1): Ignoring removed nobh option [ 141.596541][ T5077] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.295: invalid indirect mapped block 256 (level 2) [ 141.601401][ T5077] EXT4-fs (loop1): 2 truncates cleaned up [ 141.602888][ T5077] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nobh,data_err=ignore,,errors=continue. Quota mode: writeback. [ 141.689080][ T5077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.295: bg 0: block 5: invalid block bitmap [ 142.583951][ T5077] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4096 with max blocks 1 with error 28 [ 143.367520][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 143.367533][ T26] audit: type=1326 audit(143.330:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.1.295" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b355028 code=0x0 [ 143.396082][ T5077] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.396082][ T5077] [ 143.398673][ T5077] EXT4-fs (loop1): Total free blocks count 0 [ 143.400228][ T5077] EXT4-fs (loop1): Free/Dirty block details [ 143.401759][ T5077] EXT4-fs (loop1): free_blocks=0 [ 143.437966][ T5077] EXT4-fs (loop1): dirty_blocks=2 [ 143.439329][ T5077] EXT4-fs (loop1): Block reservation details [ 143.440872][ T5077] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 143.469826][ T5077] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 143.483176][ T5077] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.483176][ T5077] [ 143.493781][ T5169] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 144.588531][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.604046][ T5185] netlink: 80 bytes leftover after parsing attributes in process `syz.1.306'. [ 144.720942][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.741381][ T5192] udc-core: couldn't find an available UDC or it's busy [ 144.747901][ T5192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.770780][ T5181] bond0 (unregistering): Released all slaves [ 144.816402][ T5185] netlink: 6 bytes leftover after parsing attributes in process `syz.1.306'. [ 144.830074][ T5193] IPVS: Error connecting to the multicast addr [ 146.596224][ T5218] netlink: 71 bytes leftover after parsing attributes in process `syz.1.319'. [ 146.711949][ T5218] loop1: detected capacity change from 0 to 512 [ 146.791050][ T5218] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.649169][ T5218] EXT4-fs (loop1): 1 truncate cleaned up [ 147.650731][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,nombcache,barrier=0x000000000000ffff,nodelalloc,noblock_validity,barrier=0x0000000000000000,,errors=continue. Quota mode: none. [ 147.659863][ T5228] udc-core: couldn't find an available UDC or it's busy [ 147.661738][ T5228] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.815277][ T5237] netlink: 'syz.0.325': attribute type 10 has an invalid length. [ 148.856390][ T5244] Trying to write to read-only block-device nullb0 [ 149.144654][ C0] vcan0: j1939_tp_rxtimer: 0x000000002410b110: rx timeout, send abort [ 149.646745][ T5262] loop0: detected capacity change from 0 to 164 [ 149.648125][ C0] vcan0: j1939_tp_rxtimer: 0x000000002410b110: abort rx timeout. Force session deactivation [ 150.009373][ T5272] device lo entered promiscuous mode [ 150.022112][ T5272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.632487][ T5298] binder: 5292:5298 tried to acquire reference to desc 0, got 1 instead [ 152.018129][ T5314] binder: 5292:5314 transaction failed 29201/-22, size 104--358 line 3085 [ 152.035970][ T4080] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.201823][ T5395] loop0: detected capacity change from 0 to 64 [ 160.070357][ T5399] loop1: detected capacity change from 0 to 128 [ 160.108430][ T5399] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.139884][ T5399] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.356: No space for directory leaf checksum. Please run e2fsck -D. [ 160.156548][ T5399] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.356: checksumming directory block 0 [ 160.310725][ T5399] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.356: No space for directory leaf checksum. Please run e2fsck -D. [ 160.330507][ T5410] tmpfs: Unknown parameter 'quota' [ 160.333662][ T5399] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.356: Directory block failed checksum [ 160.358345][ T5399] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.356: No space for directory leaf checksum. Please run e2fsck -D. [ 160.394170][ T5399] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.356: checksumming directory block 0 [ 161.065760][ T5407] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.356: No space for directory leaf checksum. Please run e2fsck -D. [ 161.073244][ T5407] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.356: checksumming directory block 0 [ 161.109080][ T5415] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.356: No space for directory leaf checksum. Please run e2fsck -D. [ 161.232928][ T5415] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.356: checksumming directory block 0 [ 161.282442][ T5399] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.356: No space for directory leaf checksum. Please run e2fsck -D. [ 161.331891][ T5399] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.356: checksumming directory block 0 [ 161.388370][ T4036] Bluetooth: hci4: Received unexpected HCI Event 00000000 [ 162.801896][ T5447] loop1: detected capacity change from 0 to 64 [ 164.709102][ T4080] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 164.711676][ T4080] Bluetooth: hci2: Injecting HCI hardware error event [ 164.719871][ T4036] Bluetooth: hci2: hardware error 0x00 [ 165.640379][ T5474] netlink: 'syz.0.379': attribute type 2 has an invalid length. [ 166.274240][ T5475] netlink: 96 bytes leftover after parsing attributes in process `syz.2.380'. [ 166.276587][ T5475] netlink: 120 bytes leftover after parsing attributes in process `syz.2.380'. [ 168.015946][ T5499] loop3: detected capacity change from 0 to 1024 [ 169.046873][ T5508] netlink: 80 bytes leftover after parsing attributes in process `syz.1.388'. [ 169.050884][ T5508] netlink: 80 bytes leftover after parsing attributes in process `syz.1.388'. [ 170.175258][ T4072] Bluetooth: hci0: command 0x0406 tx timeout [ 170.177024][ T4072] Bluetooth: hci1: command 0x0406 tx timeout [ 170.194777][ T5508] netlink: 80 bytes leftover after parsing attributes in process `syz.1.388'. [ 170.425155][ T4076] Bluetooth: hci3: command 0x0406 tx timeout [ 170.428856][ T5513] sch_tbf: burst 4398 is lower than device lo mtu (39799) ! [ 170.720465][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 171.863702][ T4165] hfsplus: b-tree write err: -5, ino 4 [ 172.828416][ T5536] ODEBUG: Out of memory. ODEBUG disabled [ 172.964523][ T5536] syz.1.399 (5536): drop_caches: 2 [ 173.566010][ T5533] loop3: detected capacity change from 0 to 32768 [ 173.619694][ T5533] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 173.665568][ T5533] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 173.953824][ T4040] ocfs2: Unmounting device (7,3) on (node local) [ 173.995281][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 178.695693][ T5600] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.839694][ T5603] loop1: detected capacity change from 0 to 1024 [ 178.842560][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 178.871353][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 178.891819][ T5603] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 178.910655][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 178.957152][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 178.996106][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 179.021264][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 179.929990][ T5614] loop3: detected capacity change from 0 to 128 [ 180.036217][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.041891][ T5617] bond0: (slave rose0): Enslaving as an active interface with an up link [ 180.048057][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 180.122862][ T5614] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.125107][ T5614] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.152078][ T5614] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 180.999950][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 181.040245][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 181.977694][ T5651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.431'. [ 181.980992][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 182.141127][ T5657] tipc: Failed to obtain node identity [ 182.163145][ T5657] tipc: Enabling of bearer rejected, failed to enable media [ 182.282877][ T5666] tipc: Failed to remove unknown binding: 66,1,1/0:515503704/515503706 [ 182.343650][ T5666] tipc: Failed to remove unknown binding: 66,1,1/0:515503704/515503706 [ 182.346446][ T5666] tipc: Failed to remove unknown binding: 66,1,1/0:515503704/515503706 [ 183.363985][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 183.659950][ T5711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 183.779045][ T5714] sock: sock_set_timeout: `syz.2.443' (pid 5714) tries to set negative timeout [ 184.558653][ T5721] loop0: detected capacity change from 0 to 512 [ 184.614183][ T5721] EXT4-fs (loop0): Ignoring removed orlov option [ 184.648539][ T5721] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.447: Attempting to read directory block (0) that is past i_size (256) [ 184.675209][ T5721] EXT4-fs (loop0): Remounting filesystem read-only [ 184.676992][ T5721] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 184.688102][ T5721] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,auto_da_alloc,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 186.526697][ T5725] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 186.572590][ T5725] EXT4-fs (loop0): Remounting filesystem read-only [ 186.658110][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 188.130278][ T5752] netlink: 68 bytes leftover after parsing attributes in process `syz.0.453'. [ 188.194776][ T5755] netlink: 116 bytes leftover after parsing attributes in process `syz.2.458'. [ 188.316402][ T26] audit: type=1326 audit(188.280:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.3.461" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff911e9028 code=0x0 [ 192.639564][ T5804] device syzkaller1 entered promiscuous mode [ 193.336411][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.338259][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.680501][ T5818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.475'. [ 194.682871][ T5818] tipc: Started in network mode [ 194.700642][ T5818] tipc: Node identity 7, cluster identity 5 [ 194.702294][ T5818] tipc: Node number set to 7 [ 196.955119][ T5845] loop0: detected capacity change from 0 to 128 [ 196.960592][ T5841] netlink: 'syz.1.481': attribute type 10 has an invalid length. [ 196.992598][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 197.014807][ T5845] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.033081][ T5845] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.738164][ T4031] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 198.740708][ T4031] FAT-fs (loop0): Filesystem has been set read-only [ 198.742906][ T4031] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 202.559434][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'. [ 202.950685][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 203.256510][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.261428][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.271684][ T5887] device bridge_slave_0 entered promiscuous mode [ 204.041124][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.047957][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.060408][ T5887] device bridge_slave_1 entered promiscuous mode [ 204.133863][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 204.148252][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.155461][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.193385][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 204.370130][ T5887] team0: Port device team_slave_0 added [ 204.388135][ T5887] team0: Port device team_slave_1 added [ 204.423074][ T4078] Bluetooth: hci2: command 0x0409 tx timeout [ 204.458446][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.460312][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.752095][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.734595][ T5969] overlayfs: failed to clone upperpath [ 206.878643][ T4079] Bluetooth: hci2: command 