last executing test programs: 31.330382778s ago: executing program 0 (id=2640): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}, 0x24000800) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 29.92923379s ago: executing program 0 (id=2643): socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200007000001000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.125743608s ago: executing program 0 (id=2648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, r1, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 27.860350625s ago: executing program 0 (id=2651): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x133d02, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 26.949480201s ago: executing program 0 (id=2653): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='.\x00', 0x800714, &(0x7f0000000280)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7}}, {@minixdf}]}, 0x1, 0x4da, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000580)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), 0x0, 0x0) migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000140)="58dd", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MPP(r5, 0x0, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 21.572411628s ago: executing program 0 (id=2662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "8d92feb311febd7411f4a8c37daf196e76cd6c2bbd20632c56b05f5497b06e61", "d2e9951af6419b81be70a53903df57cf32045b00116f1586caba24cd57267b7e", "3f7e7f35a9edd4179257de1fa6eba11ac573c77a5e535049377f8ca9e75bfa00", "c071ae9b8f4c21d83e9cfd76b0df619668c06aa28e5e815400b13e448ecce895", "528a95d5ca4dbafa484e9edcea27efbd06838246efedf18b6b7525eb21061d99", "d0e31902dd382cefe76d909f", 0xb58a, 0x80000000, 0xffffffff, 0x4003, 0x80200}}) 6.299175564s ago: executing program 32 (id=2662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "8d92feb311febd7411f4a8c37daf196e76cd6c2bbd20632c56b05f5497b06e61", "d2e9951af6419b81be70a53903df57cf32045b00116f1586caba24cd57267b7e", "3f7e7f35a9edd4179257de1fa6eba11ac573c77a5e535049377f8ca9e75bfa00", "c071ae9b8f4c21d83e9cfd76b0df619668c06aa28e5e815400b13e448ecce895", "528a95d5ca4dbafa484e9edcea27efbd06838246efedf18b6b7525eb21061d99", "d0e31902dd382cefe76d909f", 0xb58a, 0x80000000, 0xffffffff, 0x4003, 0x80200}}) 4.943685616s ago: executing program 3 (id=2710): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) close(r4) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) 3.568986532s ago: executing program 3 (id=2716): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.329532244s ago: executing program 2 (id=2718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 3.053510903s ago: executing program 2 (id=2720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, 0x0, 0x4004) 2.978618759s ago: executing program 1 (id=2721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.898879567s ago: executing program 2 (id=2722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @device_b, @device_a, @initial, {0x6, 0x1}}, @void, @val, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x6, 0x0, {0xffffffffffffffcd, 0x7, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x1ff, 0xa}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe6", 0x10) recvmmsg(r8, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.698879659s ago: executing program 1 (id=2723): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 2.630562005s ago: executing program 3 (id=2724): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) close(r4) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$eJzs3V1oXGkZAOD3TH5q29hUEcFepVgwaJ00P5YGFFuvhFqpraCoWGMy+SGTTEwm0ASkahEKCu2FqCAWcqGCKAQU7wT1yp8L/9iLdpdCFxZ2C6FLt7AXe5HlTGbS6WaaNJs0Z+k8D5z2+76Zk+898/Y9nfP1dCaAptWV/pKL+EhE3EgiOusea43qg11rz1vqXx5PtyRWVy/eTyJJ9+lfHq89P6n+frC6W3dE/O2HEWfbN847t7A4OVQsFmar/Z7y1EzP3MLiJyemhsYKY4XpvoETg4ODA/2DJ3btWH/2u1+//vGvfO5/V39w9vcr/7j6zSROR0f1sfrj2C1d0VV9TdridP0DScTJ3Z4sY7msA2DbTvYcO95SrfO2SM8BndFSrfrSL7/xoDP+eftJ+y6/efO1vYwV2H1XImIVaFKJ+ocmVXsfkF7/1ra9eu/xmx/v1Uw8ycqZtQvAG9W1naX1/LeurQ3F+yrXhgfeSKpXhmuS2trRDtzKpz/j/gf/k//zn9ItntE6DO9Nyy9nHQFZah/IOgKydORLWUdAlv59LesIyNL/V7KOgCxduJh1BGTpi8/bP4KzLb+4n3UE/OVMRBxvtP6XW1//iQbrPwcjYqd35vzxSERXvPDz+rGN6z+5ezuchk2snIn4dN29XUt1+a863FLtvT/tRFsyOlEspLk/FBHd0bYv7fduMseLx/7++UbjX72b5v/mhdr6X7ql89fWAqtx3Gvd9/h+I0PloZ0eN2tWvh9xpLVR/pP1+k8a1H/65+H8U85Rul663mj80K00/7+6unn+eZZWlyI+1rD+k/XnJJvfn9lTOR/01M4KG1347ytzjcZPHU3z/+BT8p+dtP4PbJ7/yvl//X7dhpnc3GfHOm80Gr/7ozT/b3373Zz/25MvVwKs3Vp8eahcnu2NaE++sHG8b/sxP69qr0ft9Urz3/3Rxn//b3b+3x8R33rKOf/63buvNhr/2mSa/399Xf1nJ83/yBb1nzxW/9tvnP/M0SuN5v7waJr/U/u3rv+BSjDd1RHv/7b2tAnKOk4AAAAAAAAAAAAAAAAAAAAAAIBmk4uIjkhy+fV2LpfPr32+74fiQK5Ymit/YrQ0Pz0Sle/KPhxtudonPXbWfR5sb6X9qN/3jn5/RHwgIq617K/088Ol4kjWBw9NqiPizh++M9zgm/kBAAAAAAAAAAAAAAAAAICsHHzC//9PvdSSdXTAs9ARcWf0Jy3fS9sP1Tk0lbT+f/tw6myof2g66h+al/qH5qX+oXmpf2he6h+al/qH5qX+oXmpf2he9fUPAAAAADyfzp87l26rS/3L42l/ujQ2MTk+M9h3Ij81P5wfLs3O5MdKpbHKN/ZPbf3ziqXSTG9fzF/uKRfmyj1zC4uXpkrz0+VLE1NDY4VLhbY9OCZga7d/OjCedQwAAAAAAAAAAAAAAAAAAMAjcwuLk0PFYmFWQ0NDY72R9ZkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB55OwAA//8t2VDh") 918.442153ms ago: executing program 2 (id=2725): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffee, 0xfff2}, {0xfff2, 0xe}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x480c0}, 0x1000c81c) sendmmsg$unix(r0, &(0x7f000000a140), 0x0, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 803.710507ms ago: executing program 2 (id=2726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0x7, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00-', 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 768.646675ms ago: executing program 3 (id=2727): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 665.546707ms ago: executing program 1 (id=2728): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 585.743274ms ago: executing program 2 (id=2729): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000440)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@auto_da_alloc}, {@minixdf}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4ba, &(0x7f00000027c0)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 570.995217ms ago: executing program 1 (id=2730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, 0x0, 0x4004) 378.086559ms ago: executing program 3 (id=2731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 309.489984ms ago: executing program 1 (id=2732): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x2125099, 0x0) 102.734568ms