last executing test programs: 4m42.467721779s ago: executing program 4 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36348c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1717f19a67a534064b7236a6660000000000"], 0x1, 0x190, &(0x7f0000000e40)="$eJzs2zuPElEYxvHnDAMi3lC8JMbCytjIACaoHX4UAiMhDkrABmKifg8L7fxwEmNnJRvmtsssxQbCHHb5/xrOw8vJvBMy8IaLABytjp7KyKi0Ck/K1S81Y7slADlZxrf/lwCOT+Gf7Q4A2LF4K40l/f77uadCKRkLHiWLVb2T1Mvn54fFN+mxG9dNWdez88VP6Vmy31Q27q+k9Rsb689VjerOTd3Sbd1RVXd1T7W43o/2S+bhbsMQAABHwqiezWt3OHo3DPxGmothbqriRrkU5lZaj/LLNF8Lc733Mejv8SwAbMNR/dfZnL3+C5nr342vfwCX33Q2f98NAn+S0yL6fMCxdPSdFvp6EG1EC6Poe9ottxd1EGcxmc7+XOjBP6x1WMz9oK6sPymrhcUXJQC58D6Nxt50Nn8xHHUH/sD/0G61228ar181vXDw99bHfwBXyOmbvu1OAAAAAAAAAAAAAADAtu7rge0WAAAAAORkj39Qk76LXxYDAAAAAAAAAAAAAAAAALAHJwEAAP//zigUWQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 4m40.789867501s ago: executing program 4 (id=107): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000001600)=[{&(0x7f0000000400)="d66e5d498785fd28a6353e6e14eb61bce44a27e9752e4151b2ba8b9c3cc1b833d2fa3831c24cce93d9", 0x29}], 0x1) 4m37.926637309s ago: executing program 4 (id=112): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 4m37.184877428s ago: executing program 4 (id=115): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) 4m35.15345258s ago: executing program 4 (id=119): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x2, @desc2}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204088, &(0x7f00000000c0)=ANY=[], 0x2, 0x33e, &(0x7f0000000600)="$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") socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, 0x0) syz_emit_vhci(&(0x7f0000001540)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x9}}}, 0x7) 4m33.948994218s ago: executing program 4 (id=123): socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x3, 0x744) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xfd}}, 0x18}}, 0x0) 4m32.280262294s ago: executing program 32 (id=123): socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x3, 0x744) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xfd}}, 0x18}}, 0x0) 4m30.920049389s ago: executing program 0 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4m29.711366354s ago: executing program 0 (id=135): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x2, @desc2}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204088, &(0x7f00000000c0)=ANY=[], 0x2, 0x33e, &(0x7f0000000600)="$eJzs3U1oI2UYwPEnTbtJq22CrIIL6qN7UZGwycGToGFpVQys6EZWF4RZO9HQMSmZEM0iTRYW9uLBi19nFRZZKIgHQVjWgweRlqX33nrrwXpS/HplMjPtpOarVVOl/9+h8zLP88xM3/ft0L4zNNtPvPfmr8aY0jMiIjGZeEraMW+HR3xteeSt1dv3vfjyK8/lC4X5F1QX8uezOVWde+DmxXduPHSrfsdLX859nZC19KvbO7mttXvW7t3+4/wbZVfLrlaqdbX0UrVaty45ti5+4C5lVJ93bMu1tVxx7VpXvORUl5ebalUW75xZrtmuq1alqUt2U+tVrdeaar1ulSuayWR0dkYwQFLkRuPjvNec6JlQ/PxnY2Sn/r0xibYEI54c81XiCGmw3Rv/d/snn50Vke9+77o54H8tclNPijjXGsVG0d/68XxJyuKILWckJb+JN0fMJ6v++Htf386tFjYe/fYb1URaVpxWUN9qFOPd9VlJSXoqOOte/UJM5rPq666fkplofU5SctKvCedfp/7ZwnyuZ/0Jefh0pD4jKdl4TariyPrNB3/aOnftw7B+Jat69lyhUz8hYf20LIadlJTrP3b1WmyMIwQAAAAAAAAAwMFldJe/fh8GgvX7jJdw9bKqzqZlJXyK6LT2PR+IRZ8P7F+fP7O3Pi+yuz4/Kacmj+RbBgAAAADg2HGbV4NW8/KS5Th2ze3TkOCv9d45XtBynPDl4Z45d891cuxa3E82xrSGnHQ8jaQcpioxWvKnV4blTEu45/6FwQc8/WR8PRiudtMbkE5oasQR7NV4vH/olDHm73avNy1q7i8XoqHUIS613XktfbTkyegUvS79JuTg+ew3vNkc3/1JGXL2aTlA/5wUkR8G5hhjzCgHDN9F7Z/z9MXNL4Ye58Rf+qefW5H2lX/iHgQAAABgPPzf9TftmmtSrdJXjdaFx94fsdSk/uVrAwAAAAAAAAAAAAAAAAAAAAAAAAAAAADguDjEv3Zb/6hXSL3GXZ+Fe25HQj1PHNvhY6QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/wp8BAAD//7TTtww=") socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, 0x0) syz_emit_vhci(&(0x7f0000001540)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x9}}}, 0x7) 4m26.734798457s ago: executing program 0 (id=140): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x9f, 0x8f, 0x66, 0x20, 0x2040, 0x7210, 0x5b0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x50, 0x4, [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xd, 0x35, 0x64, 0x9}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) 4m22.285304257s ago: executing program 0 (id=144): syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m20.606149517s ago: executing program 0 (id=158): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) io_uring_setup(0x191a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m17.010063563s ago: executing program 0 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a11820fffff5bab1b590fff000058000b4824ca945f6400940f6a0325010ebc000000000000", 0x36}], 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) fanotify_init(0x200, 0x0) unshare(0x68040200) 4m1.723968204s ago: executing program 33 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a11820fffff5bab1b590fff000058000b4824ca945f6400940f6a0325010ebc000000000000", 0x36}], 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) fanotify_init(0x200, 0x0) unshare(0x68040200) 13.727882683s ago: executing program 5 (id=557): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x101445, 0x0) 11.559110964s ago: executing program 5 (id=564): sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 10.477733068s ago: executing program 3 (id=570): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) 10.157403136s ago: executing program 5 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 9.061433926s ago: executing program 3 (id=574): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d98"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 8.901219022s ago: executing program 7 (id=575): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 8.877416314s ago: executing program 5 (id=576): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'s526\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0x10001, 0x20000004, 0x6, 0xffe, 0xe3b3, 0x1, 0x1, 0x4, 0x100007, 0xa9, 0x6, 0x5, 0x40000009, 0x830, 0x2, 0xfffd, 0x8, 0xa4df, 0x101, 0x2, 0x0, 0x100007, 0x3, 0x8, 0x5, 0x713]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, &(0x7f0000000080)=[0x3, 0x3, 0x4, 0x7, 0x4660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x3, 0x4}) 7.375058155s ago: executing program 7 (id=579): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000000)='./file6\x00', 0x201080b, &(0x7f0000005740)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8], 0x21, 0x1cd, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000380), 0x4) syz_open_procfs(0x0, 0x0) 7.231933211s ago: executing program 3 (id=581): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "82dc05", 0x8, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x4e24, 0x4e20, 0x8}}}}}}, 0x0) 7.049265693s ago: executing program 6 (id=582): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ppoll(&(0x7f0000000040)=[{r0, 0x80db}], 0x1, 0x0, 0x0, 0xffffffffffffff54) 6.979073806s ago: executing program 1 (id=583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001740)={0x28, r1, 0x1, 0x70bd26, 0x4, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 6.892243271s ago: executing program 2 (id=584): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000380), 0x4) 6.685078771s ago: executing program 3 (id=585): r0 = semget$private(0x0, 0x7, 0x180) semtimedop(r0, &(0x7f0000000300)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 6.684644876s ago: executing program 6 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 6.067421758s ago: executing program 1 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000e4dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5.983440582s ago: executing program 2 (id=588): r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) lseek(r0, 0xffffffffffffff1f, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/32, 0x20}], 0x1) 5.962261521s ago: executing program 7 (id=589): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = epoll_create1(0x80000) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x6) 5.781116535s ago: executing program 6 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.681542992s ago: executing program 2 (id=591): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 5.676842479s ago: executing program 1 (id=592): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 5.650499169s ago: executing program 5 (id=593): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) splice(r0, &(0x7f0000000300)=0x3, 0xffffffffffffffff, 0x0, 0x7, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0xda42c4cf43d1b034) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, 0x33, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x13, 0x4, 0x0, 0x0, @str='fault_injection'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.581273436s ago: executing program 7 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 4.691008226s ago: executing program 6 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002"], 0x3c}}, 0x0) 4.563819575s ago: executing program 2 (id=596): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 4.53734998s ago: executing program 1 (id=597): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d98"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 4.325277794s ago: executing program 3 (id=598): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 4.273860048s ago: executing program 7 (id=599): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 4.130522979s ago: executing program 2 (id=600): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000380), 0x4) 3.156654018s ago: executing program 1 (id=601): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c00038008000140000000001800038014"], 0x104}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280081514"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 3.142235056s ago: executing program 3 (id=602): lsm_set_self_attr(0x65, &(0x7f0000000800)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20048054) epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x151000) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x804ae153103abf73, 0x2, 0x0) 2.321194106s ago: executing program 6 (id=603): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 2.25392696s ago: executing program 7 (id=604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000000000008f67c2973a1b983cb50cb3be4858ef1fc907e6447d2e6706b9b5392c0d344c6f9316e693a691a09de28b309fe685057bfe558fa21914220edf62634e7d42e6250dd7930b35b51f8fa5"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40c0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r3, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1.784556781s ago: executing program 5 (id=605): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r7, 0x25, 0x4, @void}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") 778.421334ms ago: executing program 6 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@multicast, @remote, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "6bf6b251f9880b35"}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) syz_clone3(&(0x7f0000002340)={0x40082a440, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 776.416967ms ago: executing program 2 (id=607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8000) 0s ago: executing program 1 (id=608): socket$inet(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 101.452511][ T5826] cgroup: Unknown subsys name 'net' [ 101.485590][ T804] cfg80211: failed to load regulatory.db [ 101.550506][ T5826] cgroup: Unknown subsys name 'cpuset' [ 101.560374][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.329525][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.018339][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.026519][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.034223][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.042794][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.050544][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.070461][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.078405][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.085564][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.086670][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.102035][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.110093][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.111096][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.125550][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.125640][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.142254][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.160266][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.172367][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.181876][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.193453][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.202137][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.209638][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.220270][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.228085][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.236947][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.247231][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.254682][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.266667][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.274496][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.295408][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.303437][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.135721][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 109.257543][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 