0x041b tx timeout [ 207.266699][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.275090][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.288931][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.836769][ T5999] loop3: detected capacity change from 0 to 128 [ 209.842766][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 209.999659][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 210.065120][ T5887] device hsr_slave_0 entered promiscuous mode [ 211.493445][ T5887] device hsr_slave_1 entered promiscuous mode [ 211.553691][ T5887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.560872][ T5887] Cannot create hsr debugfs directory [ 211.564633][ T6011] loop1: detected capacity change from 0 to 2048 [ 211.599569][ T6011] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 211.613601][ T5999] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.581298][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 213.597980][ T5999] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 213.667425][ T5887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.705119][ T5887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.785349][ T5887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.818541][ T5887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.017178][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.031760][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.034738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.042844][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.086926][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.090149][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.094892][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.097017][ T5328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.101727][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.118993][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.139807][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.141680][ T5328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.156452][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.166267][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.171581][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.195382][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.201776][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.209885][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.212948][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.221165][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.351228][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.384511][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.396083][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.456356][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.482259][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.488669][ T6059] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 221.583774][ T6104] batman_adv: batadv0: Adding interface: dummy0 [ 221.587213][ T6104] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.595287][ T6104] batman_adv: batadv0: Interface activated: dummy0 [ 221.627559][ T6105] batadv0: mtu less than device minimum [ 221.633934][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.641622][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.649006][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.656462][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.663776][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.671060][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.678337][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.685656][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.692950][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.762231][ T6108] device macvlan2 entered promiscuous mode [ 221.767783][ T6108] device batadv0 entered promiscuous mode [ 221.778516][ T6108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.784015][ T6108] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 221.788787][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.273583][ T5151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.094280][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.096372][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.105764][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 223.109318][ T6125] device macsec0 entered promiscuous mode [ 223.175455][ T5151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.190213][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.311606][ T5151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.390844][ T6130] bridge0: port 3(vlan2) entered blocking state [ 224.001459][ T6130] bridge0: port 3(vlan2) entered disabled state [ 224.009768][ T6130] device vlan2 entered promiscuous mode [ 224.012354][ T6130] device bond0 entered promiscuous mode [ 224.018789][ T6130] device bond_slave_0 entered promiscuous mode [ 224.022785][ T6130] device bond_slave_1 entered promiscuous mode [ 224.440652][ T6130] device wlan1 entered promiscuous mode [ 224.452092][ T6130] bridge0: port 3(vlan2) entered blocking state [ 224.453937][ T6130] bridge0: port 3(vlan2) entered forwarding state [ 225.741964][ T5151] device netdevsim0 left promiscuous mode [ 228.119629][ T5151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.154713][ T6142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.157815][ T6142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.332033][ T6142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.336035][ T6142] device bridge_slave_0 left promiscuous mode [ 228.337751][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.462374][ T6142] device bridge_slave_1 left promiscuous mode [ 230.468861][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.783779][ T6142] device vlan2 left promiscuous mode [ 230.786584][ T6142] device bond0 left promiscuous mode [ 230.964719][ T6142] bond0: (slave bond_slave_0): Releasing backup interface [ 231.373958][ T6142] device bond_slave_0 left promiscuous mode [ 231.380774][ T6142] bond0: (slave bond_slave_1): Releasing backup interface [ 231.424732][ T6142] device bond_slave_1 left promiscuous mode [ 231.435456][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.437465][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.440893][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.443397][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.453544][ T6142] bond0: (slave wlan1): Releasing backup interface [ 231.498163][ T6142] device wlan1 left promiscuous mode [ 231.513099][ T6142] bond1: (slave ip6gretap1): Removing an active aggregator [ 231.517000][ T6142] bond1: (slave ip6gretap1): Releasing backup interface [ 231.551369][ T6142] device ip6gretap1 left promiscuous mode [ 231.571621][ T6142] bridge0: port 3(vlan2) entered disabled state [ 231.717136][ T6195] loop3: detected capacity change from 0 to 512 [ 231.789797][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.792779][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.812096][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 232.033396][ T6204] capability: warning: `syz.4.577' uses deprecated v2 capabilities in a way that may be insecure [ 233.125455][ T6195] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.576: casefold flag without casefold feature [ 233.136769][ T6195] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.576: couldn't read orphan inode 15 (err -117) [ 233.163288][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 233.184102][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.187564][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.192516][ T5887] device veth0_vlan entered promiscuous mode [ 233.224074][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.226964][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.257893][ T5887] device veth1_vlan entered promiscuous mode [ 233.519307][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.522072][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.528715][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.540959][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.685334][ T6214] overlayfs: failed to resolve './file1': -2 [ 234.287480][ T5887] device veth0_macvtap entered promiscuous mode [ 234.324772][ T5887] device veth1_macvtap entered promiscuous mode [ 234.383131][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.406070][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.417959][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.436462][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.439029][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.472612][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.485402][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.498663][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.514298][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.277571][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.295247][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.313161][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.315861][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.318427][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.321109][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.333482][ T5887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.336152][ T5887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.340713][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.417410][ T5887] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.419787][ T5887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.483991][ T5887] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.486304][ T5887] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.385673][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.388800][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.391799][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.394924][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.483388][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.485714][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.488938][ T5348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.492296][ T5348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.502521][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.515686][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.333956][ T6250] delete_channel: no stack [ 240.940063][ T6280] sctp: [Deprecated]: syz.1.592 (pid 6280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.940063][ T6280] Use struct sctp_sack_info instead [ 241.125054][ T26] audit: type=1326 audit(241.090:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.208234][ T26] audit: type=1326 audit(241.170:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.269943][ T26] audit: type=1326 audit(241.220:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.298043][ T26] audit: type=1326 audit(241.220:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.311973][ T6284] delete_channel: no stack [ 241.324794][ T6278] tipc: Started in network mode [ 241.326323][ T26] audit: type=1326 audit(241.230:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.332228][ T26] audit: type=1326 audit(241.230:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.339570][ T6278] tipc: Node identity 4, cluster identity 4711 [ 241.341323][ T6278] tipc: Node number set to 4 [ 241.403240][ T26] audit: type=1326 audit(241.230:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.409462][ T26] audit: type=1326 audit(241.230:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.446700][ T26] audit: type=1326 audit(241.230:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 241.452386][ T26] audit: type=1326 audit(241.230:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.4.594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97c61028 code=0x7ffc0000 [ 246.394248][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.610'. [ 253.681459][ T6396] xt_hashlimit: max too large, truncated to 1048576 [ 253.684056][ T6396] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 254.468401][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.470168][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.589163][ T6406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.729283][ T6404] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 255.941195][ T6407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.944381][ T6407] bond2: (slave bond3): making interface the new active one [ 255.946662][ T6407] bond2: (slave bond3): Enslaving as an active interface with an up link [ 255.955221][ T6412] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 