ago: executing program 1 (id=2733): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffee, 0xfff2}, {0xfff2, 0xe}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x480c0}, 0x1000c81c) sendmmsg$unix(r0, &(0x7f000000a140), 0x0, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 3 (id=2734): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) kernel console output (not intermixed with test programs): [ 55.566411][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.580869][ T5439] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: [ 56.322341][ T5527] sshd (5527) used greatest stack depth: 19408 bytes left OK syzkaller Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. syzkaller login: [ 76.214720][ T5766] cgroup: Unknown subsys name 'net' [ 76.352625][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.082249][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.751257][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.751939][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.766964][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.773134][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.782466][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.782696][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.798854][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.798984][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.807175][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.814700][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.820790][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.837156][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.846451][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.854837][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.862490][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.870173][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.872059][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.886248][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.894249][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.894598][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.904685][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.917068][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.918294][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.939075][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.390862][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.504649][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.514853][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.543504][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.554118][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.561690][ T5777] bridge_slave_0: entered allmulticast mode [ 80.572409][ T5777] bridge_slave_0: entered promiscuous mode [ 80.607911][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.615071][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.622686][ T5777] bridge_slave_1: entered allmulticast mode [ 80.631454][ T5777] bridge_slave_1: entered promiscuous mode [ 80.704989][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 80.726809][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.740940][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.839793][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.848303][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.856137][ T5780] bridge_slave_0: entered allmulticast mode [ 80.863353][ T5780] bridge_slave_0: entered promiscuous mode [ 80.872112][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.879555][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.886895][ T5780] bridge_slave_1: entered allmulticast mode [ 80.893842][ T5780] bridge_slave_1: entered promiscuous mode [ 80.920656][ T5777] team0: Port device team_slave_0 added [ 80.930544][ T5777] team0: Port device team_slave_1 added [ 80.947112][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.954322][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.961771][ T5778] bridge_slave_0: entered allmulticast mode [ 80.969583][ T5778] bridge_slave_0: entered promiscuous mode [ 81.001210][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.008636][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.016221][ T5778] bridge_slave_1: entered allmulticast mode [ 81.023773][ T5778] bridge_slave_1: entered promiscuous mode [ 81.051693][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.058880][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.085014][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.102430][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.127450][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.145744][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.152918][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.179363][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.211477][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.219128][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.226721][ T5779] bridge_slave_0: entered allmulticast mode [ 81.233817][ T5779] bridge_slave_0: entered promiscuous mode [ 81.253203][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.274069][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.281699][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.289717][ T5779] bridge_slave_1: entered allmulticast mode [ 81.296983][ T5779] bridge_slave_1: entered promiscuous mode [ 81.323146][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.350352][ T5780] team0: Port device team_slave_0 added [ 81.367671][ T5780] team0: Port device team_slave_1 added [ 81.386636][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.400376][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.453759][ T5777] hsr_slave_0: entered promiscuous mode [ 81.461042][ T5777] hsr_slave_1: entered promiscuous mode [ 81.482484][ T5778] team0: Port device team_slave_0 added [ 81.489695][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.497356][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.524356][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.538349][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.546524][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.573023][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.610645][ T5779] team0: Port device team_slave_0 added [ 81.619332][ T5778] team0: Port device team_slave_1 added [ 81.648277][ T5779] team0: Port device team_slave_1 added [ 