109.276173][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 109.449437][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 109.476481][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 109.567880][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.576034][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.584036][ T5852] bridge_slave_0: entered allmulticast mode [ 109.592187][ T5852] bridge_slave_0: entered promiscuous mode [ 109.646287][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 109.681850][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.689001][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.696267][ T5852] bridge_slave_1: entered allmulticast mode [ 109.704057][ T5852] bridge_slave_1: entered promiscuous mode [ 109.794158][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.801347][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.809081][ T5858] bridge_slave_0: entered allmulticast mode [ 109.817076][ T5858] bridge_slave_0: entered promiscuous mode [ 109.852118][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.859263][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.866505][ T5846] bridge_slave_0: entered allmulticast mode [ 109.874346][ T5846] bridge_slave_0: entered promiscuous mode [ 109.914408][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.921734][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.928899][ T5858] bridge_slave_1: entered allmulticast mode [ 109.936897][ T5858] bridge_slave_1: entered promiscuous mode [ 109.965945][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.973125][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.980310][ T5846] bridge_slave_1: entered allmulticast mode [ 109.988979][ T5846] bridge_slave_1: entered promiscuous mode [ 110.015933][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.085995][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.122292][ T5156] Bluetooth: hci0: command tx timeout [ 110.155011][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.162244][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.169395][ T5847] bridge_slave_0: entered allmulticast mode [ 110.177375][ T5847] bridge_slave_0: entered promiscuous mode [ 110.201771][ T5156] Bluetooth: hci1: command tx timeout [ 110.207455][ T5156] Bluetooth: hci2: command tx timeout [ 110.220125][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.247403][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.256934][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.264347][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.272192][ T5847] bridge_slave_1: entered allmulticast mode [ 110.279795][ T5847] bridge_slave_1: entered promiscuous mode [ 110.286022][ T5851] Bluetooth: hci3: command tx timeout [ 110.286263][ T5156] Bluetooth: hci4: command tx timeout [ 110.312822][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.319959][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.327433][ T5861] bridge_slave_0: entered allmulticast mode [ 110.335048][ T5861] bridge_slave_0: entered promiscuous mode [ 110.346396][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.363064][ T5156] Bluetooth: hci5: command tx timeout [ 110.380803][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.423288][ T5852] team0: Port device team_slave_0 added [ 110.429463][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.436865][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.444329][ T5861] bridge_slave_1: entered allmulticast mode [ 110.452403][ T5861] bridge_slave_1: entered promiscuous mode [ 110.473609][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.480740][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.488364][ T5857] bridge_slave_0: entered allmulticast mode [ 110.496269][ T5857] bridge_slave_0: entered promiscuous mode [ 110.534933][ T5852] team0: Port device team_slave_1 added [ 110.544806][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.584719][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.592009][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.599192][ T5857] bridge_slave_1: entered allmulticast mode [ 110.607248][ T5857] bridge_slave_1: entered promiscuous mode [ 110.616344][ T5846] team0: Port device team_slave_0 added [ 110.640094][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.666437][ T5858] team0: Port device team_slave_0 added [ 110.691717][ T5846] team0: Port device team_slave_1 added [ 110.730961][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.742997][ T5858] team0: Port device team_slave_1 added [ 110.751898][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.792255][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.799217][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.826139][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.887578][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.913952][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.920916][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.948445][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.962663][ T5847] team0: Port device team_slave_0 added [ 111.001442][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.025876][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.033286][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.059574][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.079890][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.086968][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.112977][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.126329][ T5847] team0: Port device team_slave_1 added [ 111.133217][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.140167][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.166688][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.180341][ T5861] team0: Port device team_slave_0 added [ 111.255644][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.262739][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.289608][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.303336][ T5861] team0: Port device team_slave_1 added [ 111.318259][ T5857] team0: Port device team_slave_0 added [ 111.347310][ T5852] hsr_slave_0: entered promiscuous mode [ 111.354150][ T5852] hsr_slave_1: entered promiscuous mode [ 111.399398][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.407364][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.434344][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.464528][ T5857] team0: Port device team_slave_1 added [ 111.520667][ T5846] hsr_slave_0: entered promiscuous mode [ 111.527637][ T5846] hsr_slave_1: entered promiscuous mode [ 111.534252][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 111.540044][ T5846] Cannot create hsr debugfs directory [ 111.547196][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.554289][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.580493][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.606817][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.613822][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.640130][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.703795][ T5858] hsr_slave_0: entered promiscuous mode [ 111.710455][ T5858] hsr_slave_1: entered promiscuous mode [ 111.717315][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 111.723113][ T5858] Cannot create hsr debugfs directory [ 111.744428][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.751477][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.778476][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.840699][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.847747][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.874320][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.956283][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.963504][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.990317][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.029850][ T5847] hsr_slave_0: entered promiscuous mode [ 112.036784][ T5847] hsr_slave_1: entered promiscuous mode [ 112.043239][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 112.049137][ T5847] Cannot create hsr debugfs directory [ 112.202911][ T5156] Bluetooth: hci0: command tx timeout [ 112.270181][ T5861] hsr_slave_0: entered promiscuous mode [ 112.277003][ T5861] hsr_slave_1: entered promiscuous mode [ 112.281757][ T5851] Bluetooth: hci1: command tx timeout [ 112.284160][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 112.288000][ T5156] Bluetooth: hci2: command tx timeout [ 112.293956][ T5861] Cannot create hsr debugfs directory [ 112.319177][ T5857] hsr_slave_0: entered promiscuous mode [ 112.326182][ T5857] hsr_slave_1: entered promiscuous mode [ 112.332757][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 112.338479][ T5857] Cannot create hsr debugfs directory [ 112.362220][ T5851] Bluetooth: hci3: command tx timeout [ 112.368276][ T5156] Bluetooth: hci4: command tx timeout [ 112.441763][ T5156] Bluetooth: hci5: command tx timeout [ 112.687214][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.754447][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.766469][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.777742][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.974568][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.986242][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.028633][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.039663][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.100958][ T5847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.122223][ T5847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.146256][ T5847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.187673][ T5847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.262307][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.298914][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.329371][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.373594][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.473753][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.490901][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.507430][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.529902][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.569243][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.624578][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.656024][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.674727][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.682058][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.706878][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.717823][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.730370][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.759461][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.775710][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.782886][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.850811][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.925674][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.958937][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.976985][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.984173][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.010558][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.017711][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.046003][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.062227][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.069363][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.086947][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.094121][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.142876][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.191282][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.198461][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.214683][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.221877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.282899][ T5156] Bluetooth: hci0: command tx timeout [ 114.295273][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.363111][ T5156] Bluetooth: hci2: command tx timeout [ 114.368792][ T5156] Bluetooth: hci1: command tx timeout [ 114.406105][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.416546][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.442213][ T5851] Bluetooth: hci3: command tx timeout [ 114.447776][ T5156] Bluetooth: hci4: command tx timeout [ 114.490848][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.523059][ T5156] Bluetooth: hci5: command tx timeout [ 114.546012][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.553224][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.570008][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.577196][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.680256][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.854306][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.875034][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.882226][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.974165][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.981344][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.087436][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.142549][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.233055][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.375345][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.439177][ T5852] veth0_vlan: entered promiscuous mode [ 115.498532][ T5846] veth0_vlan: entered promiscuous mode [ 115.521429][ T5852] veth1_vlan: entered promiscuous mode [ 115.565166][ T5846] veth1_vlan: entered promiscuous mode [ 115.620737][ T5861] veth0_vlan: entered promiscuous mode [ 115.689515][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.723831][ T5861] veth1_vlan: entered promiscuous mode [ 115.778379][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.833129][ T5852] veth0_macvtap: entered promiscuous mode [ 115.854940][ T5852] veth1_macvtap: entered promiscuous mode [ 115.924928][ T5846] veth0_macvtap: entered promiscuous mode [ 115.944448][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.987389][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.001212][ T5846] veth1_macvtap: entered promiscuous mode [ 116.049485][ T5861] veth0_macvtap: entered promiscuous mode [ 116.083774][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.103100][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.116457][ T5861] veth1_macvtap: entered promiscuous mode [ 116.130736][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.144379][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.187176][ T5858] veth0_vlan: entered promiscuous mode [ 116.227369][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.261034][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.285786][ T5858] veth1_vlan: entered promiscuous mode [ 116.310341][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.351326][ T5847] veth0_vlan: entered promiscuous mode [ 116.368884][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.370146][ T5156] Bluetooth: hci0: command tx timeout [ 116.387256][ T1089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.397560][ T1089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.422153][ T1089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.443723][ T5156] Bluetooth: hci1: command tx timeout [ 116.447302][ T5847] veth1_vlan: entered promiscuous mode [ 116.449147][ T5156] Bluetooth: hci2: command tx timeout [ 116.463819][ T1089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.477177][ T1089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.522606][ T5851] Bluetooth: hci3: command tx timeout [ 116.528068][ T5156] Bluetooth: hci4: command tx timeout [ 116.528731][ T1089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.542842][ T1089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.582350][ T1089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.602017][ T5156] Bluetooth: hci5: command tx timeout [ 116.616791][ T5858] veth0_macvtap: entered promiscuous mode [ 116.644619][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.657214][ T5858] veth1_macvtap: entered promiscuous mode [ 116.662109][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.732697][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.741167][ T5847] veth0_macvtap: entered promiscuous mode [ 116.747013][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.751405][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.759565][ T5847] veth1_macvtap: entered promiscuous mode [ 116.769917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.833687][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.898555][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.906309][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.921036][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.938655][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.978121][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.992539][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.077759][ T5857] veth0_vlan: entered promiscuous mode [ 117.089591][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.118663][ T5857] veth1_vlan: entered promiscuous mode [ 117.145444][ T1089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.154387][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.168045][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.178135][ T1089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.191132][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.224510][ T1089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.269102][ T1089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.287053][ T1089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.336508][ T1089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.362770][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.438436][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.795452][ T5857] veth0_macvtap: entered promiscuous mode [ 118.766084][ T5857] veth1_macvtap: entered promiscuous mode [ 119.446901][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.491637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.597566][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.663079][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.071012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.173445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.275852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.382813][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.390688][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.452958][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.471683][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.551376][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.558811][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.571563][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.572894][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.583913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 120.588221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.934972][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.981711][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.162817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.206661][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.279947][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.768400][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.792867][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.119532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.324350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.660067][ T6016] block device autoloading is deprecated and will be removed. [ 123.144756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.247181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.964365][ T6026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.651924][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.033252][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.213320][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.256372][ T6040] loop1: detected capacity change from 0 to 16 [ 126.432586][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.917424][ T9] usb 3-1: config 0 descriptor?? [ 126.977307][ T6040] erofs (device loop1): mounted with root inode @ nid 36. [ 126.992518][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 127.603848][ T6047] erofs (device loop1): read error -117 @ 72 of nid 36 [ 128.196041][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.444896][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 128.488580][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.542613][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.550094][ T6051] program syz.1.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.601723][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.114480][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.154990][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.209528][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 129.264711][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 129.987711][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.021650][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.078436][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.152631][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.183373][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.242066][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 131.395462][ T9] pwc: Registered as video103. [ 131.404426][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 131.424114][ T9] usb 3-1: USB disconnect, device number 2 [ 132.521227][ T6080] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 132.542942][ T6067] kernel profiling enabled (shift: 6) [ 132.598838][ T6080] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 135.723590][ T6105] syz_tun: entered allmulticast mode [ 135.874020][ T6105] dvmrp1: entered allmulticast mode [ 136.093659][ T6099] syz_tun: left allmulticast mode [ 136.656325][ T6113] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 136.707264][ T6113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.010749][ T6124] process 'syz.3.39' launched '/dev/fd/7' with NULL argv: empty string added [ 137.033832][ T6125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.083198][ T5156] Bluetooth: hci4: hcon ffff888033378000 sent 1 < count 64 [ 137.481722][ T5918] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 138.903896][ T5918] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.921042][ T5918] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.932202][ T5918] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 139.922267][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.263529][ T6140] loop2: detected capacity change from 0 to 2048 [ 140.486839][ T6140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.611461][ T5918] usb 1-1: can't set config #4, error -71 [ 140.635730][ T5918] usb 1-1: USB disconnect, device number 2 [ 140.939883][ T6000] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.853789][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.971588][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.024324][ T6000] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.071716][ T6000] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.288680][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.354135][ T6000] usb 2-1: config 0 descriptor?? [ 142.519989][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.871624][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.576941][ T6000] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 143.602342][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.810470][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.859044][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.907497][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.941934][ T10] usb 1-1: config 0 descriptor?? [ 143.985074][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 145.050919][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.084069][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 145.116956][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 145.142320][ T5827] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 145.181196][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 145.199667][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 145.220608][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 145.229701][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 145.354620][ T6192] loop4: detected capacity change from 0 to 1024 [ 145.360188][ T6193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.402741][ T6192] ======================================================= [ 145.402741][ T6192] WARNING: The mand mount option has been deprecated and [ 145.402741][ T6192] and is ignored by this kernel. Remove the mand [ 145.402741][ T6192] option from the mount to silence this warning. [ 145.402741][ T6192] ======================================================= [ 145.455743][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 145.472012][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 145.509838][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 145.549335][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 145.656278][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 145.738332][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 145.827534][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.041464][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.254045][ T9] usb 2-1: USB disconnect, device number 2 [ 146.370573][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.451922][ T6192] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.536258][ T10] pwc: Registered as video103. [ 146.545710][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 146.574800][ T6192] EXT4-fs error (device loop4): ext4_free_blocks:6705: comm syz.4.58: Freeing blocks not in datazone - block = 0, count = 16 [ 146.623171][ T10] usb 1-1: USB disconnect, device number 3 [ 146.673156][ T6201] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 146.837036][ T30] audit: type=1800 audit(1759645524.161:2): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.61" name="/" dev="9p" ino=2 res=0 errno=0 [ 146.904965][ T6212] netlink: 'syz.2.65': attribute type 12 has an invalid length. [ 147.558547][ T30] audit: type=1800 audit(1759645524.911:3): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.61" name="/" dev="9p" ino=2 res=0 errno=0 [ 147.725187][ T60] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 147.860943][ T60] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.860943][ T60] [ 147.902859][ T60] EXT4-fs (loop4): Total free blocks count 0 [ 147.908993][ T60] EXT4-fs (loop4): Free/Dirty block details [ 147.916216][ T60] EXT4-fs (loop4): free_blocks=4293918736 [ 147.992466][ T60] EXT4-fs (loop4): dirty_blocks=16 [ 147.997646][ T60] EXT4-fs (loop4): Block reservation details [ 148.015799][ T60] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 148.061180][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.609309][ T6259] loop4: detected capacity change from 0 to 128 [ 152.719499][ T6259] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.892335][ T6259] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.012577][ T6265] trusted_key: syz.2.79 sent an empty control message without MSG_MORE. [ 153.755059][ T5857] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.336883][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 163.681477][ T6343] overlayfs: statfs failed on './file0' [ 163.765576][ T6349] loop4: detected capacity change from 0 to 64 [ 168.502027][ T6381] warning: `syz.0.