261.171022][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 261.189622][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 261.258355][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 261.308232][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.338030][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.640'. [ 261.395105][ T6473] device bridge_slave_1 left promiscuous mode [ 261.396855][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.091845][ T6487] loop3: detected capacity change from 0 to 16 [ 262.255047][ T6487] erofs: (device loop3): mounted with root inode @ nid 36. [ 263.377690][ T5151] device hsr_slave_0 left promiscuous mode [ 263.594646][ T5151] device hsr_slave_1 left promiscuous mode [ 264.874890][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.878145][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.928326][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.931867][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.083346][ T5151] device bridge_slave_1 left promiscuous mode [ 265.086755][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.167882][ T5151] device bridge_slave_0 left promiscuous mode [ 266.169804][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.323843][ T5151] device veth1_macvtap left promiscuous mode [ 266.329219][ T5151] device veth0_macvtap left promiscuous mode [ 266.333572][ T5151] device veth1_vlan left promiscuous mode [ 266.337481][ T5151] device veth0_vlan left promiscuous mode [ 266.510882][ T6534] loop3: detected capacity change from 0 to 128 [ 267.638749][ T5151] team0 (unregistering): Port device team_slave_1 removed [ 267.650850][ T5151] team0 (unregistering): Port device team_slave_0 removed [ 274.372715][ T6591] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 274.561409][ T6597] syz.1.664 sent an empty control message without MSG_MORE. [ 275.642438][ T6612] overlayfs: failed to clone upperpath [ 278.515348][ T6605] delete_channel: no stack [ 279.848580][ T6616] delete_channel: no stack [ 280.948538][ T6632] loop5: detected capacity change from 0 to 2048 [ 281.055439][ T6632] UDF-fs: bad mount option "1844674407370955161500000000000000000000" or missing value [ 281.390950][ T6655] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 281.394323][ T6655] overlayfs: missing 'lowerdir' [ 283.274949][ T6662] udc-core: couldn't find an available UDC or it's busy [ 283.750420][ T6662] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 284.013179][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 284.013223][ T26] audit: type=1326 audit(283.970:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.020668][ T26] audit: type=1326 audit(283.970:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.803132][ T26] audit: type=1326 audit(284.000:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.823659][ T26] audit: type=1326 audit(284.000:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.829165][ T26] audit: type=1326 audit(284.000:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.842592][ T26] audit: type=1326 audit(284.000:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.861838][ T26] audit: type=1326 audit(284.000:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.890983][ T26] audit: type=1326 audit(284.000:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.917447][ T26] audit: type=1326 audit(284.710:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.934215][ T258] tipc: Subscription rejected, illegal request [ 284.943422][ T26] audit: type=1326 audit(284.710:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 284.951938][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 285.034235][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.689'. [ 285.059011][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 285.104980][ T6692] device bond_slave_0 entered promiscuous mode [ 285.106882][ T6692] device bond_slave_1 entered promiscuous mode [ 285.121316][ T6692] device macvtap1 entered promiscuous mode [ 285.122888][ T6692] device bond0 entered promiscuous mode [ 285.313377][ T6692] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 287.116261][ T6696] device bond0 left promiscuous mode [ 287.118642][ T6696] device bond_slave_0 left promiscuous mode [ 287.120348][ T6696] device bond_slave_1 left promiscuous mode [ 288.120875][ T6716] delete_channel: no stack [ 288.340375][ T6723] loop5: detected capacity change from 0 to 128 [ 289.382441][ T6723] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.906902][ T6759] bond0 (unregistering): Released all slaves [ 294.115617][ T6784] net_ratelimit: 12 callbacks suppressed [ 294.115634][ T6784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.133128][ T6787] udc-core: couldn't find an available UDC or it's busy [ 294.135031][ T6787] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 297.798427][ T6834] loop1: detected capacity change from 0 to 2048 [ 298.188888][ T6851] netlink: 'syz.1.731': attribute type 10 has an invalid length. [ 298.195384][ T6851] device syz_tun entered promiscuous mode [ 298.812261][ T6852] loop3: detected capacity change from 0 to 64 [ 299.215699][ C1] vcan0: j1939_tp_rxtimer: 0x000000009ff8d202: rx timeout, send abort [ 299.718006][ C1] vcan0: j1939_tp_rxtimer: 0x000000009ff8d202: abort rx timeout. Force session deactivation [ 301.454502][ T6887] loop3: detected capacity change from 0 to 2048 [ 302.112594][ T6887] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 304.004656][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 306.090575][ C0] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 307.917370][ T7054] loop3: detected capacity change from 0 to 512 [ 309.088436][ T21] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 309.091303][ T21] Bluetooth: hci4: Injecting HCI hardware error event [ 309.140159][ T144] Bluetooth: hci4: hardware error 0x00 [ 309.188299][ T7066] loop1: detected capacity change from 0 to 1024 [ 310.549707][ T7054] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.765: casefold flag without casefold feature [ 310.591250][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 310.605961][ T7054] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.765: couldn't read orphan inode 15 (err -117) [ 310.625214][ T7054] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.431388][ T7098] 8021q: VLANs not supported on vcan0 [ 312.444567][ T148] hfsplus: b-tree write err: -5, ino 4 [ 313.321663][ T7111] 9pnet: Insufficient options for proto=fd [ 313.984546][ T7121] netlink: 96 bytes leftover after parsing attributes in process `syz.1.776'. [ 313.987020][ T7121] netlink: 120 bytes leftover after parsing attributes in process `syz.1.776'. [ 315.540946][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.542707][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.610119][ T7137] loop1: detected capacity change from 0 to 64 [ 320.040755][ T7179] loop1: detected capacity change from 0 to 64 [ 320.556617][ T7193] tipc: Enabled bearer , priority 10 [ 322.040391][ T4080] Bluetooth: hci2: command 0x0405 tx timeout [ 322.330037][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 322.332497][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 324.236794][ T7237] tipc: Failed to remove unknown binding: 66,1,1/0:242658942/242658944 [ 324.258057][ T7237] tipc: Failed to remove unknown binding: 66,1,1/0:242658942/242658944 [ 324.260226][ T7237] tipc: Failed to remove unknown binding: 66,1,1/0:242658942/242658944 [ 325.322324][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 325.322337][ T26] audit: type=1326 audit(325.280:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.1.812" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b355028 code=0x0 [ 327.341264][ T7283] netlink: 'syz.2.816': attribute type 12 has an invalid length. [ 327.820971][ T4181] Bluetooth: hci2: command 0x0406 tx timeout [ 330.950356][ T7310] loop1: detected capacity change from 0 to 1024 [ 331.073115][ T7310] EXT4-fs (loop1): Test dummy encryption mode enabled [ 332.126559][ T7310] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 332.238694][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 332.241050][ T7330] tipc: Started in network mode [ 332.299402][ T7330] tipc: Node identity 7, cluster identity 5 [ 332.341562][ T7330] tipc: Node number set to 7 [ 333.224197][ T7310] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 335.287376][ T7381] loop5: detected capacity change from 0 to 64 [ 335.300893][ T7382] loop1: detected capacity change from 0 to 64 [ 345.043186][ T7470] loop5: detected capacity change from 0 to 256 [ 345.069145][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'. [ 346.109138][ T7470] FAT-fs (loop5): Directory bread(block 64) failed [ 346.110934][ T7470] FAT-fs (loop5): Directory bread(block 65) failed [ 346.153225][ T7470] FAT-fs (loop5): Directory bread(block 66) failed [ 346.155061][ T7470] FAT-fs (loop5): Directory bread(block 67) failed [ 346.156943][ T7470] FAT-fs (loop5): Directory bread(block 68) failed [ 346.173271][ T7470] FAT-fs (loop5): Directory bread(block 69) failed [ 346.175015][ T7470] FAT-fs (loop5): Directory bread(block 70) failed [ 346.176731][ T7470] FAT-fs (loop5): Directory bread(block 71) failed [ 346.178505][ T7470] FAT-fs (loop5): Directory bread(block 72) failed [ 346.180168][ T7470] FAT-fs (loop5): Directory bread(block 73) failed [ 349.355592][ T7516] loop3: detected capacity change from 0 to 764 [ 354.190564][ T7558] loop1: detected capacity change from 0 to 2048 [ 354.257110][ T7558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.289994][ T7561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.984032][ T7581] input: syz1 as /devices/virtual/input/input3 [ 360.726840][ T7638] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 363.205350][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 368.975408][ T7716] hub 2-0:1.0: USB hub found [ 368.980054][ T7716] hub 2-0:1.0: 8 ports detected [ 373.138935][ T7758] batman_adv: batadv0: Adding interface: dummy0 [ 373.140751][ T7758] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.161178][ T7758] batman_adv: batadv0: Interface activated: dummy0 [ 373.167545][ T7758] batadv0: mtu less than device minimum [ 373.174900][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.182210][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.189754][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.196977][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.204216][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.211491][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.218677][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.225893][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.233158][ T7758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.161303][ T7758] device macvlan3 entered promiscuous mode [ 374.189796][ T7758] device batadv0 entered promiscuous mode [ 374.196354][ T7758] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 374.218049][ T7758] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 374.581759][ T7781] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 377.056295][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.058067][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.275639][ T7850] delete_channel: no stack [ 383.627311][ T7872] overlayfs: failed to clone upperpath [ 384.407545][ T7873] loop1: detected capacity change from 0 to 8192 [ 387.035678][ T7901] batman_adv: batadv0: Adding interface: dummy0 [ 387.046166][ T7901] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.218225][ T7901] batman_adv: batadv0: Interface activated: dummy0 [ 387.367934][ T7887] net_ratelimit: 12 callbacks suppressed [ 387.367952][ T7887] batadv0: mtu less than device minimum [ 387.375578][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.382813][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.390296][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.397461][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.404753][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.412012][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.419303][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.426466][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.433710][ T7887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.588330][ T7917] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 390.334991][ T7934] loop5: detected capacity change from 0 to 164 [ 390.508487][ T7934] netlink: 56 bytes leftover after parsing attributes in process `syz.5.987'. [ 393.167505][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 