81.709507][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.716767][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.743277][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.792008][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.799427][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.829267][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.841735][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.848997][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.875410][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.888551][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.895701][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.921852][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.930726][ T5791] Bluetooth: hci2: command tx timeout [ 81.932487][ T51] Bluetooth: hci0: command tx timeout [ 81.966680][ T5780] hsr_slave_0: entered promiscuous mode [ 81.973122][ T5780] hsr_slave_1: entered promiscuous mode [ 81.979621][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.987669][ T5780] Cannot create hsr debugfs directory [ 82.005579][ T5791] Bluetooth: hci1: command tx timeout [ 82.005599][ T51] Bluetooth: hci3: command tx timeout [ 82.159433][ T5778] hsr_slave_0: entered promiscuous mode [ 82.170556][ T5778] hsr_slave_1: entered promiscuous mode [ 82.177022][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.184939][ T5778] Cannot create hsr debugfs directory [ 82.240225][ T5779] hsr_slave_0: entered promiscuous mode [ 82.247357][ T5779] hsr_slave_1: entered promiscuous mode [ 82.253616][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.261758][ T5779] Cannot create hsr debugfs directory [ 82.403158][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.427792][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.439483][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.453932][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.588276][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.617810][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.656022][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.668829][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.757642][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.785187][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.799621][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.813181][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.908023][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.920337][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.931465][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.942920][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.042382][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.103270][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.130455][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.144888][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.164432][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.171802][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.200996][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.213592][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.220832][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.254942][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.262119][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.295135][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.302633][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.313820][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.362734][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.379188][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.386348][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.404747][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.412425][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.449213][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.462552][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.469751][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.519046][ T5780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.536958][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.561952][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.569251][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.890978][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.006729][ T5791] Bluetooth: hci0: command tx timeout [ 84.007726][ T51] Bluetooth: hci2: command tx timeout [ 84.038398][ T5777] veth0_vlan: entered promiscuous mode [ 84.053641][ T5777] veth1_vlan: entered promiscuous mode [ 84.086793][ T51] Bluetooth: hci3: command tx timeout [ 84.086802][ T5791] Bluetooth: hci1: command tx timeout [ 84.127193][ T5777] veth0_macvtap: entered promiscuous mode [ 84.171245][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.204980][ T5777] veth1_macvtap: entered promiscuous mode [ 84.273057][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.293759][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.315171][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.331703][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.348105][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.358581][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.367689][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377320][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.468616][ T5780] veth0_vlan: entered promiscuous mode [ 84.554190][ T5779] veth0_vlan: entered promiscuous mode [ 84.564736][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.576918][ T5780] veth1_vlan: entered promiscuous mode [ 84.586949][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.642141][ T5778] veth0_vlan: entered promiscuous mode [ 84.660735][ T5779] veth1_vlan: entered promiscuous mode [ 84.679207][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.696202][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.713399][ T5780] veth0_macvtap: entered promiscuous mode [ 84.730407][ T5780] veth1_macvtap: entered promiscuous mode [ 84.765576][ T5778] veth1_vlan: entered promiscuous mode [ 84.813101][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.828911][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.840846][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.853501][ T5779] veth0_macvtap: entered promiscuous mode [ 84.873212][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.891826][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.904489][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.951074][ T5778] veth0_macvtap: entered promiscuous mode [ 84.986423][ T5779] veth1_macvtap: entered promiscuous mode [ 85.004020][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.020065][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.029831][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.038950][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.059282][ T5778] veth1_macvtap: entered promiscuous mode [ 85.079952][ T5841] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.130389][ T5841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.143941][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.155031][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.166147][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.176875][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.189463][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.203904][ T5841] netlink: 'syz.0.1': attribute type 16 has an invalid length. [ 85.212099][ T5841] netlink: 'syz.0.1': attribute type 17 has an invalid length. [ 85.237827][ T5841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.272296][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.305291][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.315168][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.328722][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.344830][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.396697][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.412819][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.420254][ T5844] syz.0.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.423604][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.440966][ T5844] loop0: detected capacity change from 0 to 512 [ 85.446769][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.452699][ T5844] EXT4-fs: Invalid want_extra_isize 5 [ 85.475431][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.488040][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.499811][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.514570][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.528984][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.545578][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.551291][ T5781] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.556416][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.581872][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.592560][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.619841][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.647250][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.675276][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.684156][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.734423][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846607][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.855435][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.880115][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.894366][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.916594][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.936477][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.049532][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.077215][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.093343][ T51] Bluetooth: hci2: command tx timeout [ 86.093463][ T5791] Bluetooth: hci0: command tx timeout [ 86.139251][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.161760][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.170964][ T5791] Bluetooth: hci1: command tx timeout [ 86.176316][ T51] Bluetooth: hci3: command tx timeout [ 86.253127][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.281597][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.351099][ T5854] ======================================================= [ 86.351099][ T5854] WARNING: The mand mount option has been deprecated and [ 86.351099][ T5854] and is ignored by this kernel. Remove the mand [ 86.351099][ T5854] option from the mount to silence this warning. [ 86.351099][ T5854] ======================================================= [ 86.432441][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.445406][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.501488][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.544118][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.731656][ T5860] loop3: detected capacity change from 0 to 256 [ 86.762332][ T5862] loop2: detected capacity change from 0 to 256 [ 86.821846][ T5860] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 86.855036][ T5862] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 86.909705][ T28] audit: type=1804 audit(1790285121.607:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8" name="/newroot/2/file0/bus" dev="loop3" ino=1048592 res=1 errno=0 [ 87.182610][ T5868] loop1: detected capacity change from 0 to 512 [ 87.280527][ T5868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 87.340423][ T5868] System zones: 1-12 [ 87.387311][ T5868] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.9: missing EA_INODE flag [ 87.448389][ T5868] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9: error while reading EA inode 12 err=-117 [ 87.500527][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.556320][ T5868] EXT4-fs (loop1): 1 orphan inode deleted [ 87.577473][ T5868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.216308][ T5791] Bluetooth: hci0: command tx timeout [ 88.222015][ T51] Bluetooth: hci2: command tx timeout [ 88.245635][ T51] Bluetooth: hci3: command tx timeout [ 88.251449][ T5791] Bluetooth: hci1: command tx timeout [ 90.255858][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.425605][ T8] usb 1-1: device descriptor read/64, error -71 [ 90.555236][ C1] sched: RT throttling activated [ 90.786489][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.832792][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.861514][ T5894] loop2: detected capacity change from 0 to 128 [ 90.917055][ T5894] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.968302][ T5894] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.995784][ T8] usb 1-1: device descriptor read/64, error -71 [ 91.031851][ T5894] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.990096][ T8] usb usb1-port1: attempt power cycle [ 92.518221][ T9] cfg80211: failed to load regulatory.db [ 