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.207801][ T6391] loop4: detected capacity change from 0 to 512 [ 169.432694][ T6391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.061921][ T6391] loop4: detected capacity change from 512 to 64 [ 170.553505][ T5857] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 170.655855][ T5857] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: unexpected EA_INODE flag [ 170.678772][ T5857] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: unexpected EA_INODE flag [ 171.429490][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 171.515224][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.026508][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.343696][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.773563][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.724989][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.040828][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.072673][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.080693][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.181715][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.190640][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.372215][ T50] bridge_slave_1: left allmulticast mode [ 176.378174][ T50] bridge_slave_1: left promiscuous mode [ 177.032240][ T6452] loop0: detected capacity change from 0 to 512 [ 177.038820][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.147110][ T6452] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.184237][ T50] bridge_slave_0: left allmulticast mode [ 177.189886][ T50] bridge_slave_0: left promiscuous mode [ 177.201387][ T6452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.422816][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.490937][ T6452] EXT4-fs (loop0): 1 truncate cleaned up [ 178.283136][ T5156] Bluetooth: hci5: command tx timeout [ 178.757389][ T6452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.957401][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.415386][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.701684][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 179.728684][ T5827] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 179.737372][ T5827] usb 1-1: config 0 has no interface number 0 [ 179.756827][ T5827] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.0c [ 179.767646][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.788773][ T5827] usb 1-1: Product: syz [ 179.793364][ T5827] usb 1-1: Manufacturer: syz [ 179.798116][ T5827] usb 1-1: SerialNumber: syz [ 179.828318][ T5827] usb 1-1: config 0 descriptor?? [ 180.604754][ T5851] Bluetooth: hci5: command tx timeout [ 180.730532][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.744735][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.756325][ T50] bond0 (unregistering): Released all slaves [ 180.931606][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 182.797694][ T5156] Bluetooth: hci5: command tx timeout [ 183.393391][ T5827] usb 1-1: USB disconnect, device number 4 [ 183.941105][ T50] hsr_slave_0: left promiscuous mode [ 184.020356][ T50] hsr_slave_1: left promiscuous mode [ 184.059912][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.131668][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.223339][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.276476][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.466910][ T6508] fuse: Bad value for 'fd' [ 184.524120][ T50] veth1_macvtap: left promiscuous mode [ 184.529819][ T50] veth0_macvtap: left promiscuous mode [ 184.542878][ T50] veth1_vlan: left promiscuous mode [ 184.548783][ T50] veth0_vlan: left promiscuous mode [ 184.842019][ T5156] Bluetooth: hci5: command tx timeout [ 188.776235][ T50] team0 (unregistering): Port device team_slave_1 removed [ 188.833280][ T50] team0 (unregistering): Port device team_slave_0 removed [ 192.159472][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 197.771665][ T5851] Bluetooth: hci5: command 0x0405 tx timeout [ 198.721254][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.738167][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.753753][ T6444] bridge_slave_0: entered allmulticast mode [ 198.779365][ T6444] bridge_slave_0: entered promiscuous mode [ 198.795509][ T6606] tipc: Enabling of bearer rejected, failed to enable media [ 199.031779][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.702675][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.709996][ T6444] bridge_slave_1: entered allmulticast mode [ 199.772268][ T6444] bridge_slave_1: entered promiscuous mode [ 199.910265][ T5851] Bluetooth: hci5: command 0x0405 tx timeout [ 201.220237][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.233643][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.368151][ T6444] team0: Port device team_slave_0 added [ 203.425258][ T6444] team0: Port device team_slave_1 added [ 203.647930][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.683811][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.831617][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.846429][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.853506][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.887337][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.896017][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.920490][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.132336][ T6444] hsr_slave_0: entered promiscuous mode [ 207.212672][ T6444] hsr_slave_1: entered promiscuous mode [ 207.219787][ T6444] debugfs: 'hsr0' already exists in 'hsr' [ 207.311803][ T6444] Cannot create hsr debugfs directory [ 208.413744][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.422578][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.430346][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.438657][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.447070][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.596068][ T5851] Bluetooth: hci6: command tx timeout [ 212.869125][ T5851] Bluetooth: hci6: command tx timeout [ 213.184345][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.934171][ T5851] Bluetooth: hci6: command tx timeout [ 215.827927][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.084798][ T5851] Bluetooth: hci6: command tx timeout [ 218.436746][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.470079][ T6756] loop5: detected capacity change from 0 to 256 [ 218.810301][ T30] audit: type=1804 audit(1759645596.171:4): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.197" name="/newroot/30/file0/bus" dev="loop5" ino=1048610 res=1 errno=0 [ 219.057853][ T30] audit: type=1800 audit(1759645596.211:5): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.197" name="bus" dev="loop5" ino=1048610 res=0 errno=0 [ 220.123606][ T6765] tipc: Can't bind to reserved service type 0 [ 220.366998][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.651933][ T6768] loop2: detected capacity change from 0 to 8 [ 220.755999][ T6768] unable to read xattr id index table [ 220.846917][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.199'. [ 221.724390][ T6444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.705925][ T6444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.848927][ T6444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.016679][ T6444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.446558][ T6675] chnl_net:caif_netlink_parms(): no params data found [ 228.131576][ T30] audit: type=1326 audit(1759645605.451:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72618eec9 code=0x7fc00000 [ 228.639021][ T1151] bridge_slave_1: left allmulticast mode [ 228.646041][ T1151] bridge_slave_1: left promiscuous mode [ 228.660774][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.704610][ T1151] bridge_slave_0: left allmulticast mode [ 228.753760][ T1151] bridge_slave_0: left promiscuous mode [ 229.121736][ T30] audit: type=1326 audit(1759645606.371:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd72618eec9 code=0x7fc00000 [ 229.181643][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.596148][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 230.652828][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 231.602515][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 231.608606][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 231.615258][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 231.621278][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 233.656262][ T6855] loop5: detected capacity change from 0 to 40427 [ 233.763934][ T6855] F2FS-fs (loop5): invalid crc value [ 233.851694][ T6855] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 233.863769][ T6855] F2FS-fs (loop5): Start checkpoint disabled! [ 233.886241][ T6855] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 233.895203][ T6855] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 233.919190][ T30] audit: type=1800 audit(1759645611.281:8): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.215" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 234.532453][ T6866] syz.5.215: attempt to access beyond end of device [ 234.532453][ T6866] loop5: rw=2049, sector=45096, nr_sectors = 2064 limit=40427 [ 234.561550][ T6866] syz.5.215: attempt to access beyond end of device [ 234.561550][ T6866] loop5: rw=2049, sector=47160, nr_sectors = 504 limit=40427 [ 234.586503][ T6866] syz.5.215: attempt to access beyond end of device [ 234.586503][ T6866] loop5: rw=2049, sector=47664, nr_sectors = 8 limit=40427 [ 234.601084][ T6866] syz.5.215: attempt to access beyond end of device [ 234.601084][ T6866] loop5: rw=2049, sector=47672, nr_sectors = 8 limit=40427 [ 234.622101][ T6866] syz.5.215: attempt to access beyond end of device [ 234.622101][ T6866] loop5: rw=2049, sector=47680, nr_sectors = 8 limit=40427 [ 234.636912][ T6866] syz.5.215: attempt to access beyond end of device [ 234.636912][ T6866] loop5: rw=2049, sector=47688, nr_sectors = 8 limit=40427 [ 234.652055][ T6866] syz.5.215: attempt to access beyond end of device [ 234.652055][ T6866] loop5: rw=2049, sector=47696, nr_sectors = 8 limit=40427 [ 234.668693][ T6866] syz.5.215: attempt to access beyond end of device [ 234.668693][ T6866] loop5: rw=2049, sector=47704, nr_sectors = 8 limit=40427 [ 234.683941][ T6866] syz.5.215: attempt to access beyond end of device [ 234.683941][ T6866] loop5: rw=2049, sector=47712, nr_sectors = 8 limit=40427 [ 234.699259][ T6866] syz.5.215: attempt to access beyond end of device [ 234.699259][ T6866] loop5: rw=2049, sector=47720, nr_sectors = 8 limit=40427 [ 234.798957][ T30] audit: type=1800 audit(1759645611.861:9): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.215" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 235.684425][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 235.684480][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.684506][ T6836] Workqueue: writeback wb_workfn (flush-7:5) [ 235.684568][ T6836] Call Trace: [ 235.684580][ T6836] [ 235.684593][ T6836] dump_stack_lvl+0x16c/0x1f0 [ 235.684643][ T6836] f2fs_handle_critical_error+0x624/0x9f0 [ 235.684684][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.684729][ T6836] ? f2fs_build_fault_attr+0x53/0x1f0 [ 235.684796][ T6836] f2fs_write_end_io+0x958/0xcf0 [ 235.684842][ T6836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 235.684889][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.684944][ T6836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 235.684984][ T6836] bio_endio+0x713/0x860 [ 235.685036][ T6836] submit_bio_noacct+0x306/0x1f60 [ 235.685084][ T6836] __submit_merged_bio+0x33c/0x770 [ 235.685131][ T6836] __submit_merged_write_cond+0x319/0x3f0 [ 235.685208][ T6836] f2fs_write_cache_pages+0x2067/0x2570 [ 235.685287][ T6836] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 235.685333][ T6836] ? lock_acquire+0x179/0x350 [ 235.685380][ T6836] ? __lock_acquire+0xb97/0x1ce0 [ 235.685424][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.685472][ T6836] ? __lock_acquire+0xb97/0x1ce0 [ 235.685533][ T6836] ? lock_acquire+0x179/0x350 [ 235.685637][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.685681][ T6836] ? finish_task_switch.isra.0+0x221/0xc10 [ 235.685734][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.685780][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.685824][ T6836] ? rcu_is_watching+0x12/0xc0 [ 235.685879][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.685931][ T6836] f2fs_write_data_pages+0x4ad/0xd90 [ 235.685989][ T6836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 235.686049][ T6836] ? __pfx___schedule+0x10/0x10 [ 235.686086][ T6836] ? __lock_acquire+0xb97/0x1ce0 [ 235.686127][ T6836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 235.686179][ T6836] do_writepages+0x27a/0x600 [ 235.686225][ T6836] ? __pfx_do_writepages+0x10/0x10 [ 235.686265][ T6836] ? preempt_schedule_thunk+0x16/0x30 [ 235.686331][ T6836] __writeback_single_inode+0x160/0xfb0 [ 235.686379][ T6836] ? preempt_schedule_thunk+0x16/0x30 [ 235.686444][ T6836] ? __pfx___writeback_single_inode+0x10/0x10 [ 235.686498][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.686549][ T6836] writeback_sb_inodes+0x60d/0xfa0 [ 235.686622][ T6836] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 235.686669][ T6836] ? irqentry_exit+0x3b/0x90 [ 235.686710][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.686753][ T6836] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.686795][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.686904][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.686948][ T6836] ? rcu_is_watching+0x12/0xc0 [ 235.687001][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687045][ T6836] ? queue_io+0x3f6/0x520 [ 235.687092][ T6836] wb_writeback+0x419/0xb70 [ 235.687151][ T6836] ? __pfx_wb_writeback+0x10/0x10 [ 235.687196][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687254][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687297][ T6836] ? mark_held_locks+0x49/0x80 [ 235.687344][ T6836] wb_workfn+0x14d/0xbe0 [ 235.687400][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687453][ T6836] ? __pfx_wb_workfn+0x10/0x10 [ 235.687507][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687556][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687602][ T6836] ? preempt_schedule_thunk+0x16/0x30 [ 235.687672][ T6836] process_one_work+0x9cf/0x1b70 [ 235.687739][ T6836] ? __pfx_process_one_work+0x10/0x10 [ 235.687786][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687843][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.687886][ T6836] ? assign_work+0x1a0/0x250 [ 235.687934][ T6836] worker_thread+0x6c8/0xf10 [ 235.687992][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.688038][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.688081][ T6836] ? __kthread_parkme+0x19e/0x250 [ 235.688141][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.688188][ T6836] ? __pfx_worker_thread+0x10/0x10 [ 235.688235][ T6836] kthread+0x3c5/0x780 [ 235.688278][ T6836] ? __pfx_kthread+0x10/0x10 [ 235.688323][ T6836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.688367][ T6836] ? rcu_is_watching+0x12/0xc0 [ 235.688421][ T6836] ? __pfx_kthread+0x10/0x10 [ 235.688469][ T6836] ret_from_fork+0x56d/0x730 [ 235.688507][ T6836] ? __pfx_kthread+0x10/0x10 [ 235.688551][ T6836] ret_from_fork_asm+0x1a/0x30 [ 235.688625][ T6836] [ 236.316372][ T6836] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 236.394681][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.583943][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.593706][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.617345][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.627419][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.636675][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.646667][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.682920][ T1151] bond0 (unregistering): Released all slaves [ 236.784499][ T6834] dummy0: entered promiscuous mode [ 236.790137][ T6834] macvtap1: entered promiscuous mode [ 236.814877][ T6834] macvtap1: entered allmulticast mode [ 236.838915][ T6834] dummy0: entered allmulticast mode [ 236.877423][ T6840] dummy0: left allmulticast mode [ 236.898294][ T6840] dummy0: left promiscuous mode [ 237.298708][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.393617][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.491651][ T6675] bridge_slave_0: entered allmulticast mode [ 237.689028][ T6675] bridge_slave_0: entered promiscuous mode [ 237.886095][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.916970][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.942183][ T6675] bridge_slave_1: entered allmulticast mode [ 237.950301][ T6675] bridge_slave_1: entered promiscuous mode [ 238.682686][ T5849] Bluetooth: hci0: command tx timeout [ 240.257071][ T6901] loop2: detected capacity change from 0 to 64 [ 240.902259][ T5849] Bluetooth: hci0: command tx timeout [ 243.101681][ T5849] Bluetooth: hci0: command tx timeout [ 244.929739][ T1151] hsr_slave_0: left promiscuous mode [ 244.952433][ T1151] hsr_slave_1: left promiscuous mode [ 244.958614][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.976804][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.223426][ T5849] Bluetooth: hci0: command tx timeout [ 245.258673][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.266345][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.576103][ T1151] veth1_macvtap: left promiscuous mode [ 246.607850][ T1151] veth0_macvtap: left promiscuous mode [ 246.856696][ T1151] veth1_vlan: left promiscuous mode [ 247.991893][ T1151] veth0_vlan: left promiscuous mode [ 248.335592][ T6960] loop3: detected capacity change from 0 to 128 [ 248.592658][ T6960] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.648069][ T6960] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.801751][ T6960] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.836972][ T6960] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 249.872669][ T6966] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 250.500984][ T5852] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.953865][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 253.064752][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 254.795274][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.844195][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.971880][ T6976] tipc: Started in network mode [ 254.976801][ T6976] tipc: Node identity 021d4ebe177, cluster identity 4711 [ 255.045347][ T6976] tipc: Enabled bearer , priority 0 [ 255.087965][ T6978] syzkaller0: entered promiscuous mode [ 255.093691][ T6978] syzkaller0: entered allmulticast mode [ 256.340772][ T10] tipc: Node number set to 359485118 [ 256.360881][ T6675] team0: Port device team_slave_0 added [ 256.537451][ T6675] team0: Port device team_slave_1 added [ 256.590618][ T6995] tipc: Resetting bearer [ 256.720427][ T6995] tipc: Disabling bearer [ 257.842428][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.694435][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.743008][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.856631][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.871580][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.968353][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.921144][ T6675] hsr_slave_0: entered promiscuous mode [ 259.952259][ T6675] hsr_slave_1: entered promiscuous mode [ 259.999356][ T6675] debugfs: 'hsr0' already exists in 'hsr' [ 260.018627][ T6675] Cannot create hsr debugfs directory [ 260.647207][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 265.402625][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.408976][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.005133][ T7096] Zero length message leads to an empty skb [ 266.144586][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.205995][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.241754][ T6876] bridge_slave_0: entered allmulticast mode [ 266.297345][ T6876] bridge_slave_0: entered promiscuous mode [ 266.368270][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.411204][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.437830][ T6876] bridge_slave_1: entered allmulticast mode [ 266.584018][ T6876] bridge_slave_1: entered promiscuous mode [ 266.946912][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.035814][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.292073][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.300797][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.309415][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.317623][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.327821][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.864780][ T6876] team0: Port device team_slave_0 added [ 267.987992][ T6876] team0: Port device team_slave_1 added [ 268.339304][ T1151] bridge_slave_1: left allmulticast mode [ 268.358140][ T1151] bridge_slave_1: left promiscuous mode [ 268.373563][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.465850][ T1151] bridge_slave_0: left allmulticast mode [ 268.473150][ T1151] bridge_slave_0: left promiscuous mode [ 268.480151][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.493221][ T5849] Bluetooth: hci5: command tx timeout [ 270.456011][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.478614][ T7143] Bluetooth: MGMT ver 1.23 [ 270.484714][ T7142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.267'. [ 270.554996][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.580498][ T1151] bond0 (unregistering): Released all slaves [ 270.641700][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.655362][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.739363][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.853309][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.866181][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.931340][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.084504][ T1151] hsr_slave_0: left promiscuous mode [ 271.090795][ T1151] hsr_slave_1: left promiscuous mode [ 271.096781][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.202532][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.565064][ T5849] Bluetooth: hci5: command tx timeout [ 271.712526][ T7148] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 272.175365][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 272.355788][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 273.641629][ T5849] Bluetooth: hci5: command tx timeout [ 275.435738][ T7148] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.725655][ T5849] Bluetooth: hci5: command tx timeout [ 275.741027][ T6876] hsr_slave_0: entered promiscuous mode [ 275.779367][ T6876] hsr_slave_1: entered promiscuous mode [ 275.816586][ T6876] debugfs: 'hsr0' already exists in 'hsr' [ 275.856077][ T6876] Cannot create hsr debugfs directory [ 276.879473][ T7191] loop3: detected capacity change from 0 to 128 [ 278.240564][ T7107] chnl_net:caif_netlink_parms(): no params data found [ 279.821902][ T12] bridge_slave_1: left allmulticast mode [ 279.853525][ T12] bridge_slave_1: left promiscuous mode [ 279.871807][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.036239][ T12] bridge_slave_0: left allmulticast mode [ 280.045940][ T12] bridge_slave_0: left promiscuous mode [ 280.058965][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.465282][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.526655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.564836][ T12] bond0 (unregistering): Released all slaves [ 281.320692][ T12] hsr_slave_0: left promiscuous mode [ 281.447428][ T12] hsr_slave_1: left promiscuous mode [ 281.454325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.602530][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.083892][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.500897][ T12] team0 (unregistering): Port device team_slave_0 removed [ 288.961329][ T7262] overlayfs: missing 'lowerdir' [ 292.092048][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 294.008606][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.034179][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.071384][ T7107] bridge_slave_0: entered allmulticast mode [ 294.108512][ T7107] bridge_slave_0: entered promiscuous mode [ 294.192200][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.205606][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.228386][ T7107] bridge_slave_1: entered allmulticast mode [ 294.271311][ T7107] bridge_slave_1: entered promiscuous mode [ 294.983588][ T7309] 9pnet: Could not find request transport: fd00000000000000000007 [ 295.070244][ T7107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.170482][ T7107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.376339][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.385598][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.395368][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.412503][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.420729][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.463483][ T7107] team0: Port device team_slave_0 added [ 295.609849][ T7107] team0: Port device team_slave_1 added [ 296.180945][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 296.218616][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 296.877406][ T7323] program syz.3.