393.170048][ T7959] device bridge_slave_1 left promiscuous mode [ 393.171800][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.268947][ T7959] device bridge_slave_0 left promiscuous mode [ 393.270821][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.357164][ T7959] team0: Port device bridge0 removed [ 395.579393][ T7995] loop5: detected capacity change from 0 to 164 [ 395.673344][ T7995] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.773698][ T7995] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.830158][ T7995] rock: directory entry would overflow storage [ 395.833798][ T7995] rock: sig=0x4f50, size=4, remaining=3 [ 395.835460][ T7995] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 397.829128][ T26] audit: type=1326 audit(397.790:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.899432][ T26] audit: type=1326 audit(397.810:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.912035][ T26] audit: type=1326 audit(397.810:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.918482][ T26] audit: type=1326 audit(397.810:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.924713][ T26] audit: type=1326 audit(397.810:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.930627][ T26] audit: type=1326 audit(397.810:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.936842][ T26] audit: type=1326 audit(397.810:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.942712][ T26] audit: type=1326 audit(397.830:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.950841][ T26] audit: type=1326 audit(397.850:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 397.991971][ T26] audit: type=1326 audit(397.850:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d041028 code=0x7ffc0000 [ 398.243066][ T8024] loop5: detected capacity change from 0 to 40427 [ 398.352153][ T8024] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 398.354500][ T8024] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 398.373155][ T8024] F2FS-fs (loop5): invalid crc value [ 398.395500][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 398.456652][ T8024] F2FS-fs (loop5): Found nat_bits in checkpoint [ 398.531284][ T8024] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 398.531977][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 398.533237][ T8024] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 401.907968][ T1668] attempt to access beyond end of device [ 401.907968][ T1668] loop5: rw=1, want=45104, limit=40427 [ 402.611564][ T8059] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 404.931122][ T8056] loop1: detected capacity change from 0 to 32768 [ 407.313637][ T8080] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 409.458554][ T8104] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 411.496345][ T8093] loop5: detected capacity change from 0 to 32768 [ 412.948414][ T8093] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1039 (8093) [ 413.181428][ T8093] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 413.184454][ T8093] BTRFS info (device loop5): using free space tree [ 413.186241][ T8093] BTRFS info (device loop5): has skinny extents [ 414.047041][ T8093] BTRFS error (device loop5): open_ctree failed: -12 [ 414.075272][ T7865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by udevd (7865) [ 414.832454][ T8160] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 415.226134][ C1] net_ratelimit: 10 callbacks suppressed [ 415.226151][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 415.229500][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 423.611368][ T8243] loop1: detected capacity change from 0 to 4096 [ 423.824575][ T8243] ntfs3: Unknown parameter 'p9+!Lܖ7xS*eL̉x2bA~ب KtoYRWp)e[1 Qۯ%wlMT6L'ZĜ[UF' [ 423.841472][ T8251] syz.5.1080 uses obsolete (PF_INET,SOCK_PACKET) [ 425.271011][ T8255] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 425.608973][ T8259] loop5: detected capacity change from 0 to 512 [ 427.152764][ T8259] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 427.191375][ T8259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 427.208107][ T8259] System zones: 1-12 [ 427.249989][ T8259] EXT4-fs (loop5): 1 truncate cleaned up [ 427.251549][ T8259] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 437.995552][ T8347] netlink: 'syz.1.1109': attribute type 4 has an invalid length. [ 438.265763][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.267456][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.857082][ T8370] loop1: detected capacity change from 0 to 2048 [ 438.901505][ T8370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.149205][ T8405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.057981][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 444.070084][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 444.258434][ T8438] overlayfs: missing 'lowerdir' [ 444.638239][ T8444] loop5: detected capacity change from 0 to 256 [ 444.747053][ T8450] loop1: detected capacity change from 0 to 2048 [ 444.861649][ T8444] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 446.216076][ T8464] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.252762][ T8450] udc-core: couldn't find an available UDC or it's busy [ 446.263793][ T8450] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 450.722221][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.724667][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.727102][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.729473][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.731860][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.734478][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.736799][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.739378][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.742833][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 450.745703][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 451.676416][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 451.678412][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 454.254966][ T8541] loop5: detected capacity change from 0 to 512 [ 455.123633][ T8541] EXT4-fs (loop5): 1 orphan inode deleted [ 455.125277][ T8541] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 458.236694][ T8578] __nla_validate_parse: 40 callbacks suppressed [ 458.236710][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 462.346303][ T8617] loop1: detected capacity change from 0 to 128 [ 462.510136][ T8623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 463.294141][ T8620] device team_slave_0 entered promiscuous mode [ 463.296227][ T8620] device team_slave_1 entered promiscuous mode [ 463.298335][ T8620] device geneve0 entered promiscuous mode [ 463.299925][ T8620] device macsec1 entered promiscuous mode [ 463.301365][ T8620] device team0 entered promiscuous mode [ 468.222804][ T8643] loop5: detected capacity change from 0 to 8 [ 468.309796][ T8643] SQUASHFS error: zlib decompression failed, data probably corrupt [ 468.312094][ T8643] SQUASHFS error: Failed to read block 0x9b: -5 [ 468.318217][ T8643] SQUASHFS error: Unable to read metadata cache entry [99] [ 468.321406][ T8643] SQUASHFS error: Unable to read inode 0x127 [ 470.261561][ T8643] xt_TCPMSS: Only works on TCP SYN packets [ 470.368124][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.982232][ T8693] udc-core: couldn't find an available UDC or it's busy [ 475.984279][ T8693] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 477.337647][ T8707] loop5: detected capacity change from 0 to 4096 [ 478.926976][ T8707] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 479.235235][ T8722] overlayfs: missing 'lowerdir' [ 484.826955][ T8756] delete_channel: no stack [ 488.157184][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 489.083184][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 489.171324][ T8786] device bridge_slave_1 left promiscuous mode [ 489.173281][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.197521][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 489.324443][ T8795] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.335575][ T8795] FAT-fs (loop5): unable to read boot sector [ 489.503107][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 489.503121][ T26] audit: type=1326 audit(489.460:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.3.1244" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff911e9028 code=0x0 [ 489.529723][ T8802] device wireguard0 entered promiscuous mode [ 490.876367][ T26] audit: type=1326 audit(490.840:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 490.912841][ T26] audit: type=1326 audit(490.870:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 490.979643][ T26] audit: type=1326 audit(490.890:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.012408][ T26] audit: type=1326 audit(490.890:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.059318][ T26] audit: type=1326 audit(490.890:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.115701][ T26] audit: type=1326 audit(490.890:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.121394][ T26] audit: type=1326 audit(490.890:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.135231][ T8826] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 491.137756][ T8826] Mem abort info: [ 491.138759][ T8826] ESR = 0x0000000086000006 [ 491.139953][ T8826] EC = 0x21: IABT (current EL), IL = 32 bits [ 491.141716][ T8826] SET = 0, FnV = 0 [ 491.142828][ T8826] EA = 0, S1PTW = 0 [ 491.143975][ T8826] FSC = 0x06: level 2 translation fault [ 491.145494][ T8826] user pgtable: 4k pages, 48-bit VAs, pgdp=000000012bfbb000 [ 491.147175][ T8827] delete_channel: no stack [ 491.147427][ T8826] [0000000000000000] pgd=0800000136f75003, p4d=0800000136f75003, pud=0800000126deb003, pmd=0000000000000000 [ 491.151957][ T8826] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 491.153925][ T8826] Modules linked in: [ 491.154935][ T8826] CPU: 1 PID: 8826 Comm: syz.3.1251 Not tainted 5.15.179-syzkaller #0 [ 491.157106][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.159655][ T8826] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 491.161687][ T8826] pc : 0x0 [ 491.162505][ T8826] lr : bond_xdp_xmit+0x310/0x4f4 [ 491.163847][ T8826] sp : ffff8000207372a0 [ 491.164970][ T8826] x29: ffff8000207373e0 x28: 1ffff000040e6e72 x27: 1ffff000040e6e6e [ 491.167114][ T8826] x26: dfff800000000000 x25: ffff0000e7792000 x24: ffff800020737360 [ 491.169259][ T8826] x23: ffff800020737340 x22: ffff800012b23178 x21: fffffbffeffbc840 [ 491.171434][ T8826] x20: ffff0000edb70140 x19: 0000000000000000 x18: 0000000000000200 [ 491.173635][ T8826] x17: 0000000000000002 x16: ffff8000082eb59c x15: 0000000000000001 [ 491.175783][ T8826] x14: ffff0000ce92b680 x13: 0000000000ff0100 x12: 0000000000080000 [ 491.177988][ T8826] x11: 0000000000000510 x10: ffff8000260d9000 x9 : 0000000000000511 [ 491.180130][ T8826] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 491.182283][ T8826] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [ 491.184455][ T8826] x2 : ffff800020737340 x1 : 0000000000000001 x0 : ffff0000e7792000 [ 491.186565][ T8826] Call trace: [ 491.187474][ T8826] 0x0 [ 491.188188][ T8826] bq_xmit_all+0xd20/0x1140 [ 491.189404][ T8826] __dev_flush+0xc8/0x1a0 [ 491.190562][ T8826] xdp_do_flush+0x14/0x28 [ 491.191734][ T8826] tun_get_user+0x27d8/0x3774 [ 491.192975][ T8826] tun_chr_write_iter+0xfc/0x20c [ 491.194280][ T8826] vfs_write+0x884/0xb44 [ 491.195398][ T8826] ksys_write+0x15c/0x26c [ 491.196556][ T8826] __arm64_sys_write+0x7c/0x90 [ 491.197792][ T8826] invoke_syscall+0x98/0x2b8 [ 491.199013][ T8826] el0_svc_common+0x138/0x258 [ 491.200259][ T8826] do_el0_svc+0x58/0x14c [ 491.201356][ T8826] el0_svc+0x7c/0x1f0 [ 491.202384][ T8826] el0t_64_sync_handler+0x84/0xe4 [ 491.203730][ T8826] el0t_64_sync+0x1a0/0x1a4 [ 491.204814][ T8826] Code: bad PC value [ 491.205710][ T8826] ---[ end trace 63a9c81fdf09195a ]--- [ 491.438992][ T8826] pstore: crypto_comp_compress failed, ret = -22! [ 491.516439][ T26] audit: type=1326 audit(490.890:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.522601][ T26] audit: type=1326 audit(490.890:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff922b5028 code=0x7ffc0000 [ 491.724332][ T8826] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 491.726560][ T8826] SMP: stopping secondary CPUs [ 491.727838][ T8826] Kernel Offset: disabled [ 491.729057][ T8826] CPU features: 0x8,000081c1,21302e40 [ 491.730635][ T8826] Memory Limit: none [ 491.944447][ T8826] pstore: crypto_comp_compress failed, ret = -22! [ 492.209896][ T8826] Rebooting in 86400 seconds..