93.521120][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 93.625857][ T5894] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 93.906593][ T5925] loop3: detected capacity change from 0 to 4096 [ 93.926606][ T5925] ntfs3: Bad value for 'fmask' [ 94.650517][ T5906] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.699799][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.744720][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 94.804908][ T5933] netlink: 'syz.0.22': attribute type 16 has an invalid length. [ 94.837312][ T5933] netlink: 'syz.0.22': attribute type 17 has an invalid length. [ 94.863532][ T5936] loop2: detected capacity change from 0 to 512 [ 94.920768][ T5936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 94.947093][ T5933] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 94.955616][ T5936] System zones: 1-12 [ 94.977897][ T5936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.23: missing EA_INODE flag [ 95.055036][ T5936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.23: error while reading EA inode 12 err=-117 [ 95.105815][ T5936] EXT4-fs (loop2): 1 orphan inode deleted [ 95.117903][ T5936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.721476][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.089616][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.275329][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 98.284147][ T23] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.299975][ T23] usb 1-1: config 0 has no interface number 0 [ 98.309434][ T23] usb 1-1: config 0 interface 184 has no altsetting 0 [ 98.332673][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.357046][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.365654][ T23] usb 1-1: Product: syz [ 98.369873][ T23] usb 1-1: Manufacturer: syz [ 98.374865][ T23] usb 1-1: SerialNumber: syz [ 98.399120][ T23] usb 1-1: config 0 descriptor?? [ 98.424511][ T23] smsc75xx v1.0.0 [ 98.796318][ T5970] loop3: detected capacity change from 0 to 512 [ 98.836959][ T5970] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.899727][ T5970] EXT4-fs (loop3): 1 truncate cleaned up [ 98.922851][ T5970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.067674][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 99.104679][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 99.127167][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 99.161107][ T23] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 99.208594][ T23] usb 1-1: USB disconnect, device number 5 [ 99.292820][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.711712][ T5988] loop2: detected capacity change from 0 to 1024 [ 99.776983][ T5988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.877297][ T5987] EXT4-fs warning (device loop2): ext4_rmdir:3245: inode #11: comm syz.2.36: empty directory 'file0' has too many links (111) [ 99.885670][ T5987] syz.2.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.201272][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.339865][ T5994] loop3: detected capacity change from 0 to 512 [ 100.428329][ T5994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 100.705627][ T5994] System zones: 1-12 [ 100.710499][ T5994] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.37: missing EA_INODE flag [ 101.092732][ T5994] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.37: error while reading EA inode 12 err=-117 [ 101.123494][ T6003] loop2: detected capacity change from 0 to 8 [ 101.456701][ T6003] SQUASHFS error: zlib decompression failed, data probably corrupt [ 101.485705][ T5994] EXT4-fs (loop3): 1 orphan inode deleted [ 101.503132][ T6003] SQUASHFS error: Failed to read block 0x9b: -5 [ 101.509627][ T5994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.545918][ T6003] SQUASHFS error: Unable to read metadata cache entry [99] [ 101.585408][ T6003] SQUASHFS error: Unable to read inode 0x127 [ 101.720632][ T6011] loop1: detected capacity change from 0 to 512 [ 101.759810][ T6011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.949065][ T6011] EXT4-fs (loop1): 1 truncate cleaned up [ 102.020589][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.621974][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.777367][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.801863][ T6016] loop2: detected capacity change from 0 to 128 [ 103.901418][ T6018] loop1: detected capacity change from 0 to 1024 [ 103.932284][ T6018] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.955118][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 104.000041][ T6018] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 104.011845][ T6018] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 104.022993][ T6018] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.43: Failed to acquire dquot type 0 [ 104.090617][ T6018] EXT4-fs (loop1): 1 truncate cleaned up [ 104.102599][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.302305][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.466673][ T6026] loop1: detected capacity change from 0 to 1024 [ 104.484914][ T6026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 104.510233][ T6026] JBD2: no valid journal superblock found [ 104.531023][ T6026] EXT4-fs (loop1): Could not load journal inode [ 104.904362][ T6032] loop2: detected capacity change from 0 to 512 [ 105.137819][ T6032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 105.146914][ T6032] System zones: 1-12 [ 105.164290][ T6032] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.48: corrupted inode contents [ 105.205577][ T6032] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 105.229381][ T6032] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.48: corrupted inode contents [ 105.261095][ T6032] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.48: mark_inode_dirty error [ 105.274859][ T6042] loop1: detected capacity change from 0 to 256 [ 105.305561][ T6032] EXT4-fs (loop2): 1 orphan inode deleted [ 105.326126][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.364834][ T6044] loop3: detected capacity change from 0 to 512 [ 105.399375][ T6044] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.449320][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.475707][ T6044] EXT4-fs (loop3): 1 truncate cleaned up [ 