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.298023][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.306269][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.486594][ T5851] Bluetooth: hci6: command tx timeout [ 298.335632][ T7107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.354136][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.361093][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.388629][ T7107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.561716][ T5851] Bluetooth: hci6: command tx timeout [ 300.348343][ T7345] loop5: detected capacity change from 0 to 64 [ 301.292899][ T7107] hsr_slave_0: entered promiscuous mode [ 301.299724][ T7107] hsr_slave_1: entered promiscuous mode [ 301.357020][ T7107] debugfs: 'hsr0' already exists in 'hsr' [ 301.401546][ T7107] Cannot create hsr debugfs directory [ 301.802451][ T5851] Bluetooth: hci6: command tx timeout [ 303.901789][ T5851] Bluetooth: hci6: command tx timeout [ 309.027916][ T7398] loop3: detected capacity change from 0 to 512 [ 309.053692][ T7398] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 309.061910][ T7398] EXT4-fs (loop3): orphan cleanup on readonly fs [ 309.072532][ T7398] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 309.081700][ T7398] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 309.091609][ T7398] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.319: Failed to acquire dquot type 1 [ 309.129047][ T7398] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.319: bg 0: block 40: padding at end of block bitmap is not set [ 309.176603][ T7398] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 309.188399][ T7398] EXT4-fs (loop3): 1 truncate cleaned up [ 309.196625][ T7398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.297063][ T7397] lo speed is unknown, defaulting to 1000 [ 309.303187][ T7397] lo speed is unknown, defaulting to 1000 [ 309.517098][ T7397] lo speed is unknown, defaulting to 1000 [ 309.528130][ T7397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 309.542932][ T7397] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 309.574187][ T7397] lo speed is unknown, defaulting to 1000 [ 309.581826][ T7397] lo speed is unknown, defaulting to 1000 [ 309.589156][ T7397] lo speed is unknown, defaulting to 1000 [ 309.596746][ T7397] lo speed is unknown, defaulting to 1000 [ 309.604261][ T7397] lo speed is unknown, defaulting to 1000 [ 309.611619][ T7397] lo speed is unknown, defaulting to 1000 [ 309.619493][ T7397] lo speed is unknown, defaulting to 1000 [ 309.761041][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 309.828891][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.946585][ T50] bridge_slave_1: left allmulticast mode [ 309.961829][ T50] bridge_slave_1: left promiscuous mode [ 309.967585][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.114181][ T50] bridge_slave_0: left allmulticast mode [ 310.119842][ T50] bridge_slave_0: left promiscuous mode [ 310.360278][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.872296][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.032952][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.350288][ T50] bond0 (unregistering): Released all slaves [ 315.068839][ T7430] syz.1.326 (7430) used greatest stack depth: 20072 bytes left [ 315.263343][ T7415] veth0: entered promiscuous mode [ 315.271863][ T7415] veth0: left promiscuous mode [ 315.304555][ T7107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.439677][ T50] hsr_slave_0: left promiscuous mode [ 315.468443][ T50] hsr_slave_1: left promiscuous mode [ 315.499753][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.533443][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.994878][ T7438] loop5: detected capacity change from 0 to 128 [ 316.861180][ T7438] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.943943][ T7438] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.933304][ T5847] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.717097][ T7461] fuse: Bad value for 'fd' [ 320.423808][ T50] team0 (unregistering): Port device team_slave_1 removed [ 320.983318][ T50] team0 (unregistering): Port device team_slave_0 removed [ 326.393909][ T7107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 326.850736][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.191501][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.789895][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.800126][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.808793][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.817657][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.825535][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.975237][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.232095][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.970930][ T7460] syz.5.331 (7460): drop_caches: 2 [ 329.982862][ T7317] bridge_slave_0: entered allmulticast mode [ 330.193067][ T7317] bridge_slave_0: entered promiscuous mode [ 330.232901][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.240061][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.326447][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.342'. [ 330.364652][ T7317] bridge_slave_1: entered allmulticast mode [ 330.419440][ T7317] bridge_slave_1: entered promiscuous mode [ 330.501357][ T7501] geneve2: entered promiscuous mode [ 330.571685][ T7501] geneve2: entered allmulticast mode [ 331.801717][ T7520] loop5: detected capacity change from 0 to 1024 [ 331.811534][ T5851] Bluetooth: hci0: command tx timeout [ 332.210918][ T7519] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 332.217786][ T7519] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 332.641196][ T36] hfsplus: b-tree write err: -5, ino 4 [ 333.993627][ T5851] Bluetooth: hci0: command tx timeout [ 334.344091][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.125877][ T7541] loop5: detected capacity change from 0 to 128 [ 336.241553][ T5851] Bluetooth: hci0: command tx timeout [ 336.729520][ T7495] lo speed is unknown, defaulting to 1000 [ 336.836283][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.281671][ T5851] Bluetooth: hci0: command tx timeout [ 341.283539][ T7317] team0: Port device team_slave_0 added [ 344.412015][ T7317] team0: Port device team_slave_1 added [ 345.018997][ T7599] overlayfs: failed to clone upperpath [ 345.496903][ T7598] program syz.3.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.874695][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.916526][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.024878][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.238368][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.041726][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.181490][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.851942][ T30] audit: type=1326 audit(1759645726.191:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.5.362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62db58eec9 code=0x0 [ 350.954099][ T7598] syz.3.358 (7598): drop_caches: 2 [ 352.659872][ T7317] hsr_slave_0: entered promiscuous mode [ 352.709378][ T7317] hsr_slave_1: entered promiscuous mode [ 352.735904][ T7317] debugfs: 'hsr0' already exists in 'hsr' [ 352.815452][ T7317] Cannot create hsr debugfs directory [ 353.029585][ T7643] bridge1: entered allmulticast mode [ 353.037234][ T7646] ªªªªª»: renamed from hsr0 (while UP) [ 353.939848][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 354.079005][ T7657] loop3: detected capacity change from 0 to 4096 [ 354.150854][ T7657] EXT4-fs (loop3): Test dummy encryption mode enabled [ 354.243561][ T7657] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 354.275698][ T7657] System zones: 0-5 [ 354.299828][ T7657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.870524][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.263553][ T50] bridge_slave_1: left allmulticast mode [ 358.269227][ T50] bridge_slave_1: left promiscuous mode [ 358.344736][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.476119][ T50] bridge_slave_0: left allmulticast mode [ 358.570397][ T7698] loop3: detected capacity change from 0 to 128 [ 358.576888][ T50] bridge_slave_0: left promiscuous mode [ 358.601018][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.611940][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 358.899169][ T7698] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.951999][ T7698] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.042242][ T5918] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 359.121812][ T5918] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 359.161847][ T5918] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.993594][ T5918] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 360.033354][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 360.053938][ T5918] usb 6-1: Product: syz [ 360.058191][ T5918] usb 6-1: Manufacturer: syz [ 360.063737][ T5918] usb 6-1: SerialNumber: syz [ 360.119933][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.129867][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.142641][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.150909][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.190260][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.209466][ T5918] usb 6-1: config 0 descriptor?? [ 360.318166][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.405193][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.470436][ T50] bond0 (unregistering): Released all slaves [ 360.619130][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.662250][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.669643][ T7495] bridge_slave_0: entered allmulticast mode [ 360.729385][ T7495] bridge_slave_0: entered promiscuous mode [ 361.164736][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.231744][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.259425][ T7495] bridge_slave_1: entered allmulticast mode [ 361.392323][ T5852] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.408553][ T7495] bridge_slave_1: entered promiscuous mode [ 361.506432][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.077472][ T7722] loop3: detected capacity change from 0 to 16 [ 362.283045][ T52] Bluetooth: hci5: command tx timeout [ 362.881789][ T50] hsr_slave_0: left promiscuous mode [ 362.925878][ T7722] erofs (device loop3): cannot find valid erofs superblock [ 363.512750][ T50] hsr_slave_1: left promiscuous mode [ 363.535984][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.762511][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.101694][ T5918] usb 6-1: can't set config #0, error -71 [ 364.140691][ T5918] usb 6-1: USB disconnect, device number 2 [ 364.381535][ T52] Bluetooth: hci5: command tx timeout [ 366.511546][ T52] Bluetooth: hci5: command tx timeout [ 366.649426][ T7742] __vm_enough_memory: pid: 7742, comm: syz.2.379, bytes: 21200197300224 not enough memory for the allocation [ 367.213963][ T50] team0 (unregistering): Port device team_slave_1 removed [ 368.528060][ T5851] Bluetooth: hci5: command tx timeout [ 368.797332][ T50] team0 (unregistering): Port device team_slave_0 removed [ 369.210067][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.346594][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.382111][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.441730][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.449118][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.508734][ T7763] loop3: detected capacity change from 0 to 128 [ 370.647220][ T7763] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.681703][ T7763] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.757749][ T5852] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.816837][ T7495] team0: Port device team_slave_0 added [ 371.863710][ T7495] team0: Port device team_slave_1 added [ 372.914604][ T7709] lo speed is unknown, defaulting to 1000 [ 373.618019][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.878806][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.325354][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.554294][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.561271][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.614514][ T7806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.702183][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.939256][ T5851] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 374.969351][ T5851] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 375.127350][ T7495] hsr_slave_0: entered promiscuous mode [ 375.147180][ T7495] hsr_slave_1: entered promiscuous mode [ 375.153826][ T7495] debugfs: 'hsr0' already exists in 'hsr' [ 375.159573][ T7495] Cannot create hsr debugfs directory [ 375.242441][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 375.252959][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 375.531836][ T50] bridge_slave_1: left allmulticast mode [ 376.438721][ T24] libceph: connect (1)[c::]:6789 error -101 [ 376.501526][ T50] bridge_slave_1: left promiscuous mode [ 376.507347][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.609315][ T7831] ceph: No mds server is up or the cluster is laggy [ 376.617823][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 376.797483][ T50] bridge_slave_0: left allmulticast mode [ 376.858019][ T50] bridge_slave_0: left promiscuous mode [ 376.867301][ T7839] loop5: detected capacity change from 0 to 128 [ 376.905870][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.105698][ T7839] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.187505][ T7839] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.441559][ T5847] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.535464][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.589703][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.635482][ T50] bond0 (unregistering): Released all slaves [ 379.854381][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 379.967298][ T50] hsr_slave_0: left promiscuous mode [ 379.990544][ T50] hsr_slave_1: left promiscuous mode [ 380.008605][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.094501][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.271839][ T7869] loop5: detected capacity change from 0 to 32768 [ 383.912676][ T5851] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 384.061500][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 384.164736][ T30] audit: type=1326 audit(1759645761.531:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.218984][ T30] audit: type=1326 audit(1759645761.551:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.268472][ T30] audit: type=1326 audit(1759645761.551:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.292145][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 384.299270][ T30] audit: type=1326 audit(1759645761.551:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.330638][ T50] team0 (unregistering): Port device team_slave_1 removed [ 384.332379][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.348755][ T30] audit: type=1326 audit(1759645761.551:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.376538][ T5918] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 384.386047][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.395381][ T5918] usb 4-1: Product: syz [ 384.399710][ T5918] usb 4-1: Manufacturer: syz [ 384.404730][ T5918] usb 4-1: SerialNumber: syz [ 384.412557][ T30] audit: type=1326 audit(1759645761.571:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.449906][ T5918] usb 4-1: config 0 descriptor?? [ 384.457713][ T30] audit: type=1326 audit(1759645761.571:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.482363][ T5918] usb 4-1: bad CDC descriptors [ 384.488469][ T5918] usb 4-1: unsupported MDLM descriptors [ 384.498292][ T50] team0 (unregistering): Port device team_slave_0 removed [ 384.499004][ T30] audit: type=1326 audit(1759645761.571:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.527910][ T30] audit: type=1326 audit(1759645761.571:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.552888][ T30] audit: type=1326 audit(1759645761.571:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62db58eec9 code=0x7ffc0000 [ 384.667721][ T5940] usb 4-1: USB disconnect, device number 2 [ 385.771352][ T7916] loop3: detected capacity change from 0 to 64 [ 388.086051][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.172574][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.194240][ T7709] bridge_slave_0: entered allmulticast mode [ 388.206828][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.226163][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.247180][ T7709] bridge_slave_0: entered promiscuous mode [ 388.285405][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.315148][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.343782][ T7709] bridge_slave_1: entered allmulticast mode [ 388.374884][ T7709] bridge_slave_1: entered promiscuous mode [ 388.382910][ T5827] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 388.595141][ T5827] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 388.621470][ T5827] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 388.674873][ T5827] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 388.720559][ T5827] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 388.781516][ T5827] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 388.846317][ T5827] usb 4-1: Manufacturer: syz [ 388.850963][ T5827] usb 4-1: SerialNumber: syz [ 389.836095][ T5827] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 389.855226][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.936624][ T5827] usb 4-1: USB disconnect, device number 3 [ 389.954700][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.974307][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.003319][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.011668][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.022126][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.030018][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.588358][ T7709] team0: Port device team_slave_0 added [ 390.610350][ T50] bridge_slave_1: left allmulticast mode [ 390.625626][ T50] bridge_slave_1: left promiscuous mode [ 390.644102][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.733089][ T50] bridge_slave_0: left allmulticast mode [ 390.747518][ T50] bridge_slave_0: left promiscuous mode [ 390.767487][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.952549][ T5851] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 391.117320][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 391.117346][ T30] audit: type=1326 audit(1759645768.481:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b8698eec9 code=0x0 [ 391.512061][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.623209][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.038692][ T50] bond0 (unregistering): Released all slaves [ 392.151689][ T5851] Bluetooth: hci0: command tx timeout [ 392.172189][ T7709] team0: Port device team_slave_1 added [ 393.378925][ T7988] loop3: detected capacity change from 0 to 2048 [ 393.436117][ T7988] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 393.458902][ T7952] lo speed is unknown, defaulting to 1000 [ 393.531155][ T7761] udevd[7761]: incorrect nilfs2 checksum on /dev/loop3 [ 393.544883][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.560210][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.618357][ T7761] udevd[7761]: incorrect nilfs2 checksum on /dev/loop3 [ 393.626381][ T7709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.735245][ T7988] bio_check_eod: 1 callbacks suppressed [ 393.735277][ T7988] syz.3.438: attempt to access beyond end of device [ 393.735277][ T7988] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 393.755888][ T8000] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.801631][ T50] hsr_slave_0: left promiscuous mode [ 393.827669][ T50] hsr_slave_1: left promiscuous mode [ 393.880605][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.888781][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.861465][ T5851] Bluetooth: hci0: command tx timeout [ 396.921525][ T52] Bluetooth: hci0: command tx timeout [ 396.970372][ T50] team0 (unregistering): Port device team_slave_1 removed [ 397.040849][ T50] team0 (unregistering): Port device team_slave_0 removed [ 397.278860][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.286273][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.317269][ T7709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.438638][ T7709] hsr_slave_0: entered promiscuous mode [ 397.446083][ T7709] hsr_slave_1: entered promiscuous mode [ 397.452454][ T7709] debugfs: 'hsr0' already exists in 'hsr' [ 397.458184][ T7709] Cannot create hsr debugfs directory [ 397.884966][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 398.129781][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.137490][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.145025][ T7952] bridge_slave_0: entered allmulticast mode [ 398.154302][ T7952] bridge_slave_0: entered promiscuous mode [ 398.165370][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.172808][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.179963][ T7952] bridge_slave_1: entered allmulticast mode [ 398.189626][ T7952] bridge_slave_1: entered promiscuous mode [ 398.267052][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.289677][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.386358][ T7952] team0: Port device team_slave_0 added [ 398.396725][ T7952] team0: Port device team_slave_1 added [ 398.481122][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.488250][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.515533][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.530359][ T7709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 398.547993][ T7709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 398.560448][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.568394][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.594959][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.608041][ T7709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.628787][ T7709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 398.708269][ T7952] hsr_slave_0: entered promiscuous mode [ 398.716411][ T7952] hsr_slave_1: entered promiscuous mode [ 398.723360][ T7952] debugfs: 'hsr0' already exists in 'hsr' [ 398.729096][ T7952] Cannot create hsr debugfs directory [ 399.001801][ T52] Bluetooth: hci0: command tx timeout [ 399.029752][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.069612][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.086895][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.094065][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.140034][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.147255][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.445609][ T7952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.464270][ T7952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.487120][ T7952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.516975][ T7952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 399.609294][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.765151][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.803062][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.836553][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.843752][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.875181][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.882444][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.257235][ T7709] veth0_vlan: entered promiscuous mode [ 400.286977][ T7709] veth1_vlan: entered promiscuous mode [ 400.351684][ T7709] veth0_macvtap: entered promiscuous mode [ 400.373390][ T7709] veth1_macvtap: entered promiscuous mode [ 400.410544][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.436281][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.486108][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.493402][ T7535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.513987][ T7535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.553893][ T1089] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.577244][ T1089] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.719989][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.729434][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.814763][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.824102][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.128536][ T7952] veth0_vlan: entered promiscuous mode [ 402.204486][ T7952] veth1_vlan: entered promiscuous mode [ 402.344265][ T7952] veth0_macvtap: entered promiscuous mode [ 402.366403][ T7952] veth1_macvtap: entered promiscuous mode [ 402.629366][ T8153] loop6: detected capacity change from 0 to 128 [ 404.473673][ T5827] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 405.452438][ T8153] EXT4-fs: error -4 creating inode table initialization thread [ 405.485150][ T8153] EXT4-fs (loop6): mount failed [ 406.072827][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.113285][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.331257][ T7535] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.406921][ T7535] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.293391][ T7535] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.305078][ T7535] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.577823][ T8199] netlink: 5464 bytes leftover after parsing attributes in process `syz.6.465'. [ 408.648222][ T7535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.703168][ T7535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.877467][ T7535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.065180][ T7535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.921851][ T8248] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 415.971581][ T8248] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 416.087781][ T8257] wg1: entered promiscuous mode [ 416.099914][ T8257] wg1: entered allmulticast mode [ 416.271742][ T8259] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 416.302034][ T8259] netlink: 'syz.1.482': attribute type 2 has an invalid length. [ 416.309699][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 418.011576][ T8274] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 418.019254][ T8274] netlink: 'syz.1.487': attribute type 2 has an invalid length. [ 418.250682][ T8282] loop3: detected capacity change from 0 to 8 [ 418.381665][ T8282] unable to read xattr id index table [ 421.583687][ T8305] netlink: 'syz.6.494': attribute type 1 has an invalid length. [ 421.591819][ T8305] netlink: 'syz.6.494': attribute type 2 has an invalid length. [ 421.822204][ T8309] capability: warning: `syz.5.493' uses 32-bit capabilities (legacy support in use) [ 424.168229][ T8323] IPv6: Can't replace route, no match found [ 424.352400][ T8330] loop5: detected capacity change from 0 to 736 [ 424.649871][ T8330] rock: directory entry would overflow storage [ 424.940315][ T8330] rock: sig=0x3b10, size=4, remaining=3 [ 426.501641][ T8364] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 426.581665][ T8364] netlink: 'syz.3.513': attribute type 2 has an invalid length. [ 427.070096][ T8383] loop3: detected capacity change from 0 to 8 [ 427.143733][ T8383] unable to read xattr id index table [ 428.080354][ T8400] netlink: 'syz.5.528': attribute type 1 has an invalid length. [ 428.395592][ T8407] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 428.417490][ T8407] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.530'. [ 428.833331][ T8419] loop6: detected capacity change from 0 to 8 [ 428.858096][ T8419] unable to read xattr id index table [ 429.965685][ T8440] loop6: detected capacity change from 0 to 8 [ 429.992536][ T8442] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 430.224094][ T8440] SQUASHFS error: Failed to read block 0x636: -5 [ 430.273407][ T8440] SQUASHFS error: Unable to read metadata cache entry [634] [ 430.351590][ T8440] SQUASHFS error: Unable to read metadata cache entry [634] [ 430.386815][ T8440] SQUASHFS error: Unable to read directory block [629:0] [ 430.484524][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'. [ 433.788037][ T5936] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 433.816070][ T8480] loop5: detected capacity change from 0 to 256 [ 434.030456][ T5936] usb 7-1: config 0 has an invalid interface number: 199 but max is 1 [ 434.061482][ T5936] usb 7-1: config 0 has no interface number 1 [ 434.100086][ T5936] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 434.149637][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 434.232271][ T5936] usb 7-1: string descriptor 0 read error: -71 [ 434.266528][ T5936] usb 7-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 434.304749][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.321526][ T5918] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 434.686271][ T5936] usb 7-1: config 0 descriptor?? [ 434.713479][ T5936] usb 7-1: can't set config #0, error -71 [ 435.177414][ T5936] usb 7-1: USB disconnect, device number 2 [ 435.281453][ T5918] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 435.321123][ T5918] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.351491][ T5918] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.381706][ T5918] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.390788][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.602798][ T5918] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.703196][ T5918] usb 8-1: invalid MIDI out EP 0 [ 436.064718][ T8526] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 436.726937][ T5918] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 436.792060][ T5918] usb 8-1: USB disconnect, device number 2 [ 437.505025][ T8538] netlink: 'syz.6.573': attribute type 1 has an invalid length. [ 437.780758][ T8538] netlink: 'syz.6.573': attribute type 2 has an invalid length. [ 437.827373][ T8395] udevd[8395]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.555621][ T8556] loop7: detected capacity change from 0 to 8 [ 438.599034][ T8556] unable to read xattr id index table [ 441.303281][ T8604] netlink: 104 bytes leftover after parsing attributes in process `syz.2.596'. [ 441.425381][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.595'. [ 443.409774][ T8619] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 443.533597][ T8619] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 444.942835][ T8630] veth0: entered promiscuous mode [ 445.037647][ T8638] siw: device registration error -23 [ 445.109453][ T8638] loop5: detected capacity change from 0 to 512 [ 445.708659][ T8621] veth0: left promiscuous mode [ 445.750584][ T8638] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 445.761832][ T8638] EXT4-fs (loop5): orphan cleanup on readonly fs [ 445.791888][ T8638] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 445.800855][ T8638] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 445.812595][ T8638] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.605: Failed to acquire dquot type 1 [ 445.826839][ T8638] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.605: bg 0: block 40: padding at end of block bitmap is not set [ 445.841492][ T8638] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 445.852336][ T8638] EXT4-fs (loop5): 1 truncate cleaned up [ 445.991326][ T8638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.893914][ T8645] ================================================================== [ 446.901991][ T8645] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 446.909188][ T8645] Read of size 8 at addr ffff88804af7c920 by task syz.6.606/8645 [ 446.916889][ T8645] [ 446.919202][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.6.606 Not tainted syzkaller #0 PREEMPT(full) [ 446.919233][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.919249][ T8645] Call Trace: [ 446.919258][ T8645] [ 446.919268][ T8645] dump_stack_lvl+0x116/0x1f0 [ 446.919305][ T8645] print_report+0xcd/0x630 [ 446.919331][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.919365][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.919397][ T8645] ? __phys_addr+0xe8/0x180 [ 446.919442][ T8645] ? __cpa_addr+0x1d3/0x220 [ 446.919469][ T8645] kasan_report+0xe0/0x110 [ 446.919497][ T8645] ? __cpa_addr+0x1d3/0x220 [ 446.919535][ T8645] __cpa_addr+0x1d3/0x220 [ 446.919565][ T8645] cpa_flush+0xec/0x8a0 [ 446.919599][ T8645] ? __pfx_cpa_flush+0x10/0x10 [ 446.919631][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.919663][ T8645] ? pgprot2cachemode+0x9a/0x130 [ 446.919705][ T8645] ? __pfx_pgprot2cachemode+0x10/0x10 [ 446.919752][ T8645] set_pages_array_wb+0x238/0x280 [ 446.919787][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.919820][ T8645] ? __pfx_set_pages_array_wb+0x10/0x10 [ 446.919864][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.919900][ T8645] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 446.919935][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.919969][ T8645] drm_gem_shmem_vm_close+0x63/0xc0 [ 446.920001][ T8645] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 446.920035][ T8645] remove_vma+0x88/0x160 [ 446.920069][ T8645] exit_mmap+0x50a/0xb90 [ 446.920100][ T8645] ? __pfx_exit_mmap+0x10/0x10 [ 446.920133][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.920165][ T8645] ? __lock_acquire+0xb97/0x1ce0 [ 446.920203][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.920235][ T8645] ? arch_uprobe_clear_state+0x16/0x150 [ 446.920271][ T8645] __mmput+0x12a/0x410 [ 446.920310][ T8645] mmput+0x62/0x70 [ 446.920346][ T8645] do_exit+0x7c7/0x2bf0 [ 446.920376][ T8645] ? __pfx_do_exit+0x10/0x10 [ 446.920401][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.920433][ T8645] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.920467][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.920499][ T8645] ? find_held_lock+0x2b/0x80 [ 446.920544][ T8645] do_group_exit+0xd3/0x2a0 [ 446.920572][ T8645] get_signal+0x2671/0x26d0 [ 446.920615][ T8645] ? css_rstat_updated+0x1c2/0x510 [ 446.920661][ T8645] ? __pfx_get_signal+0x10/0x10 [ 446.920700][ T8645] ? do_futex+0x122/0x350 [ 446.920728][ T8645] ? __pfx_do_futex+0x10/0x10 [ 446.920758][ T8645] arch_do_signal_or_restart+0x8f/0x7c0 [ 446.920799][ T8645] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.920846][ T8645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.920883][ T8645] exit_to_user_mode_loop+0x85/0x130 [ 446.920918][ T8645] do_syscall_64+0x419/0x4e0 [ 446.920954][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.920981][ T8645] RIP: 0033:0x7f5e84b8eec9 [ 446.921001][ T8645] Code: Unable to access opcode bytes at 0x7f5e84b8ee9f. [ 446.921013][ T8645] RSP: 002b:00007f5e85a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.921038][ T8645] RAX: fffffffffffffe00 RBX: 00007f5e84de6188 RCX: 00007f5e84b8eec9 [ 446.921056][ T8645] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e84de6188 [ 446.921073][ T8645] RBP: 00007f5e84de6180 R08: 0000000000000000 R09: 0000000000000000 [ 446.921089][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.921106][ T8645] R13: 00007f5e84de6218 R14: 00007ffc75c7fc10 R15: 00007ffc75c7fcf8 [ 446.921134][ T8645] [ 446.921142][ T8645] [ 447.255829][ T8645] Allocated by task 8645: [ 447.260142][ T8645] kasan_save_stack+0x33/0x60 [ 447.264927][ T8645] kasan_save_track+0x14/0x30 [ 447.269621][ T8645] __kasan_kmalloc+0xaa/0xb0 [ 447.274235][ T8645] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 447.279639][ T8645] drm_gem_get_pages+0x144/0xa10 [ 447.284589][ T8645] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 447.290656][ T8645] drm_gem_shmem_mmap+0xc9/0x550 [ 447.295584][ T8645] drm_gem_mmap_obj+0x1b5/0x560 [ 447.300437][ T8645] drm_gem_mmap+0x40b/0x620 [ 447.304946][ T8645] __mmap_region+0x1309/0x27a0 [ 447.309719][ T8645] mmap_region+0x1ab/0x3f0 [ 447.314143][ T8645] do_mmap+0xa3e/0x1210 [ 447.318292][ T8645] vm_mmap_pgoff+0x29e/0x470 [ 447.322875][ T8645] ksys_mmap_pgoff+0x32c/0x5c0 [ 447.327629][ T8645] __x64_sys_mmap+0x125/0x190 [ 447.332320][ T8645] do_syscall_64+0xcd/0x4e0 [ 447.336828][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.342716][ T8645] [ 447.345022][ T8645] The buggy address belongs to the object at ffff88804af7c800 [ 447.345022][ T8645] which belongs to the cache kmalloc-512 of size 512 [ 447.359062][ T8645] The buggy address is located 0 bytes to the right of [ 447.359062][ T8645] allocated 288-byte region [ffff88804af7c800, ffff88804af7c920) [ 447.373550][ T8645] [ 447.375856][ T8645] The buggy address belongs to the physical page: [ 447.382248][ T8645] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4af7c [ 447.391000][ T8645] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 447.399489][ T8645] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 447.407029][ T8645] page_type: f5(slab) [ 447.411003][ T8645] raw: 00fff00000000040 ffff88801b026c80 dead000000000100 dead000000000122 [ 447.419582][ T8645] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 447.428162][ T8645] head: 00fff00000000040 ffff88801b026c80 dead000000000100 dead000000000122 [ 447.436827][ T8645] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 447.445494][ T8645] head: 00fff00000000002 ffffea00012bdf01 00000000ffffffff 00000000ffffffff [ 447.454160][ T8645] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 447.462813][ T8645] page dumped because: kasan: bad access detected [ 447.469211][ T8645] page_owner tracks the page as allocated [ 447.474911][ T8645] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1089, tgid 1089 (kworker/u8:6), ts 114190906024, free_ts 114186496121 [ 447.494367][ T8645] post_alloc_hook+0x1c0/0x230 [ 447.499146][ T8645] get_page_from_freelist+0x10a3/0x3a30 [ 447.504701][ T8645] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 447.510603][ T8645] alloc_pages_mpol+0x1fb/0x550 [ 447.515452][ T8645] new_slab+0x24a/0x360 [ 447.519609][ T8645] ___slab_alloc+0xdc4/0x1ae0 [ 447.524290][ T8645] __slab_alloc.constprop.0+0x63/0x110 [ 447.529754][ T8645] __kmalloc_noprof+0x501/0x880 [ 447.534618][ T8645] fib6_info_alloc+0x40/0x160 [ 447.539296][ T8645] ip6_route_info_create+0x14c/0x870 [ 447.544573][ T8645] ip6_route_add.part.0+0x22/0x1d0 [ 447.549699][ T8645] ip6_route_add+0x45/0x60 [ 447.554129][ T8645] addrconf_prefix_route+0x2fd/0x510 [ 447.559407][ T8645] addrconf_add_linklocal+0x329/0x500 [ 447.564782][ T8645] addrconf_addr_gen+0x364/0x3b0 [ 447.569721][ T8645] addrconf_init_auto_addrs+0x2ba/0x810 [ 447.575278][ T8645] page last free pid 5852 tgid 5852 stack trace: [ 447.581588][ T8645] __free_frozen_pages+0x7df/0x1160 [ 447.586788][ T8645] stack_depot_save_flags+0x352/0x9c0 [ 447.592171][ T8645] kasan_save_stack+0x42/0x60 [ 447.596864][ T8645] kasan_save_track+0x14/0x30 [ 447.601556][ T8645] __kasan_kmalloc+0xaa/0xb0 [ 447.606159][ T8645] __kmalloc_noprof+0x32f/0x880 [ 447.611013][ T8645] fib6_info_alloc+0x40/0x160 [ 447.615689][ T8645] ip6_route_info_create+0x14c/0x870 [ 447.620967][ T8645] ip6_route_add.part.0+0x22/0x1d0 [ 447.626093][ T8645] ip6_route_add+0x45/0x60 [ 447.630521][ T8645] addrconf_add_mroute+0x1dd/0x350 [ 447.635626][ T8645] addrconf_add_dev+0x14e/0x1c0 [ 447.640475][ T8645] addrconf_init_auto_addrs+0x201/0x810 [ 447.646023][ T8645] addrconf_notify+0x6e2/0x19e0 [ 447.650889][ T8645] notifier_call_chain+0xbc/0x410 [ 447.655905][ T8645] call_netdevice_notifiers_info+0xbe/0x140 [ 447.661895][ T8645] [ 447.664200][ T8645] Memory state around the buggy address: [ 447.669813][ T8645] ffff88804af7c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.677862][ T8645] ffff88804af7c880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.685906][ T8645] >ffff88804af7c900: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 447.694118][ T8645] ^ [ 447.699211][ T8645] ffff88804af7c980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 447.707260][ T8645] ffff88804af7ca00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 447.715309][ T8645] ================================================================== [ 447.739268][ T8645] Disabling lock debugging due to kernel taint [ 447.848932][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.882729][ T52] Bluetooth: hci3: Malformed HCI Event [ 449.644142][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.650466][ T1296] ieee802154 phy1 wpan1: encryption failed: -22