105.482835][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.506473][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.515412][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.597357][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.607032][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.714888][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.724091][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.785004][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.970965][ T6051] loop1: detected capacity change from 0 to 512 [ 106.047951][ T6051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.113198][ T6051] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.174406][ T6051] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.295109][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 107.305650][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 107.671196][ T6062] loop1: detected capacity change from 0 to 1024 [ 107.725432][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.734750][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.425355][ T5955] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.498042][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.552739][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.628672][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.641001][ T5955] usb 2-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 108.665428][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.686897][ T5955] usb 2-1: config 0 descriptor?? [ 108.969941][ T6030] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.978949][ T6030] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.988600][ T6030] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.997587][ T6030] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.011213][ T6030] __nla_validate_parse: 122 callbacks suppressed [ 109.011226][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.027060][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.058764][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.067724][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.087241][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.096251][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.106479][ T5955] usbhid 2-1:0.0: can't add hid device: -71 [ 109.112711][ T5955] usbhid: probe of 2-1:0.0 failed with error -71 [ 109.130583][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.139565][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.161406][ T5955] usb 2-1: USB disconnect, device number 2 [ 109.185844][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.194781][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.282065][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.538355][ T6082] loop2: detected capacity change from 0 to 4096 [ 109.754718][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.794023][ T6097] loop1: detected capacity change from 0 to 256 [ 110.821322][ T6097] FAT-fs (loop1): bogus sectors per cluster 0 [ 110.840229][ T6097] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.933282][ T6097] loop1: detected capacity change from 0 to 1024 [ 111.245767][ T6099] loop1: detected capacity change from 0 to 512 [ 111.262159][ T6099] EXT4-fs: Ignoring removed oldalloc option [ 111.300620][ T6099] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.428618][ T6099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.566298][ T6082] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.786117][ T6106] loop3: detected capacity change from 0 to 256 [ 111.816622][ T6099] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 111.871423][ T28] audit: type=1800 audit(1790285146.577:3): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.71" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 111.917703][ T6106] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.971633][ T6106] FAT-fs (loop3): Filesystem has been set read-only [ 111.981764][ T28] audit: type=1800 audit(1790285146.617:4): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.71" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 112.012467][ T6106] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 112.025035][ T6106] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 112.041359][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.056413][ T6106] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 112.068106][ T6106] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 112.094789][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.426448][ T6120] loop1: detected capacity change from 0 to 256 [ 112.503697][ T6120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 112.768206][ T6125] loop2: detected capacity change from 0 to 512 [ 112.844143][ T6125] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 112.880334][ T6128] block nbd0: Unsupported socket: should be TCP or UNIX. [ 113.036063][ T6125] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.79: invalid indirect mapped block 256 (level 1) [ 113.397620][ T6125] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.79: invalid indirect mapped block 2683928664 (level 1) [ 113.464962][ T6130] loop1: detected capacity change from 0 to 512 [ 113.482923][ T6125] EXT4-fs (loop2): 1 truncate cleaned up [ 113.502683][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.586815][ T6130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 113.595020][ T6130] System zones: 1-12 [ 113.648559][ T6130] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.80: missing EA_INODE flag [ 113.730908][ T6130] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.80: error while reading EA inode 12 err=-117 [ 113.973472][ T6130] EXT4-fs (loop1): 1 orphan inode deleted [ 114.040825][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.266220][ T6140] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.79: Invalid block bitmap block 3 in block_group 0 [ 114.632151][ T6140] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.79: Invalid block bitmap block 3 in block_group 0 [ 114.647362][ T6140] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.79: Invalid block bitmap block 3 in block_group 0 [ 117.570165][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.664352][ T6153] binder: 6151:6153 ioctl c0306201 0 returned -14 [ 117.983711][ T6158] netlink: 'syz.3.88': attribute type 9 has an invalid length. [ 118.008294][ T6158] netlink: 'syz.3.88': attribute type 6 has an invalid length. [ 118.172179][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.829439][ T6175] __nla_validate_parse: 4 callbacks suppressed [ 118.829453][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 118.956915][ T6175] netlink: 'syz.0.92': attribute type 16 has an invalid length. [ 118.966405][ T6175] netlink: 'syz.0.92': attribute type 17 has an invalid length. [ 119.005647][ T6175] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 119.076878][ T6183] loop1: detected capacity change from 0 to 512 [ 119.123793][ T6183] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 119.197341][ T6167] loop2: detected capacity change from 0 to 2048 [ 120.365951][ T6199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.400573][ T6206] loop1: detected capacity change from 0 to 512 [ 120.452596][ T6206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 120.475646][ T6206] System zones: 1-12 [ 120.491187][ T6206] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.99: missing EA_INODE flag [ 120.551583][ T6206] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.99: error while reading EA inode 12 err=-117 [ 120.621080][ T6206] EXT4-fs (loop1): 1 orphan inode deleted [ 120.639112][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.932024][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.185866][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.395380][ T788] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 121.479202][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.562251][ T788] usb 4-1: config 0 descriptor?? [ 121.812614][ T6227] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 122.263977][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 122.293322][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 122.345847][ T788] usb 4-1: USB disconnect, device number 2 [ 123.141585][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.437181][ T6250] loop3: detected capacity change from 0 to 1024 [ 123.444853][ T6250] EXT4-fs: Ignoring removed oldalloc option [ 123.471505][ T6250] EXT4-fs: Ignoring removed orlov option [ 123.632147][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.674556][ T6250] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.785275][ T6250] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.109: lblock 0 mapped to illegal pblock 0 (length 1) [ 123.847595][ T6250] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 123.863927][ T6261] loop2: detected capacity change from 0 to 1024 [ 123.892136][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 123.918185][ T6261] EXT4-fs: Ignoring removed orlov option [ 123.925444][ T6250] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.925444][ T6250] [ 124.065384][ T6258] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 124.114342][ T6261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.207159][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.369179][ T6261] EXT4-fs (loop2): shut down requested (0) [ 124.544835][ T6290] loop3: detected capacity change from 0 to 512 [ 124.607134][ T6290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 124.655495][ T6290] System zones: 1-12 [ 124.660087][ T6290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.116: missing EA_INODE flag [ 124.787503][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.811048][ T6290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.116: error while reading EA inode 12 err=-117 [ 124.843278][ T6297] sctp: failed to load transform for md5: -2 [ 124.868947][ T6290] EXT4-fs (loop3): 1 orphan inode deleted [ 124.924042][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.983052][ T6323] loop1: detected capacity change from 0 to 512 [ 126.047852][ T6323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 126.094903][ T6323] System zones: 1-12 [ 126.128385][ T6323] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.123: missing EA_INODE flag [ 126.217057][ T6323] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.123: error while reading EA inode 12 err=-117 [ 126.296250][ T6323] EXT4-fs (loop1): 1 orphan inode deleted [ 126.337565][ T6323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.011926][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.539188][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.762412][ T6344] sctp: failed to load transform for md5: -2 [ 130.078586][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 130.368818][ T6365] loop3: detected capacity change from 0 to 2048 [ 130.453265][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.540335][ T6365] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.789521][ T6377] netlink: 84 bytes leftover after parsing attributes in process `syz.1.132'. [ 130.878380][ T6380] loop2: detected capacity change from 0 to 128 [ 130.991396][ T6380] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.044864][ T6383] loop1: detected capacity change from 0 to 512 [ 131.166485][ T6380] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.172230][ T6383] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 131.228547][ T6383] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.134: invalid indirect mapped block 256 (level 1) [ 131.231013][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.328737][ T6383] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.134: invalid indirect mapped block 2683928664 (level 1) [ 131.383932][ T6383] EXT4-fs (loop1): 1 truncate cleaned up [ 131.428882][ T6383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.672961][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.394346][ T6408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.572941][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.134: Invalid block bitmap block 3 in block_group 0 [ 132.622925][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.134: Invalid block bitmap block 3 in block_group 0 [ 132.675480][ T6416] Zero length message leads to an empty skb [ 132.735448][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.134: Invalid block bitmap block 3 in block_group 0 [ 133.219157][ T6428] loop2: detected capacity change from 0 to 512 [ 133.268318][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 133.270552][ T6428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.307016][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.313821][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.464483][ T6428] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec01c, mo2=0102] [ 133.542740][ T6428] System zones: 0-2, 18-18, 34-35 [ 133.551136][ T6430] printk: console [ttyS0] disabled syzkaller syzkaller login: Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe