last executing test programs: 34.342252299s ago: executing program 2 (id=1002): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de5b410300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 32.949632349s ago: executing program 2 (id=1006): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 32.550067995s ago: executing program 2 (id=1007): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f00000002c0)=""/58, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x2, 0x20, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 29.678179355s ago: executing program 2 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x49c781}) io_uring_enter(r3, 0x3516, 0x4, 0x0, 0x0, 0x0) 27.387320859s ago: executing program 2 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = gettid() syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x483, &(0x7f0000000580)="$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") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0xc2a40, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, 0x0, 0x0, 0x3e7ffffffc, 0x0, 0x10}]) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$loop(0x0, 0x5, 0x80041) r5 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000001300), 0x0, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xa0010, &(0x7f0000000000)=ANY=[], 0xff, 0x5aa1, &(0x7f0000001340)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 24.945896942s ago: executing program 2 (id=1024): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) 13.626115728s ago: executing program 4 (id=1044): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x4004a, &(0x7f0000000600)=ANY=[@ANYRES16], 0x1, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 13.493804036s ago: executing program 3 (id=1045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 11.489597773s ago: executing program 0 (id=1046): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x20008000) sendmsg$sock(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x70) shutdown(r0, 0x1) 8.16489755s ago: executing program 0 (id=1049): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x8084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0xe0, 0xc2e, &(0x7f0000000f40)="$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") statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000600)=""/227) 7.275977293s ago: executing program 1 (id=1051): r0 = socket(0x15, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) 6.526843353s ago: executing program 3 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4000008) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000020c0)=ANY=[], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.525882026s ago: executing program 4 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) open(&(0x7f0000000080)='./file0\x00', 0x42, 0x197) sendmsg$rds(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\"'}]}], {0x14}}, 0x60}}, 0x0) 6.285961426s ago: executing program 1 (id=1054): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)={[{@errors_remount}, {@discard}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x6}}, {@errors_continue}, {@errors_continue}, {@sys_tz}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@gid}, {@sys_tz}, {@errors_remount}]}, 0x1, 0x1538, &(0x7f000000ac40)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JiUmOJCSG3JKGJOQ6JJchJJeJSeN+v18SkqRJkpDckvX/CH916vxO5/c75zifM8/389kf67H2s/ba+9nv++695535ttPgag2qV65HRPB/ghf/SQKAWADoDwDXAUAAAKXjSsdd6M8uMen/thH2z/Vo6tWeAbuauP5ZG9c/a+P6Z21c/6yN65+1cf2zNq5/1sb1Zywr2zQt//W8ZN2Fn///96vzN3v48/+/SGaJMV+uKXFjZ4CYP5vC9c/auP7/tYI/sxLXP2vj+mdVsVd7Auw/AL/+s4Jsf7OH65+1cf0Zy8qu9vPnq71AJGsfg6t9/jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxpO+ysUAFxuX+15McYYY4wxxhhj7J/HZ7vaM2CMMcYYY4wxxti/HoIACQoCiIFsEAvZIQcIALgWcsF1EIHrIQ5ugNxwI+SBvJAP8kM8FICCoMGABYIQCkFhiMJNUARuhqJwCxSD4uCgBCTArVASboNScDuUhjugDNwJZaEclIcKcBdUhLuhEtwDleFeqAJVoRpUh/ugBtwPNeEBqAUPQm14COrAw1AXHoF68CjUh8egATwODeEJaASNoQk0hWb/q/yXoBu8DN2hByRBT+gFr0Bv6AN9oR/0h1dhALwGA+F1SIZBMBjegCHwJgyFt2AYDIcR8DaMhFEwGsbAWBgHKTAeJsA7MBHehUkwGabAVEiFaTAd3oMZMBNmwfswGz6AOTAX5sF8SIMPYQEshHT4CBbBx5ABi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAJ7ATPoVdsBv2wGewFz7/B/NP/VV+ZwQEFChQocIYjMFYjMUcmANzYk7MhbkwghGMwzjMjbkxD+bBfJgP4zEeC2JBNGiQkLAQFsIoRrEIFsGiWBSLYTF06DABE7Ak3oalsBSWxtJYBstgWSyH5bACVsCKWBErYSWsjJWxClbBalgN78P7sCfWxJpYC2thbax9+fEU1sN6WB/rYwNsgA2xITbCRtgEm2AzbIbNsTm2wBbYCltha2yNbbANJmIitsN22B7bYwfsgB2xI3bCTtgZu2CXzJeyAb6ML2MPrCJ6Yi/shb0xOVtf7If98FUcgK/ha/g6JuMgHIxv4Bv4Jg7FkzgMh+MIHIEVxSgcjWOQxDhMwRScgBNwIk7ESTgZJ+NUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CF+K/rf3LL6mQQFyihRIyIEbEiVuQQOUROkVPkErlEREREnIgTuUVukUfkEflEPhEv4kVBUVAYYQSJMAYARFRERRFRRBQVRUUxUUw44USCSBAlRUlRSpQSpcUdooy4U5QV5URLV0FUEBVFK1dJ3CMqi8qiiqgqqonqorqoIWqImqKmqCVqidqitqgjHhZ1RU/si4+KC5VpIAZhQzEYG4nGQl56B2suhmIL0VK0Ek+L4TgM24jmLlE8K9qJ0dhe/EWMwedFRzEOO4kXRWfRRXQVL4luooXrLnqISdhT9BJTsbfoI/qKfmIGVhXv4+zs1cTrIlkMEoPFG2I+vimGirfEMDFcjBBvi5FilBgtxoixYpxIEePFBPGOmCjeFZPEZDFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI7PJWJld5pDXyJwyuHR0r5dx8gaZW94o88i8Mp/ML+NlAVlQammklSRDWUgWllF5kywib5ZF5S2ymCwunSwhE+StsqS8TZaSt8vS8g5ZRt4py8pysrysIO+SFeXdEiIXt1FFVpXVZHV5n0yC+2VN+YCsJR+UteVDso58WNaVj8h68lFZXz4mG8jHZUP5hGwkG8smsqlsJp+UzeVTsoVsKVvJp2Vr+YxsI9vKRPmsbCf9pVPkedlRviA7yRdlZ9lFdpU/y/PSy+6yh4SeIHvJV2Rv2Uf2lf1kf/mqHCBfkwPl6zJZDpKD5RtyiHxTDpVvyWFyuBwh35Yj5Sg5Wo6RY+U4mSLHywnyHTlRvisnyclyipwqU+U02ffSSLOk/Lv57/xB/sBftr5RbpKb5Ra5VW6T2+UO+YncKXfKXXKX3CP3yL1yr9wn98n9cr88IA/ITJkpD8qD8pA8JA/Lw/KIPCKPymPyjPxBnpA/ypPylDwlz8iz8qw8d+kYgEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwksnjCqmiiunSqgEdes/kq+KqJtVUXXLb/Ivzy/pb8yvmWqmmqvmqoVqoVqpVqq1aq3aqDYqUSWqdqqdaq/aqw6qg+qoOqpOqpPqrDqrrqqr6qa6qe6qu0pSSaqXekX1Vn1UX9VP9VevqgFqgBqoBqpklawGq8FqiBqihqqhapgapkaoEWqkGqlGq9FqrBqrUlSKmqAmqIlqopqkJqkpaopKValqupquZqgZapaapWar2WqOmqPmqXkqTaWpBWqBSlfpapFapDLUYrVYLVVL1XK1XK1UK9VqtVqtVWvVerVeZahNapPaoraobWqb2qF2qJ1qp9qldqk9ao/aq/aqfWqf2q/2qwPqgMpUmeqgOqgOqUPqsDqsjqgj6qg6qo6r4+qEOqFOqpPqtDqtzqqz6pw6p86r8xcu+wIRiEAFKogJYoLYIDbIEeQIcgY5g1xBriASRIK4IC7IHdwY5AnyBvmC/EF8UCAoGOjABDYQl4oeDW4KigQ3B0WDW4JiQfHABSWChODWoGRwW1AquD0oHdwRlAnuDMoG5YLyQYXgrqBicHdQKbgnqBzcG1QJqgbVgurBfUGN4P6gZvBAUCt4MKgdPBTUCR4O6gaPBPWCR4P6wWNBg+DxoGHwRNAoaBw0CZoGzf6p43t/Mu9TrrvuoZN0T91Lv6J76z66r+6n++tX9QD9mh6oX9fJepAerN/QQ/Sbeqh+Sw/Tw/UI/bYeqUfp0XqMHqvH6RQ9Xk/Q7+iJ+l09SU/WU/RUnaqn6en6PT1Dz9Sz9Pt6tv5Az9Fz9Tw9X6fpD/UCvVCn64/0Iv2xztCL9RK9VC/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1Dv2J3qk/1bv0br1Hf6b36s/1Pv2F3q+/1Af0VzpTf60P6m/0If2tPqy/00f09/qoPqaP6x/0Cf2jPqlP6dP6jD6rf9Ln9M/6vPYXLu4vfLwbZZSJMTEm1sSaHCaHyWlymlwml4mYiIkzcSa3yW3ymDwmn8ln4k28KWgKmgvIkClkCpkL50cRU8QUNUVNMVPMOONMgkkwJU1JU8qUMqVNaVPGlDFlTVlT3pQ3d5m7zN3mbnOPucfca+41VU1VU91UNzVMDVPT1DS1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj08Q0Mc1MM9PcNDctTAvTyrQyrU1r08a0MYkm0bQz7Ux70950MB1MR9PRdDKdTGfT2XQ1XU030810N91NkkkyvUwv09v0Nn1NX9Pf9DcDzAAz0Aw0ySbZDDaDzRAzxAw1Q80wM9yMuHChakaZ0WaMGWvGmRSTYiaYCWaimWgmmUlmipliUk2qmW6mmxlmhpllZpnZZraZY+aYeWaeSTNpZoFZYNJNullkFpkMk2GWmCVmmVlmVpgVZpVZZdaYNWYdrDMbzAazyWwyW8wWs81sMzvMDrPT7DS7zC6zx+wxe81es8/sM/vNfnPAHDCZJtMcNAfNIXPIHDaHzRFzxBw1R81xc9ycMCfMSXPSeHPanDV5L31eehNrs9sc9hqb015rc9nr7F/H+Wx+G28L2IJW2zw2729iY60tam+xxWxx62wJm2Bv/V1c1paz5W0Fe5etaO+2lX4X17D325r2AVvLPmir2/t+E9e2D9k69nFbFxHANrb1bVPbwD5uG9onbCPb2DaxTW1r+4xtY9vaRPusbWef+128wC60q+xqu8autbvsbnvanrGH7Lf2rP3Jdrc9bH/7qh1gX7MD7es22Q76XTzCvm1H2lF2tB1jx9pxv4un2Kk21U6z0+17doad+bs4zX5oZ9t0O8fOtfPs/F/iC3NKtx/ZRfZjm2EDWGKX2mV2uV1hV/7/uS616+0Gu9HutJ/aLXar3Wa32x2XL4TtbrvHfmb32s/tQfuN3W+/tAfsYZtpv/4lvrB/h+139oj93h61x+xx+4M9YX9Uv+SO6g1gf7I/2J/teestEBKQJEUBxVA2iqXslIOuoZx0LeWi6yhC11Mc3UC56UbKQ3kpH+WneCpABUmTIUtEIRWiwhSlm+jy9IpRcXJUghLoVipJt1Epup1K0x1Uhu6kslSOylMFuosq0t1Uie6hynQvVaGqVI2q031Ug+6nmvQA1aIHqTY9RHXoYapLj1A9epTq02PUgB6nhvQENaLG1ISaUjN6kprTU9SCWlIreppa0zPUhtpSIj1L7eg5ak9/oQ70PHWkF6gTvUidqQt1pZeoG71M3akHJVFP6kWvUG/qQ32pH/WnV2kAvUYD6XVKpkE0mN6gIfQmDaW3aBgNpxH0No2kUTSaxtBYGkcpNJ4m0Ds0kd6lSTSZptBUSqVpNJ3eoxk0k2bR+zSbPqA5NJfm0XxKow9pAS2kdPqIFtHHlEGLaQktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtAntJM+pV20m/bQZ7SXPqd99AXtpy/pAH1FmfQ1HaRv6BB9S4fpO9+DvqejdIyO0w90gn6kk3SKTtMZOks/0Tn6mc6TJwgxFKEMVRiEMWG2MDbMHuYIrwlzhteGucLrwkh4fRgX3hDmDm8M84R5w3xh/jA+LBAWDHVoQhtSGIaFwsJhNLwpLBLeHBYNMSwWFg9dWCJMCG8NS4a3haXC28PS4R1hmfDOsGxYLnz8wQrhXWHF8O6wUnhPWDm8N6wSVg2rhdXD+8Ia4f1hzfCBsFb4YFgqfCisEz4c1g0fCeuFj4b1w8fCBuHjYcPwibBR2DhsEjYNm4VPhs3Dp8IWYcuwVfh02Dp8JmwTtg0Tw2fDduFzv/Q/tPCp8PIdwl/3J4U9w17hK+ErofcPyHnR+dG06IfRBdGF0fToR9FF0Y+jGdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3RjVHvq2cDh0446ZQLXIzL5mJddpfDXeNyumtdLnedi7jrXZy7weV2N7o8Lq/L5/K7eFfAFXTaGWcdudAVcoVd1N3kiribXVF3iyvmijvnSrgE19Q1c81cc/eUa+Faulbuafe0e8Y949q6tu5Z184959q7v0AH97zr6F5wL7gXXWfXxXV1L7lubnyui/ud5Hq5Xq636+36ur6uv+vvBrgBbqAb6JJdshvsBrshbogb6oa6YW6YG+FGuJFupBvtRruxbqxLcSlugpvgJrqJbpKb5Ka4KS7Vpbrpbrqb4Wa4ijMvbmWOm+PmuXkuzaW5Be7CNUG6W+QWuQyX4Za4JW6ZW+ZWuBVulVvl1rg1bp1b5za4DW6T2+S2uC1um9vmdrgdbqfb6Xb56y4O6va6fW6f2+/2uwPuK5fpvnYH3TfukPvWHXbfuSPue3fUHXPH3Q/uhPvRnXSn3Gl3xp11P7lz7md33nmXEhkfmRB5JzIx8m5kUmRyZEpkaiQ1Mi0yPfJeZEZkZmRW5P3I7MgHkTmRuZF5kfmRtMiHkQWRhZH0yEeRRZGPIxmRxZElkaWRZZHlEe8LbAl9IV/YR/1Nvoi/2Rf1t/hivrh3voRP8Lf6kv42X8rf7kv7O3wZf6cv68v58v4J38g39k18U9/MP+mb+6d8C9/St/JP+9b+Gd/Gt/WJ/lnfzj/n2/u/+A7+ed/Rv+A7+Rd9Z9/Fd/Uv+W7+Zd/d9/BJvqfv5V/xvX0f39f38/39q36Af80P9K/7ZD/ID/Zv+CH+TT/Uv+WH+eF+RMzbfuTlFwCM8yl+vJ/g3/ET/bt+kp/sp/ipPtVP89P9e36Gn+ln+ff9bP+Bn+Pn+nl+vk/zH/oFfqFP9x/5Rf5jn+EXX36o7Ff4lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+E/8Tv+p3+V3+z3+M7/Xf+73+S/8fv+lP+C/8pn+a3/Qf+MP+W/9Yf+dP+K/90f9MX/c/+BP+B/9SX/Kn/Zn/Fn/kz/nf/bn+XfWGGOMMcb+lPFXmuK3PRcf5/f8gxzxq5V7AcC1W/Nn/rr/whXlujwX231EfOsIADzbo9Ojl5cqVZKSki6tmyEhKDwX4PJPgi6IgSvxYmgFz0AitISSfzj/PqLLWfo740fvAMjxq5xYuBJfGf8LAEz6g/GffHrEgjLh6bj/Yfy5AEULX8nJDlfixdDql+crLaHU35h/3ua/nn/s78fP/mUKQItf5eSEK/GV+SfAU/AcJP5mTcYYY4wxxhhj7KI+onyHy/efl7/x+Uf35/HqSk42uBL/vftzxhhjjDHGGGOMXX3Pd+na9snExJYd/vFGpf9V1p9uNIR/1cjc+MPG5e/PJnXp2lYBwJ9OX9Xij1YGuNCQ/8692Pxv2VbypeP0113LzvgA/jNK+c9oXMU3JcYYY4wxxti/xJWL/t/+v7paE2KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKgf8efE7va+8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8vAAD//zEi/iE=") 5.893091455s ago: executing program 0 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsopen(0x0, 0x0) 5.203354261s ago: executing program 3 (id=1056): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xff, 0x70000000, 0x0, 0x6, 0x81, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0xe, 0xffff, 0x5, 0x2, 0x3, 0x60000000, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xb, 0xe, 0x8, 0x2, 0x2, 0x0, 0x1000000, 0x6}}, {0x10, 0x2, [0x6, 0x6, 0x47, 0x5, 0x8, 0x1]}}]}, @qdisc_kind_options=@q_drr={0x8}]}, 0xa4}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200]}}) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 5.20151421s ago: executing program 4 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsopen(0x0, 0x0) 5.199973932s ago: executing program 1 (id=1058): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_sctp(0x2, 0x8201ad65c48ccfb3, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, 0x0, 0x0) sendmsg$nl_generic(r5, 0x0, 0x40) bind$bt_hci(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 5.016932013s ago: executing program 1 (id=1059): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x1fff}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 4.226732144s ago: executing program 0 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tee(r1, r2, 0x6da, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1fe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x24000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000700)=0x1c) 4.225074188s ago: executing program 1 (id=1061): socket(0x1e, 0x4, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.224495385s ago: executing program 4 (id=1062): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) msgget$private(0x0, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.192807411s ago: executing program 3 (id=1063): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r4, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4.003004284s ago: executing program 4 (id=1064): r0 = socket(0x15, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) 3.143779944s ago: executing program 0 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsopen(0x0, 0x0) 3.143053237s ago: executing program 1 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.922621902s ago: executing program 3 (id=1067): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3db04885d98ee8566e8d9ed8d2b645cc4749fb8a6239d4ad94d86dde52b40277"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40040) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000640)="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", 0x889, 0x2400c014, 0x0, 0x0) 1.422932ms ago: executing program 0 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x14, r1, 0x5, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x101000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004004) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) r3 = timerfd_create(0x8, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffffff, 0xffffff00, 0xffff00], [0xffff00, 0xff], 'nr0\x00', 'veth0\x00', {0xff}, {0x47f0d8da367fb287}, 0x6, 0x4, 0x4}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x30e7, 0x101, 'snmp\x00'}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x0, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffff00, 0xff], 'virt_wifi0\x00', 'team_slave_1\x00', {}, {}, 0xc, 0x7, 0x6, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x8, 0x7, 0x3, '\x00', 'syz1\x00', {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=""/16, 0x3a, 0x10, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in6=@local, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x1, 0x0, 0x8, 0x0, 0x9, 0x1007ca, 0x4, 0x5}, {0x1, 0xfffffffffffffffc, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x1, 0x4, 0x2}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x0, 0x3, 0x42}}, 0xe8) connect$inet6(r6, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 424.303µs ago: executing program 3 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f00000000c0)={[{@minixdf}, {@test_dummy_encryption_v1}]}, 0x1, 0x242, &(0x7f0000000540)="$eJzs3T9oM2UcB/DvXRJf+75BX3URBBVERAvldRNcXheFgpQiIqhQEXFRWqG2uLVOLg46q3RyKeJmdZQiFBdFcKraoS6CFocWBx0il2u11oh/UnPifT5wyV3yPM/vOS7fJ1mOBGity0muJukkmU7SS1KcbnB7vV0+PtyY2llIBoNHvi+G7erj2km/S0nWk9yXZLss8lw3Wd16Yv+H3YfuenWld+fbW49PTfQkjx3s7z189NbcK+/N3rv66effzhW5mv5vzuv8FSNe6xbJjf9Gsf+Iotv0DPgr5l9694sq9zcluWOY/17K1BfvteVrtnu5580/6vv6d5/dMsm5AudvMOhV34HrA6B1yiT9FOVMknq/LGdm6t/wX3Yuls8vLb84/ezSyuIzTa9UwHnpJ3sPfnDh/Utn8v9Np84/8P9V5f/R+c2vqv2jTtOzASapyv/0U2t3R/6hdeQf2kv+ob3kH9pL/qG95B/aS/6hveQf2kv+ob3+Tv4/mtCcgMk4nX8AoF0GF5q+AxloStPrDwAAAAAAAAAAAAAAAAAA8HsbUzsLJ9ukan78RnLwQJLuqPqd4f8RJ9cOHy8eFlWzXxR1t7E8eduYA/xq8fAfdHqn4buvr/u62fqf3Nps/bXFZP3lJFe63bOfv8H1449/w5+833t6/BrjuP+xZuv/tNls/dnd5MNq/bkyav0pc/PwefT606+u35j1X/hxzAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmJ8DAAD//7lGcFk=") syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x2048840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40041) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x50) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r6, 0x0) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 0s ago: executing program 4 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) fsopen(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.36' (ED25519) to the list of known hosts. [ 31.607788][ T6462] cgroup: Unknown subsys name 'net' [ 31.846401][ T6462] cgroup: Unknown subsys name 'cpuset' [ 31.849873][ T6462] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.136430][ T6462] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.497657][ T6476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.503888][ T6476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.506537][ T6476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.520824][ T6478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.523925][ T6478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.526955][ T6478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.538791][ T6478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.542155][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.542919][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.562014][ T6486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.564530][ T6486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.566864][ T6486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.569578][ T6486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.572150][ T6486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.572300][ T6486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.574956][ T6044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.575046][ T6044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.581838][ T6487] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.584614][ T6476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.599716][ T6478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.607730][ T6489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.608139][ T6489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.608623][ T6489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.608982][ T6489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.617589][ T6489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.798755][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 33.906678][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.908826][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.910973][ T6474] bridge_slave_0: entered allmulticast mode [ 33.913493][ T6474] bridge_slave_0: entered promiscuous mode [ 33.923231][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.923297][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.923389][ T6474] bridge_slave_1: entered allmulticast mode [ 33.924701][ T6474] bridge_slave_1: entered promiscuous mode [ 33.974162][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 34.010572][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.042159][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 34.046054][ T6480] chnl_net:caif_netlink_parms(): no params data found [ 34.052346][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.110327][ T6474] team0: Port device team_slave_0 added [ 34.122288][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.122389][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.122478][ T6477] bridge_slave_0: entered allmulticast mode [ 34.123289][ T6477] bridge_slave_0: entered promiscuous mode [ 34.154601][ T6474] team0: Port device team_slave_1 added [ 34.161536][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.161645][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.161755][ T6477] bridge_slave_1: entered allmulticast mode [ 34.162553][ T6477] bridge_slave_1: entered promiscuous mode [ 34.163110][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 34.217802][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.219811][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.219867][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.236524][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.236626][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.236730][ T6488] bridge_slave_0: entered allmulticast mode [ 34.237472][ T6488] bridge_slave_0: entered promiscuous mode [ 34.244915][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.244973][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.245000][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.250076][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.253323][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.253367][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.253448][ T6488] bridge_slave_1: entered allmulticast mode [ 34.254297][ T6488] bridge_slave_1: entered promiscuous mode [ 34.274730][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.274776][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.274859][ T6480] bridge_slave_0: entered allmulticast mode [ 34.275591][ T6480] bridge_slave_0: entered promiscuous mode [ 34.277545][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.277619][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.277726][ T6480] bridge_slave_1: entered allmulticast mode [ 34.278503][ T6480] bridge_slave_1: entered promiscuous mode [ 34.280051][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.317830][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.332409][ T6474] hsr_slave_0: entered promiscuous mode [ 34.335206][ T6474] hsr_slave_1: entered promiscuous mode [ 34.342999][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.343342][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.343464][ T6482] bridge_slave_0: entered allmulticast mode [ 34.344525][ T6482] bridge_slave_0: entered promiscuous mode [ 34.347037][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.357030][ T6477] team0: Port device team_slave_0 added [ 34.358835][ T6477] team0: Port device team_slave_1 added [ 34.359364][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.359424][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.359512][ T6482] bridge_slave_1: entered allmulticast mode [ 34.360440][ T6482] bridge_slave_1: entered promiscuous mode [ 34.371519][ T6480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.373074][ T6480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.411547][ T6488] team0: Port device team_slave_0 added [ 34.436675][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.437585][ T6488] team0: Port device team_slave_1 added [ 34.446839][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.446890][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.446933][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.448832][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.448858][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.448883][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.451195][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.474159][ T6480] team0: Port device team_slave_0 added [ 34.475807][ T6480] team0: Port device team_slave_1 added [ 34.496518][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.496569][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.496596][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.497597][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.497621][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.497658][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.534685][ T6482] team0: Port device team_slave_0 added [ 34.544319][ T6488] hsr_slave_0: entered promiscuous mode [ 34.544863][ T6488] hsr_slave_1: entered promiscuous mode [ 34.545208][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.545285][ T6488] Cannot create hsr debugfs directory [ 34.566914][ T6482] team0: Port device team_slave_1 added [ 34.573504][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.574468][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.574496][ T6480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.575546][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.575571][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.575596][ T6480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.584622][ T6477] hsr_slave_0: entered promiscuous mode [ 34.585084][ T6477] hsr_slave_1: entered promiscuous mode [ 34.585337][ T6477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.585363][ T6477] Cannot create hsr debugfs directory [ 34.661570][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.661629][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.661678][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.688329][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.688387][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.688560][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.694526][ T6480] hsr_slave_0: entered promiscuous mode [ 34.695528][ T6480] hsr_slave_1: entered promiscuous mode [ 34.695849][ T6480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.695876][ T6480] Cannot create hsr debugfs directory [ 34.778337][ T6482] hsr_slave_0: entered promiscuous mode [ 34.780959][ T6482] hsr_slave_1: entered promiscuous mode [ 34.782810][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.785182][ T6482] Cannot create hsr debugfs directory [ 34.841868][ T6474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.867358][ T6474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.871244][ T6474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.877248][ T6474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.954191][ T6477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.968744][ T6477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.987693][ T6477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.991130][ T6477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.016611][ T6488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.020120][ T6488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.028371][ T6488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.048838][ T6488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.068599][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.097750][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.101439][ T6482] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.105279][ T6482] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.109458][ T6482] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.113653][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.113823][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.118590][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.118660][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.145369][ T6482] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.170862][ T6474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.185908][ T6480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.197632][ T6480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.201065][ T6480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.212997][ T6480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.243182][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.281096][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.296062][ T6480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.315515][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.321083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.321161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.322433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.322495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.338201][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.346533][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.362575][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.367140][ T6480] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.372453][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.389402][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.389482][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.390831][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.390869][ T507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.408228][ T6474] veth0_vlan: entered promiscuous mode [ 35.413417][ T6474] veth1_vlan: entered promiscuous mode [ 35.428836][ T6477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.435591][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.435686][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.436406][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.436709][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.437426][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.437462][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.438833][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.438870][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.456716][ T6482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.456793][ T6482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.470430][ T6474] veth0_macvtap: entered promiscuous mode [ 35.472115][ T6474] veth1_macvtap: entered promiscuous mode [ 35.533016][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.538433][ T6489] Bluetooth: hci0: command tx timeout [ 35.551061][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.563086][ T6480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.569679][ T6474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.572582][ T6474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.575433][ T6474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.577981][ T6474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.613952][ T6489] Bluetooth: hci4: command tx timeout [ 35.614138][ T6489] Bluetooth: hci1: command tx timeout [ 35.644144][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.685432][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.693891][ T55] Bluetooth: hci3: command tx timeout [ 35.694111][ T55] Bluetooth: hci2: command tx timeout [ 35.697291][ T6482] veth0_vlan: entered promiscuous mode [ 35.700413][ T6482] veth1_vlan: entered promiscuous mode [ 35.713169][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.713261][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.723318][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.766002][ T507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.766068][ T507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.776064][ T6482] veth0_macvtap: entered promiscuous mode [ 35.777573][ T6482] veth1_macvtap: entered promiscuous mode [ 35.781836][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.782473][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.783354][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.796227][ T6480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.812727][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.815723][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.819326][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.846910][ T6482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.846990][ T6482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.847042][ T6482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.847076][ T6482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.862588][ T6480] veth0_vlan: entered promiscuous mode [ 35.888602][ T6488] veth0_vlan: entered promiscuous mode [ 35.905432][ T6474] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.910478][ T6488] veth1_vlan: entered promiscuous mode [ 35.920196][ T6480] veth1_vlan: entered promiscuous mode [ 35.951041][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.951111][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.991511][ T6488] veth0_macvtap: entered promiscuous mode [ 35.997753][ T6480] veth0_macvtap: entered promiscuous mode [ 36.003183][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.006137][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.008489][ T6488] veth1_macvtap: entered promiscuous mode [ 36.009960][ T6480] veth1_macvtap: entered promiscuous mode [ 36.610386][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.610448][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.610487][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.610511][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.611114][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.620387][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.620421][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.620440][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.620458][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.620476][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.620494][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.621050][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.622227][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.622255][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.622276][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.622293][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.622780][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.624650][ T6488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.624695][ T6488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.624722][ T6488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.624749][ T6488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.626979][ T6477] veth0_vlan: entered promiscuous mode [ 36.629494][ T6477] veth1_vlan: entered promiscuous mode [ 36.637398][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.637430][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.637448][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.637465][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.637483][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.637501][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.638357][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.648673][ T6480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.648725][ T6480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.648754][ T6480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.648781][ T6480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.685310][ T6477] veth0_macvtap: entered promiscuous mode [ 36.721063][ T6477] veth1_macvtap: entered promiscuous mode [ 36.762174][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.765378][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.768236][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.771166][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.828060][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.831117][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.834156][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.838383][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.843179][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.910675][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.910730][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.921074][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.921929][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.921953][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.921972][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.921991][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.922009][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.922028][ T6477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.922045][ T6477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.922597][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.925930][ T6477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.925973][ T6477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.926001][ T6477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.926028][ T6477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.513056][ T507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.519921][ T507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.528165][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.528220][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.562268][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.562333][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.571763][ T507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.571837][ T507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.623901][ T6489] Bluetooth: hci0: command tx timeout [ 37.629477][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.629542][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.694323][ T6489] Bluetooth: hci1: command tx timeout [ 37.694395][ T6489] Bluetooth: hci4: command tx timeout [ 37.774046][ T6489] Bluetooth: hci3: command tx timeout [ 37.774149][ T55] Bluetooth: hci2: command tx timeout [ 37.846755][ T6578] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8'. [ 37.891253][ T6580] batman_adv: batadv0: Adding interface: geneve2 [ 37.891321][ T6580] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 37.929958][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.589084][ T6600] loop4: detected capacity change from 0 to 256 [ 39.606125][ T6600] ======================================================= [ 39.606125][ T6600] WARNING: The mand mount option has been deprecated and [ 39.606125][ T6600] and is ignored by this kernel. Remove the mand [ 39.606125][ T6600] option from the mount to silence this warning. [ 39.606125][ T6600] ======================================================= [ 39.606244][ T6600] exfat: Bad value for 'uid' [ 39.606271][ T6600] exfat: Bad value for 'uid' [ 39.695648][ T55] Bluetooth: hci0: command tx timeout [ 39.699694][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 39.759100][ T6604] loop3: detected capacity change from 0 to 512 [ 39.774601][ T55] Bluetooth: hci4: command tx timeout [ 39.774716][ T55] Bluetooth: hci1: command tx timeout [ 39.807193][ T6604] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.847899][ T6604] EXT4-fs (loop3): invalid journal inode [ 39.848008][ T6604] EXT4-fs (loop3): can't get journal size [ 39.853915][ T6489] Bluetooth: hci2: command tx timeout [ 39.853986][ T6489] Bluetooth: hci3: command tx timeout [ 39.875202][ T6604] EXT4-fs (loop3): 1 truncate cleaned up [ 39.876146][ T6604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.844725][ T6480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.777455][ T55] Bluetooth: hci0: command tx timeout [ 41.797098][ T6628] loop3: detected capacity change from 0 to 256 [ 41.857160][ T55] Bluetooth: hci1: command tx timeout [ 41.857244][ T55] Bluetooth: hci4: command tx timeout [ 41.897797][ T6630] capability: warning: `syz.4.21' uses deprecated v2 capabilities in a way that may be insecure [ 41.935795][ T6489] Bluetooth: hci3: command tx timeout [ 41.935876][ T6489] Bluetooth: hci2: command tx timeout [ 42.953896][ T6646] loop2: detected capacity change from 0 to 4096 [ 42.961231][ T6646] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 43.570479][ T6646] ntfs3(loop2): ino=19, mi_enum_attr [ 43.724834][ T6646] ntfs3(loop2): failed to convert "c46c" to cp855 [ 43.731930][ T6646] ntfs3(loop2): ino=20, mi_enum_attr [ 44.132807][ T6656] loop0: detected capacity change from 0 to 2048 [ 44.181078][ T6656] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 44.287682][ T6656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.477357][ T6652] loop3: detected capacity change from 0 to 32768 [ 44.479461][ T6652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.31 (6652) [ 44.528551][ T6652] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.528709][ T6652] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 44.528776][ T6652] BTRFS info (device loop3): using free-space-tree [ 44.547935][ T6665] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 44.621155][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 45.366771][ T6694] loop0: detected capacity change from 0 to 8 [ 45.381592][ T6694] SQUASHFS error: lzo decompression failed, data probably corrupt [ 45.392142][ T6694] SQUASHFS error: Failed to read block 0x91: -5 [ 45.392206][ T6694] SQUASHFS error: Unable to read metadata cache entry [8f] [ 45.392233][ T6694] SQUASHFS error: Unable to read inode 0x11f [ 46.342037][ T572] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 46.871488][ T6480] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.340068][ T6710] loop1: detected capacity change from 0 to 256 [ 47.361557][ T6710] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.162968][ T6722] Zero length message leads to an empty skb [ 51.254010][ T6767] loop1: detected capacity change from 0 to 2048 [ 51.259985][ T6767] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 51.260033][ T6767] UDF-fs: Scanning with blocksize 512 failed [ 51.269548][ T6767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.412750][ T6526] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 52.412856][ T6526] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 52.431434][ T6526] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.537991][ T6801] process 'syz.0.71' launched './file1' with NULL argv: empty string added [ 54.643155][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.643480][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.276224][ T6828] loop0: detected capacity change from 0 to 512 [ 56.293207][ T6828] EXT4-fs (loop0): bad block size 8192 [ 57.447693][ T31] audit: type=1326 audit(57.180:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a168 code=0x7fc00000 [ 57.447782][ T31] audit: type=1326 audit(57.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbb15a168 code=0x7fc00000 [ 57.549114][ T31] audit: type=1326 audit(57.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a168 code=0x7fc00000 [ 60.730585][ T6881] loop3: detected capacity change from 0 to 16 [ 61.583574][ T6881] erofs (device loop3): mounted with root inode @ nid 36. [ 61.971104][ T6881] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 61.971422][ T6881] syz.3.95: attempt to access beyond end of device [ 61.971422][ T6881] loop3: rw=0, sector=296, nr_sectors = 8 limit=16 [ 61.972668][ T6881] erofs (device loop3): read error -5 @ 0 of nid 36 [ 61.972709][ T6881] erofs (device loop3): failed to readdir of logical block 0 of nid 36 [ 61.976669][ T6881] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 61.976751][ T6881] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 61.986233][ T6881] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 61.986347][ T6881] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 61.986494][ T6881] syz.3.95: attempt to access beyond end of device [ 61.986494][ T6881] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 61.986696][ T6881] syz.3.95: attempt to access beyond end of device [ 61.986696][ T6881] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 61.986792][ T6881] syz.3.95: attempt to access beyond end of device [ 61.986792][ T6881] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 61.987250][ T6881] syz.3.95: attempt to access beyond end of device [ 61.987250][ T6881] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 61.987346][ T6881] syz.3.95: attempt to access beyond end of device [ 61.987346][ T6881] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 61.987417][ T6881] syz.3.95: attempt to access beyond end of device [ 61.987417][ T6881] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 61.987507][ T6881] syz.3.95: attempt to access beyond end of device [ 61.987507][ T6881] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 62.605864][ T6894] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.606028][ T6894] Cannot find add_set index 0 as target [ 62.689082][ T6900] loop3: detected capacity change from 0 to 16 [ 62.696678][ T6900] erofs (device loop3): mounted with root inode @ nid 36. [ 62.847158][ T6898] loop2: detected capacity change from 0 to 512 [ 62.849563][ T6898] ext4: Unknown parameter 'fscontext' [ 62.967248][ T6905] erofs (device loop3): readahead error at folio 86 @ nid 36 [ 62.967664][ T6905] erofs (device loop3): readahead error at folio 84 @ nid 36 [ 62.968687][ T6905] erofs (device loop3): readahead error at folio 80 @ nid 36 [ 62.969365][ T6905] erofs (device loop3): readahead error at folio 74 @ nid 36 [ 62.969599][ T6905] erofs (device loop3): readahead error at folio 72 @ nid 36 [ 62.969973][ T6905] erofs (device loop3): readahead error at folio 70 @ nid 36 [ 62.970528][ T6905] erofs (device loop3): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 62.970619][ T6905] erofs (device loop3): readahead error at folio 63 @ nid 36 [ 62.970722][ T6905] erofs (device loop3): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 62.970812][ T6905] erofs (device loop3): readahead error at folio 62 @ nid 36 [ 62.971331][ T6905] erofs (device loop3): readahead error at folio 58 @ nid 36 [ 62.971428][ T6905] erofs (device loop3): readahead error at folio 57 @ nid 36 [ 62.971744][ T6905] erofs (device loop3): readahead error at folio 54 @ nid 36 [ 62.971837][ T6905] erofs (device loop3): readahead error at folio 53 @ nid 36 [ 62.971926][ T6905] erofs (device loop3): readahead error at folio 52 @ nid 36 [ 62.972015][ T6905] erofs (device loop3): readahead error at folio 51 @ nid 36 [ 62.972104][ T6905] erofs (device loop3): bogus lookback distance 363 @ lcn 50 of nid 36 [ 62.972192][ T6905] erofs (device loop3): readahead error at folio 50 @ nid 36 [ 62.972437][ T6905] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 62.972526][ T6905] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 62.973272][ T6905] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 62.973376][ T6905] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 62.973663][ T6905] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 62.973997][ T6905] erofs (device loop3): readahead error at folio 34 @ nid 36 [ 62.974374][ T6905] erofs (device loop3): readahead error at folio 32 @ nid 36 [ 62.974762][ T6905] erofs (device loop3): readahead error at folio 30 @ nid 36 [ 62.975124][ T6905] erofs (device loop3): readahead error at folio 27 @ nid 36 [ 62.975219][ T6905] erofs (device loop3): readahead error at folio 26 @ nid 36 [ 62.975307][ T6905] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 62.975543][ T6905] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 62.975691][ T6905] erofs (device loop3): readahead error at folio 23 @ nid 36 [ 62.975779][ T6905] erofs (device loop3): readahead error at folio 22 @ nid 36 [ 62.976007][ T6905] erofs (device loop3): readahead error at folio 21 @ nid 36 [ 62.976094][ T6905] erofs (device loop3): readahead error at folio 20 @ nid 36 [ 62.976330][ T6905] erofs (device loop3): readahead error at folio 18 @ nid 36 [ 62.977082][ T6905] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 62.977317][ T6905] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 62.977947][ T6905] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 62.978191][ T6905] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 62.978753][ T6905] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 62.978847][ T6905] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 62.979321][ T6905] syz.3.103: attempt to access beyond end of device [ 62.979321][ T6905] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 62.979759][ T6905] syz.3.103: attempt to access beyond end of device [ 62.979759][ T6905] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 64.728071][ T6917] loop3: detected capacity change from 0 to 2048 [ 64.880508][ T2384] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.880618][ T2384] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.126308][ T6918] loop1: detected capacity change from 0 to 131072 [ 65.680024][ T6917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.712234][ T6918] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 67.005499][ T6944] loop2: detected capacity change from 0 to 16 [ 67.298565][ T6944] erofs (device loop2): mounted with root inode @ nid 36. [ 67.692394][ T6961] loop3: detected capacity change from 0 to 8192 [ 67.700098][ T6961] nilfs2: Unknown parameter '' [ 68.341186][ T6965] netfs: Couldn't get user pages (rc=-14) [ 68.342921][ T6961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.678607][ T6984] fuse: Unknown parameter '00000000000000000000' [ 69.770077][ T6989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.856109][ T6992] loop1: detected capacity change from 0 to 128 [ 69.991179][ T6999] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 69.995842][ T1796] cfg80211: failed to load regulatory.db [ 69.997430][ T6992] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.098722][ T7001] loop3: detected capacity change from 0 to 128 [ 70.222133][ T7001] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 71.520847][ T7008] loop0: detected capacity change from 0 to 2048 [ 71.562152][ T7008] udf: Bad value for 'rootdir' [ 71.598774][ T6488] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.141057][ T7018] loop1: detected capacity change from 0 to 256 [ 72.566981][ T7022] loop4: detected capacity change from 0 to 1024 [ 72.771701][ T7015] loop3: detected capacity change from 0 to 32768 [ 72.783516][ T7015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.135 (7015) [ 72.794697][ T7015] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.794785][ T7015] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 72.794833][ T7015] BTRFS info (device loop3): using free-space-tree [ 73.063852][ T7024] loop1: detected capacity change from 0 to 32768 [ 73.074051][ T7024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.138 (7024) [ 73.083955][ T7024] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 73.084048][ T7024] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 73.084097][ T7024] BTRFS info (device loop1): using free-space-tree [ 73.172808][ T7024] BTRFS info (device loop1): rebuilding free space tree [ 73.259462][ T7030] SET target dimension over the limit! [ 73.346498][ T6480] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.355633][ T4414] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 74.560624][ T7064] BTRFS info (device loop1 state M): max_inline set to 0 [ 76.588176][ T6488] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.605103][ T7096] loop3: detected capacity change from 0 to 64 [ 76.635584][ T7096] MINIX-fs: bad superblock [ 78.839553][ T7129] loop0: detected capacity change from 0 to 4096 [ 78.868948][ T7129] ntfs3(loop0): ino=4, mi_enum_attr [ 78.869180][ T7129] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 78.892767][ T7129] ntfs3(loop0): Failed to load $AttrDef (-22) [ 79.045398][ T7123] loop1: detected capacity change from 0 to 32768 [ 79.156454][ T7129] loop0: detected capacity change from 0 to 40427 [ 79.157446][ T7129] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.157479][ T7129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.168375][ T7129] F2FS-fs (loop0): invalid crc value [ 79.186621][ T7123] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.189954][ T7129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.189991][ T7129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.296351][ T7123] XFS (loop1): Ending clean mount [ 79.303133][ T7123] XFS (loop1): Quotacheck needed: Please wait. [ 79.332292][ T7123] XFS (loop1): Quotacheck: Done. [ 79.388361][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 79.388479][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.162'. [ 79.388630][ T7150] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.406132][ T7131] loop4: detected capacity change from 0 to 32768 [ 79.419258][ T6488] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.430766][ T7131] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.497977][ T7131] XFS (loop4): Ending clean mount [ 79.548635][ T7131] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.636454][ T7168] xt_hashlimit: size too large, truncated to 1048576 [ 79.687677][ T7171] loop4: detected capacity change from 0 to 128 [ 79.693086][ T7171] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 79.719655][ T7171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.736990][ T7171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.165'. [ 79.963694][ T7179] loop0: detected capacity change from 0 to 8 [ 79.964390][ T7179] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 80.089909][ T819] Bluetooth: hci6: Frame reassembly failed (-84) [ 80.237822][ T7179] cramfs: Error -3 while decompressing! [ 80.240543][ T7179] cramfs: 000000000c5da380(26)->000000003f081536(4096) [ 80.242625][ T7179] cramfs: Error -5 while decompressing! [ 80.244635][ T7179] cramfs: 00000000fe574de0(26)->00000000b98dfc7d(4096) [ 80.246857][ T7179] cramfs: Error -3 while decompressing! [ 80.248488][ T7179] cramfs: 00000000469ecd0b(16)->0000000040d73e68(4096) [ 80.250484][ T7179] cramfs: Error -3 while decompressing! [ 80.252138][ T7179] cramfs: 000000000c5da380(26)->000000003f081536(4096) [ 80.336328][ T12] Bluetooth: Error in BCSP hdr checksum [ 80.594016][ T650] Bluetooth: Error in BCSP hdr checksum [ 80.867974][ T12] Bluetooth: Error in BCSP hdr checksum [ 81.511565][ T507] Bluetooth: Error in BCSP hdr checksum [ 82.184391][ T7207] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 82.220372][ T7207] team0: Device hsr_slave_0 failed to register rx_handler [ 82.639253][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 82.641336][ T55] Bluetooth: hci6: command 0xfc11 tx timeout [ 82.663817][ T7208] warning: `syz.0.176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.683831][ T6489] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 86.391211][ T7238] loop2: detected capacity change from 0 to 128 [ 86.454909][ T7235] loop1: detected capacity change from 0 to 2048 [ 87.637481][ T7239] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.661745][ T7242] loop4: detected capacity change from 0 to 2048 [ 87.666542][ T7242] EXT4-fs: Ignoring removed orlov option [ 87.668551][ T7242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.678866][ T572] bio_check_eod: 20 callbacks suppressed [ 87.683121][ T572] kworker/u8:7: attempt to access beyond end of device [ 87.683121][ T572] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 87.703426][ T7242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.971003][ T7239] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 87.971126][ T7239] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 87.978584][ T7239] Remounting filesystem read-only [ 87.982303][ T7235] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 88.567591][ T7260] loop0: detected capacity change from 0 to 2048 [ 88.629340][ T7260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.755409][ T7246] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 89.212126][ T7256] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 91.086174][ T7288] netlink: 'syz.2.200': attribute type 39 has an invalid length. [ 91.191526][ T7291] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET) [ 91.291817][ T7297] loop3: detected capacity change from 0 to 16 [ 91.308632][ T7297] erofs (device loop3): mounted with root inode @ nid 36. [ 91.358987][ T7297] erofs (device loop3): read error -117 @ 72 of nid 36 [ 91.829115][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 92.722678][ T7321] delete_channel: no stack [ 93.543657][ T7309] loop0: detected capacity change from 0 to 32768 [ 93.549356][ T7309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.206 (7309) [ 93.732786][ T7309] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.732861][ T7309] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 93.732893][ T7309] BTRFS info (device loop0): using free-space-tree [ 93.811855][ T7339] loop3: detected capacity change from 0 to 2048 [ 93.836769][ T7339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.907511][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 95.056737][ T7358] loop2: detected capacity change from 0 to 4096 [ 95.151251][ T6474] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.059281][ T6480] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 130235 different from extent length 130560. Filesystem need not be standards compliant. [ 97.982257][ T9] IPVS: starting estimator thread 0... [ 98.105599][ T7395] IPVS: using max 39 ests per chain, 93600 per kthread [ 100.592884][ T7427] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 100.880631][ T7427] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 100.880716][ T7427] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 100.882597][ T7427] bond1: (slave vcan0): making interface the new active one [ 100.890282][ T7427] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 103.503263][ T7425] loop0: detected capacity change from 0 to 32768 [ 103.512515][ T7425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.234 (7425) [ 104.200767][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 104.388410][ T7466] loop2: detected capacity change from 0 to 8 [ 105.077758][ T7425] BTRFS error (device loop0): open_ctree failed: -4 [ 106.719971][ T7484] loop0: detected capacity change from 0 to 8 [ 106.720429][ T7484] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 107.410551][ T7484] cramfs: Error -5 while decompressing! [ 107.410678][ T7484] cramfs: 00000000eeb89f32(26)->000000005ac29d49(4096) [ 107.410930][ T7484] cramfs: Error -3 while decompressing! [ 107.410975][ T7484] cramfs: 000000003fce983d(26)->0000000021361e96(4096) [ 107.411048][ T7484] cramfs: Error -3 while decompressing! [ 107.411135][ T7484] cramfs: 00000000398017c5(16)->00000000a02e1177(4096) [ 107.411603][ T7484] cramfs: Error -5 while decompressing! [ 107.411695][ T7484] cramfs: 00000000eeb89f32(26)->000000005ac29d49(4096) [ 107.844403][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.844616][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.868766][ T7488] loop3: detected capacity change from 0 to 164 [ 107.926154][ T7495] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 108.533191][ T7502] loop2: detected capacity change from 0 to 1024 [ 109.228676][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.259'. [ 109.231466][ T7510] netlink: 'syz.4.259': attribute type 7 has an invalid length. [ 109.234221][ T7510] netlink: 'syz.4.259': attribute type 8 has an invalid length. [ 109.236468][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 109.254661][ T7510] team0: entered promiscuous mode [ 109.254736][ T7510] team_slave_0: entered promiscuous mode [ 109.254950][ T7510] team_slave_1: entered promiscuous mode [ 109.258997][ T7510] bond0: entered promiscuous mode [ 109.259030][ T7510] bond_slave_0: entered promiscuous mode [ 109.259112][ T7510] bond_slave_1: entered promiscuous mode [ 109.262086][ T7510] gretap0: entered promiscuous mode [ 109.270397][ T7510] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 109.370715][ T7516] 9pnet_fd: Insufficient options for proto=fd [ 109.441248][ T7516] loop0: detected capacity change from 0 to 4096 [ 110.043652][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.050018][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.050968][ T7516] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 110.202049][ T7529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.202242][ T7529] IPv6: NLM_F_CREATE should be set when creating new route [ 110.211629][ T7529] lo: entered allmulticast mode [ 110.213355][ T7529] tunl0: entered allmulticast mode [ 110.228346][ T7529] gre0: entered allmulticast mode [ 110.238893][ T7529] gretap0: entered allmulticast mode [ 110.255165][ T7529] erspan0: entered allmulticast mode [ 110.265500][ T7529] ip_vti0: entered allmulticast mode [ 110.273484][ T7529] ip6_vti0: entered allmulticast mode [ 110.277288][ T7529] sit0: entered allmulticast mode [ 110.280591][ T7529] ip6tnl0: entered allmulticast mode [ 110.283477][ T7529] ip6gre0: entered allmulticast mode [ 110.288448][ T7529] syz_tun: entered allmulticast mode [ 110.291634][ T7529] ip6gretap0: entered allmulticast mode [ 110.295848][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.296501][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.303977][ T7529] bridge0: entered allmulticast mode [ 110.306951][ T7529] vcan0: entered allmulticast mode [ 110.310521][ T7529] bond0: entered allmulticast mode [ 110.312090][ T7529] bond_slave_0: entered allmulticast mode [ 110.313985][ T7529] bond_slave_1: entered allmulticast mode [ 110.318746][ T7529] team0: entered allmulticast mode [ 110.320372][ T7529] team_slave_0: entered allmulticast mode [ 110.323424][ T7529] team_slave_1: entered allmulticast mode [ 110.328418][ T7529] dummy0: entered allmulticast mode [ 110.338763][ T7529] nlmon0: entered allmulticast mode [ 110.339802][ T7529] caif0: entered allmulticast mode [ 110.340144][ T7529] batadv0: entered allmulticast mode [ 110.341509][ T7529] vxcan0: entered allmulticast mode [ 110.351449][ T7529] vxcan1: entered allmulticast mode [ 110.353606][ T7529] veth0: entered allmulticast mode [ 110.356842][ T7529] veth1: entered allmulticast mode [ 110.434589][ T7529] wg0: entered allmulticast mode [ 110.474290][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.523936][ T7529] wg1: entered allmulticast mode [ 110.614011][ T7529] wg2: entered allmulticast mode [ 110.619281][ T7529] veth0_to_bridge: entered allmulticast mode [ 110.633984][ T9] usb 1-1: device descriptor read/64, error -71 [ 110.644057][ T7529] veth1_to_bridge: entered allmulticast mode [ 110.652382][ T7529] veth0_to_bond: entered allmulticast mode [ 110.656805][ T7529] veth1_to_bond: entered allmulticast mode [ 110.661529][ T7529] veth0_to_team: entered allmulticast mode [ 110.673671][ T7529] veth1_to_team: entered allmulticast mode [ 110.680626][ T7529] veth0_to_batadv: entered allmulticast mode [ 110.685464][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.685813][ T7529] batadv_slave_0: entered allmulticast mode [ 110.689917][ T7529] veth1_to_batadv: entered allmulticast mode [ 110.692459][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.694509][ T7529] batadv_slave_1: entered allmulticast mode [ 110.698161][ T7529] xfrm0: entered allmulticast mode [ 110.702059][ T7529] veth0_to_hsr: entered allmulticast mode [ 110.703507][ T7529] hsr_slave_0: entered allmulticast mode [ 110.709429][ T7529] veth1_to_hsr: entered allmulticast mode [ 110.711286][ T7529] hsr_slave_1: entered allmulticast mode [ 110.715923][ T7529] hsr0: entered allmulticast mode [ 110.719709][ T7529] veth1_virt_wifi: entered allmulticast mode [ 110.728671][ T7529] veth0_virt_wifi: entered allmulticast mode [ 110.734262][ T7529] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 110.739562][ T7529] veth1_vlan: entered allmulticast mode [ 110.748411][ T7529] veth0_vlan: entered allmulticast mode [ 110.757063][ T7529] vlan0: entered allmulticast mode [ 110.758884][ T7529] vlan1: entered allmulticast mode [ 110.794055][ T7529] macvlan0: entered allmulticast mode [ 110.847586][ T7529] macvlan1: entered allmulticast mode [ 110.848777][ T7529] ipvlan0: entered allmulticast mode [ 110.848899][ T7529] ipvlan1: entered allmulticast mode [ 110.849407][ T7529] veth1_macvtap: entered allmulticast mode [ 110.850810][ T7529] veth0_macvtap: entered allmulticast mode [ 110.873795][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.903915][ T7529] macvtap0: entered allmulticast mode [ 110.913846][ T7529] macsec0: entered allmulticast mode [ 110.963947][ T7529] geneve0: entered allmulticast mode [ 110.973884][ T7529] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.976597][ T7529] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.976656][ T7529] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.976685][ T7529] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.003909][ T9] usb 1-1: device descriptor read/64, error -71 [ 111.023986][ T7529] geneve1: entered allmulticast mode [ 111.030429][ T7529] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 111.039768][ T7529] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 111.042868][ T7529] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 111.051333][ T7529] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 111.113998][ T9] usb usb1-port1: attempt power cycle [ 111.139322][ T7529] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 111.179443][ T7529] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 111.183065][ T7529] hsr1: entered allmulticast mode [ 111.195405][ T7530] bridge_slave_0: left allmulticast mode [ 111.195479][ T7530] bridge_slave_0: left promiscuous mode [ 111.196181][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.213949][ T7530] bridge_slave_1: left allmulticast mode [ 111.214018][ T7530] bridge_slave_1: left promiscuous mode [ 111.214098][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.222087][ T7530] bond0: (slave bond_slave_0): Releasing backup interface [ 111.273094][ T7530] bond0: (slave bond_slave_1): Releasing backup interface [ 111.347261][ T7530] team0: Port device team_slave_0 removed [ 111.351991][ T7530] team0: Port device team_slave_1 removed [ 111.357318][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.359717][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.363089][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.366766][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.412439][ T7555] vlan2: entered allmulticast mode [ 111.412513][ T7555] bond0: entered allmulticast mode [ 111.412533][ T7555] bond_slave_0: entered allmulticast mode [ 111.412554][ T7555] bond_slave_1: entered allmulticast mode [ 111.421040][ T7555] bridge0: port 3(vlan2) entered blocking state [ 111.423007][ T7555] bridge0: port 3(vlan2) entered disabled state [ 111.426575][ T7555] vlan2: entered promiscuous mode [ 111.428302][ T7555] bond0: entered promiscuous mode [ 111.430114][ T7555] bond_slave_0: entered promiscuous mode [ 111.432433][ T7555] bond_slave_1: entered promiscuous mode [ 111.436203][ T7555] bridge0: port 3(vlan2) entered blocking state [ 111.436300][ T7555] bridge0: port 3(vlan2) entered forwarding state [ 111.456976][ T7557] bridge_slave_0: left allmulticast mode [ 111.457046][ T7557] bridge_slave_0: left promiscuous mode [ 111.458084][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.463828][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.467523][ T7557] bridge_slave_1: left allmulticast mode [ 111.467591][ T7557] bridge_slave_1: left promiscuous mode [ 111.467682][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.473636][ T7557] vlan2: left promiscuous mode [ 111.475589][ T7557] bond0: left promiscuous mode [ 111.479240][ T7557] bond0: (slave bond_slave_0): Releasing backup interface [ 111.485203][ T9] usb 1-1: device descriptor read/8, error -71 [ 111.515313][ T7557] bond_slave_0: left allmulticast mode [ 111.517444][ T7557] bond_slave_0: left promiscuous mode [ 111.522243][ T7557] bond0: (slave bond_slave_1): Releasing backup interface [ 111.560096][ T7557] bond_slave_1: left allmulticast mode [ 111.560180][ T7557] bond_slave_1: left promiscuous mode [ 111.574992][ T7557] team0: Port device team_slave_0 removed [ 111.580652][ T7557] team0: Port device team_slave_1 removed [ 111.665700][ T7575] loop2: detected capacity change from 0 to 256 [ 112.522918][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.523021][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.556907][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.577357][ T9] usb 1-1: device descriptor read/8, error -71 [ 112.598410][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.598502][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.676413][ T7557] batman_adv: batadv0: Removing interface: geneve2 [ 112.679657][ T7557] bridge0: port 3(vlan2) entered disabled state [ 112.706338][ T9] usb usb1-port1: unable to enumerate USB device [ 112.959076][ T7575] FAT-fs (loop2): Directory bread(block 64) failed [ 112.959502][ T7575] FAT-fs (loop2): Directory bread(block 65) failed [ 112.959858][ T7575] FAT-fs (loop2): Directory bread(block 66) failed [ 112.960058][ T7575] FAT-fs (loop2): Directory bread(block 67) failed [ 112.960259][ T7575] FAT-fs (loop2): Directory bread(block 68) failed [ 112.960462][ T7575] FAT-fs (loop2): Directory bread(block 69) failed [ 112.960774][ T7575] FAT-fs (loop2): Directory bread(block 70) failed [ 112.960995][ T7575] FAT-fs (loop2): Directory bread(block 71) failed [ 112.961304][ T7575] FAT-fs (loop2): Directory bread(block 72) failed [ 112.961473][ T7575] FAT-fs (loop2): Directory bread(block 73) failed [ 113.832491][ T7583] loop3: detected capacity change from 0 to 256 [ 114.433623][ T7583] FAT-fs (loop3): Directory bread(block 64) failed [ 114.436482][ T7583] FAT-fs (loop3): Directory bread(block 65) failed [ 114.436577][ T7583] FAT-fs (loop3): Directory bread(block 66) failed [ 114.436619][ T7583] FAT-fs (loop3): Directory bread(block 67) failed [ 114.436694][ T7583] FAT-fs (loop3): Directory bread(block 68) failed [ 114.436735][ T7583] FAT-fs (loop3): Directory bread(block 69) failed [ 114.436811][ T7583] FAT-fs (loop3): Directory bread(block 70) failed [ 114.436851][ T7583] FAT-fs (loop3): Directory bread(block 71) failed [ 114.436910][ T7583] FAT-fs (loop3): Directory bread(block 72) failed [ 114.436950][ T7583] FAT-fs (loop3): Directory bread(block 73) failed [ 117.214942][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.276528][ T7610] loop3: detected capacity change from 0 to 8 [ 117.280293][ T7610] Filesystem uses "unknown" compression. This is not supported [ 117.393678][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 117.547721][ T7626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.575433][ T7670] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 121.611063][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 121.707022][ T7674] loop3: detected capacity change from 0 to 4096 [ 121.761061][ T7674] NILFS (loop3): invalid segment: Checksum error in segment payload [ 121.764606][ T7674] NILFS (loop3): trying rollback from an earlier position [ 121.795711][ T7674] NILFS (loop3): recovery complete [ 121.805332][ T7684] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.819653][ T7683] loop0: detected capacity change from 0 to 512 [ 121.822174][ T7683] ext4: Unknown parameter 'subj_type' [ 124.943999][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 126.630333][ T2384] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.630412][ T2384] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.596639][ T7727] loop2: detected capacity change from 0 to 764 [ 127.598195][ T7727] iso9660: Unknown parameter 'sysfs' [ 128.880215][ T7752] loop0: detected capacity change from 0 to 512 [ 128.955749][ T7752] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.330: casefold flag without casefold feature [ 128.956875][ T7752] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.330: couldn't read orphan inode 15 (err -117) [ 128.957859][ T7752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.052989][ T7763] loop2: detected capacity change from 0 to 512 [ 129.145970][ T7763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.190454][ T7771] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 130.190454][ T7771] The task syz.0.330 (7771) triggered the difference, watch for misbehavior. [ 130.384461][ T7772] EXT4-fs (loop2): shut down requested (0) [ 130.700671][ T6474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.734349][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 131.072399][ T7788] loop3: detected capacity change from 0 to 2048 [ 131.782991][ T6482] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.331702][ T4503] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 132.337796][ T4503] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 137.531640][ T7849] loop2: detected capacity change from 0 to 1024 [ 137.644792][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 137.674761][ T7849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.738907][ T7863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.748420][ T7863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.781418][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 137.855004][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 139.138900][ T6482] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.246668][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.0.369'. [ 141.509000][ T7910] batman_adv: batadv0: Adding interface: dummy0 [ 141.509068][ T7910] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.509855][ T7910] batman_adv: batadv0: Interface activated: dummy0 [ 141.591278][ T7910] batadv0: mtu less than device minimum [ 141.593163][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.595131][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.596938][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.598722][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.600487][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.602252][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.604055][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.605821][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.607580][ T7910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.672537][ T7896] loop0: detected capacity change from 0 to 32768 [ 141.677774][ T7896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.374 (7896) [ 142.637113][ T7896] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.640004][ T7896] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 142.642542][ T7896] BTRFS info (device loop0): using free-space-tree [ 143.128454][ T7922] batman_adv: batadv0: Interface deactivated: dummy0 [ 143.130664][ T7922] batman_adv: batadv0: Removing interface: dummy0 [ 145.013041][ T6474] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.003386][ T31] audit: type=1107 audit(146.730:5): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 147.009359][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.009587][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.062034][ T7971] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.062187][ T7971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.062242][ T7971] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.062276][ T7971] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.077351][ T7971] vxlan0: entered allmulticast mode [ 147.077947][ T7971] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 147.208169][ T7978] loop3: detected capacity change from 0 to 512 [ 147.210512][ T7978] EXT4-fs: Ignoring removed nobh option [ 147.220237][ T7978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.251753][ T7978] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #3: comm syz.3.392: corrupted inode contents [ 147.276766][ T7978] EXT4-fs (loop3): Remounting filesystem read-only [ 147.325476][ T7978] Quota error (device loop3): write_blk: dquota write failed [ 147.325688][ T7978] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 147.325855][ T7978] EXT4-fs (loop3): 1 truncate cleaned up [ 147.327238][ T7978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.342199][ T7978] bond0: entered promiscuous mode [ 147.342249][ T7978] vxlan0: entered promiscuous mode [ 148.018769][ T6480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.569400][ T8004] syzkaller0: entered allmulticast mode [ 148.695509][ T8004] syzkaller0: entered promiscuous mode [ 149.333979][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.418485][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0051, bcdDevice= 0.00 [ 150.421045][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.434330][ T10] usb 1-1: config 0 descriptor?? [ 150.468796][ T8020] net_ratelimit: 10 callbacks suppressed [ 150.470494][ T8020] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 150.561520][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.597094][ T8022] bond0: (slave rose0): Enslaving as an active interface with an up link [ 150.915001][ T10] hid-generic 0003:28BD:0051.0002: hidraw0: USB HID v1.01 Device [HID 28bd:0051] on usb-dummy_hcd.0-1/input0 [ 151.520236][ T8000] loop0: detected capacity change from 0 to 8 [ 151.528253][ T8000] SQUASHFS error: lzo decompression failed, data probably corrupt [ 151.528307][ T8000] SQUASHFS error: Failed to read block 0x91: -5 [ 151.528347][ T8000] SQUASHFS error: Unable to read metadata cache entry [8f] [ 151.528372][ T8000] SQUASHFS error: Unable to read inode 0x11f [ 151.588297][ T6547] usb 1-1: USB disconnect, device number 6 [ 153.481281][ T8031] loop2: detected capacity change from 0 to 32768 [ 153.683418][ T8031] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.829744][ T8031] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 154.482046][ T8031] XFS (loop2): log mount failed [ 156.818090][ T6478] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 157.816046][ T8133] loop2: detected capacity change from 0 to 256 [ 158.678136][ T8133] FAT-fs (loop2): count of clusters too big (178174) [ 158.680228][ T8133] FAT-fs (loop2): Can't find a valid FAT filesystem [ 159.423058][ T8140] netfs: Couldn't get user pages (rc=-14) [ 159.425240][ T8142] loop2: detected capacity change from 0 to 2048 [ 159.442711][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.442882][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.481542][ T8148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.643271][ T6478] Bluetooth: hci4: command tx timeout [ 159.643359][ T6478] Bluetooth: hci0: command 0x0406 tx timeout [ 159.643416][ T6478] Bluetooth: hci3: command 0x0406 tx timeout [ 159.643455][ T6478] Bluetooth: hci1: command 0x0406 tx timeout [ 159.643494][ T6478] Bluetooth: hci2: command 0x0406 tx timeout [ 160.482227][ T8165] loop0: detected capacity change from 0 to 16 [ 160.486668][ T8165] erofs (device loop0): mounted with root inode @ nid 36. [ 163.635841][ T8193] netlink: 'syz.1.440': attribute type 39 has an invalid length. [ 163.806284][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.824109][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.832328][ T8180] loop0: detected capacity change from 0 to 32768 [ 165.011418][ T8180] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.965916][ T8180] XFS (loop0): Ending clean mount [ 165.968382][ T8180] XFS (loop0): Quotacheck needed: Please wait. [ 166.006208][ T8180] XFS (loop0): Quotacheck: Done. [ 166.074949][ T6474] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.988204][ T8231] loop0: detected capacity change from 0 to 128 [ 167.430887][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 167.963247][ T8238] lo: entered allmulticast mode [ 167.993279][ T8238] pimreg: entered allmulticast mode [ 168.247756][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.247974][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.438182][ T8258] xt_hashlimit: size too large, truncated to 1048576 [ 169.215552][ T6476] Bluetooth: hci4: command 0x0406 tx timeout [ 169.280873][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'. [ 169.295712][ T8271] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 169.321483][ T8271] syz_tun: entered promiscuous mode [ 169.338314][ T8271] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 170.049572][ T8297] syz.2.465 uses old SIOCAX25GETINFO [ 171.179039][ T8311] bridge0: port 1(geneve0) entered blocking state [ 171.179226][ T8311] bridge0: port 1(geneve0) entered disabled state [ 171.179339][ T8311] geneve0: entered allmulticast mode [ 171.180482][ T8311] geneve0: entered promiscuous mode [ 171.181721][ T8311] bridge0: port 1(geneve0) entered blocking state [ 171.181907][ T8311] bridge0: port 1(geneve0) entered forwarding state [ 171.490001][ T8314] geneve0: left allmulticast mode [ 171.495953][ T8314] geneve0: left promiscuous mode [ 171.514918][ T8314] bridge0: port 1(geneve0) entered disabled state [ 171.836238][ T8304] syzkaller0: entered allmulticast mode [ 171.870615][ T8323] loop0: detected capacity change from 0 to 2048 [ 171.912563][ T8325] loop2: detected capacity change from 0 to 512 [ 171.916240][ T8325] ext2: Unknown parameter 'nouser_xattr' [ 172.957789][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 173.439915][ T8335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.698882][ T8361] loop0: detected capacity change from 0 to 1024 [ 174.702448][ T8361] EXT4-fs: Invalid want_extra_isize 7 [ 174.721334][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.726254][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.777022][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.838389][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.854468][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 175.798431][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 175.857668][ T8375] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 175.859763][ T8375] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 177.616890][ T6476] Bluetooth: hci4: command 0x0406 tx timeout [ 179.246585][ T8424] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.246788][ T8424] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 182.876391][ T8451] loop0: detected capacity change from 0 to 32768 [ 184.008708][ T8451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.509 (8451) [ 184.170845][ T8451] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.170945][ T8451] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 184.171001][ T8451] BTRFS info (device loop0): using free-space-tree [ 184.744921][ T8451] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 184.746348][ T8451] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 184.746609][ T8451] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 184.746767][ T8451] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 184.746908][ T8451] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 185.284829][ T8451] BTRFS error (device loop0): open_ctree failed: -12 [ 185.288910][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 185.288978][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 185.289089][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x32 [ 185.289115][ T55] Bluetooth: hci1: Malformed LE Event: 0x0d [ 188.024049][ T2384] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 188.024256][ T2384] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.024876][ T2384] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.077830][ T8509] sctp: [Deprecated]: syz.0.517 (pid 8509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.077830][ T8509] Use struct sctp_sack_info instead [ 191.430079][ T8538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.287966][ T8562] loop0: detected capacity change from 0 to 2048 [ 194.670001][ T8562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.111906][ T8583] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.114166][ T8583] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 195.114391][ T8583] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.114391][ T8583] [ 195.114634][ T8583] EXT4-fs (loop0): Total free blocks count 0 [ 195.114807][ T8583] EXT4-fs (loop0): Free/Dirty block details [ 195.115048][ T8583] EXT4-fs (loop0): free_blocks=2415919104 [ 195.115257][ T8583] EXT4-fs (loop0): dirty_blocks=64 [ 195.115481][ T8583] EXT4-fs (loop0): Block reservation details [ 195.115702][ T8583] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 195.330970][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'. [ 195.359307][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'. [ 195.359378][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'. [ 195.359433][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'. [ 195.434080][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 197.639679][ T8604] loop0: detected capacity change from 0 to 32768 [ 197.658803][ T8604] XFS: attr2 mount option is deprecated. [ 197.692848][ T8604] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 197.696386][ T8604] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.677463][ T8604] XFS (loop0): Ending clean mount [ 198.678740][ T8604] XFS (loop0): Quotacheck needed: Please wait. [ 198.799079][ T8604] XFS (loop0): Quotacheck: Done. [ 199.153463][ T8651] loop2: detected capacity change from 0 to 256 [ 201.360857][ T6474] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.603267][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 203.702505][ T8674] loop2: detected capacity change from 0 to 32768 [ 203.714329][ T8674] XFS: ikeep mount option is deprecated. [ 203.858225][ T8701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 203.860972][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'. [ 203.867248][ T8701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 203.870019][ T8701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 203.949388][ T8674] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 203.984535][ T8674] XFS (loop2): Ending clean mount [ 203.988458][ T8674] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x1154, inode 0x42b dinode [ 204.025077][ T8674] XFS (loop2): Unmount and run xfs_repair [ 204.029086][ T8674] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 204.032166][ T8674] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 204.032306][ T8674] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.032435][ T8674] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.032551][ T8674] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.032875][ T8674] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.032998][ T8674] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.033114][ T8674] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 204.033237][ T8674] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 204.035804][ T8674] XFS (loop2): Internal error xfs_trans_cancel at line 1002 of file fs/xfs/xfs_trans.c. Caller xfs_qm_qino_alloc+0x2ac/0x668 [ 204.035956][ T8674] CPU: 1 UID: 0 PID: 8674 Comm: syz.2.560 Not tainted 6.15.0-rc1-syzkaller-g2fe2b96c3818 #0 PREEMPT [ 204.035974][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.035982][ T8674] Call trace: [ 204.035986][ T8674] show_stack+0x2c/0x3c (C) [ 204.036003][ T8674] dump_stack_lvl+0xe4/0x150 [ 204.036016][ T8674] dump_stack+0x1c/0x28 [ 204.036029][ T8674] xfs_error_report+0xbc/0xec [ 204.036043][ T8674] xfs_trans_cancel+0x1ec/0x4ac [ 204.036058][ T8674] xfs_qm_qino_alloc+0x2ac/0x668 [ 204.036073][ T8674] xfs_qm_init_quotainos+0x62c/0x724 [ 204.036088][ T8674] xfs_qm_init_quotainfo+0x15c/0xfa0 [ 204.036102][ T8674] xfs_qm_mount_quotas+0xa8/0x5e0 [ 204.036117][ T8674] xfs_mountfs+0x1770/0x1ce8 [ 204.036128][ T8674] xfs_fs_fill_super+0xed0/0x1260 [ 204.036142][ T8674] get_tree_bdev_flags+0x38c/0x494 [ 204.036155][ T8674] get_tree_bdev+0x2c/0x3c [ 204.036167][ T8674] xfs_fs_get_tree+0x28/0x38 [ 204.036180][ T8674] vfs_get_tree+0x90/0x28c [ 204.036194][ T8674] do_new_mount+0x278/0x900 [ 204.036207][ T8674] path_mount+0x590/0xe04 [ 204.036218][ T8674] __arm64_sys_mount+0x4f4/0x5d0 [ 204.036230][ T8674] invoke_syscall+0x98/0x2b8 [ 204.036243][ T8674] el0_svc_common+0x130/0x23c [ 204.036255][ T8674] do_el0_svc+0x48/0x58 [ 204.036267][ T8674] el0_svc+0x54/0x168 [ 204.036281][ T8674] el0t_64_sync_handler+0x84/0x108 [ 204.036294][ T8674] el0t_64_sync+0x198/0x19c [ 204.602128][ T8674] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x200/0x4ac (fs/xfs/xfs_trans.c:1003). Shutting down filesystem. [ 204.602214][ T8674] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 204.606472][ T8674] XFS (loop2): xfs_qm_mount_quotas: Superblock update failed! [ 204.606524][ T8674] XFS (loop2): Failed to initialize disk quotas, err -117. [ 204.607892][ T8674] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 205.977537][ T8725] trusted_key: encrypted_key: key user:syz not found [ 207.781270][ T8754] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 207.837937][ T8754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.845897][ T8754] bond1: (slave bond2): making interface the new active one [ 207.846174][ T8754] bond1: (slave bond2): Enslaving as an active interface with an up link [ 207.894691][ T8759] loop2: detected capacity change from 0 to 8 [ 207.902245][ T8754] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 207.934160][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 207.937592][ T8754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.757662][ T8796] loop0: detected capacity change from 0 to 512 [ 210.770857][ T8796] EXT4-fs: Invalid want_extra_isize 16777280 [ 215.638362][ T55] Bluetooth: hci0: command tx timeout [ 227.364996][ T8974] netlink: 'syz.3.638': attribute type 1 has an invalid length. [ 227.389340][ T8974] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.593029][ T8974] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 231.389919][ T9003] Cannot find add_set index 0 as target [ 231.941782][ T9010] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 232.503365][ T9010] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.506349][ T9010] team0: entered promiscuous mode [ 232.507910][ T9010] team0: entered allmulticast mode [ 232.509582][ T9010] bond0: (slave team0): Enslaving as an active interface with an up link [ 232.547383][ T9014] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 232.584204][ T9014] bond0: (slave team0): Releasing backup interface [ 232.737433][ T9014] team0: left promiscuous mode [ 232.737596][ T9014] team0: left allmulticast mode [ 232.757361][ T9014] bridge0: port 1(team0) entered blocking state [ 232.757475][ T9014] bridge0: port 1(team0) entered disabled state [ 232.757574][ T9014] team0: entered allmulticast mode [ 232.764955][ T9010] vlan0: entered promiscuous mode [ 232.781028][ T9010] vlan0: entered allmulticast mode [ 232.781097][ T9010] veth0_vlan: entered allmulticast mode [ 232.781432][ T9010] team0: Port device vlan0 added [ 236.676126][ T9054] team0: left allmulticast mode [ 236.677847][ T9054] vlan0: left allmulticast mode [ 236.679276][ T9054] veth0_vlan: left allmulticast mode [ 236.681100][ T9054] bridge0: port 1(team0) entered disabled state [ 236.744473][ T9054] team0: Port device vlan0 removed [ 236.788284][ T9054] bond0: (slave vxlan0): Releasing backup interface [ 236.875100][ T9054] vxlan0: left promiscuous mode [ 236.876591][ T9054] vxlan0: left allmulticast mode [ 236.884226][ T9054] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.884413][ T9054] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.884463][ T9054] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.884497][ T9054] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.524287][ T9054] bond1: (slave bond2): Releasing backup interface [ 237.526158][ T9054] bond1: (slave bond2): the permanent HWaddr of slave - 3e:54:6d:0c:d9:30 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 237.530846][ T9054] bond1: (slave gretap1): making interface the new active one [ 238.748015][ T9054] bond1: (slave gretap1): Releasing backup interface [ 239.442817][ T9054] bond3: (slave macvlan2): Releasing backup interface [ 239.935016][ T55] Bluetooth: Wrong link type (-71) [ 243.972333][ T9127] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.124526][ T9136] Injecting memory failure for pfn 0x1a827f at process virtual address 0x20ffe000 [ 244.154307][ T9136] Memory failure: 0x1a827f: recovery action for reserved kernel page: Ignored [ 244.482430][ T6528] IPVS: starting estimator thread 0... [ 244.564892][ T9140] IPVS: using max 37 ests per chain, 88800 per kthread [ 244.854453][ T9123] ptrace attach of "./syz-executor exec"[6474] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 244.954939][ T55] Bluetooth: hci4: unexpected event for opcode 0x041c [ 245.663401][ T9159] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 246.116251][ T9163] loop0: detected capacity change from 0 to 128 [ 249.259289][ T2384] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 249.259514][ T2384] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.259580][ T2384] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.266383][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 249.266905][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 249.272726][ T6476] Bluetooth: hci4: hardware error 0x00 [ 250.386272][ T9188] fuse: Invalid rootmode [ 250.662578][ T9188] netfs: Couldn't get user pages (rc=-14) [ 251.393969][ T6476] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 258.622642][ T9265] loop0: detected capacity change from 0 to 4096 [ 258.628150][ T9265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.558824][ T9265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.645740][ T6474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.711917][ T9334] tipc: Started in network mode [ 266.711991][ T9334] tipc: Node identity 4, cluster identity 4711 [ 266.713172][ T9334] tipc: Node number set to 4 [ 269.049808][ T9360] loop0: detected capacity change from 0 to 512 [ 269.050276][ T9360] EXT4-fs: Ignoring removed nobh option [ 269.050892][ T9360] EXT4-fs: Ignoring removed nobh option [ 269.454923][ T9360] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 269.455455][ T9360] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.739: invalid indirect mapped block 2683928664 (level 1) [ 269.467737][ T9360] EXT4-fs (loop0): 1 truncate cleaned up [ 269.468572][ T9360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.708431][ T6474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.110521][ T6482] cgroup: fork rejected by pids controller in /syz2 [ 274.822778][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.825033][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.825792][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.827898][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.828855][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.957019][ T9436] capability: warning: `syz.3.761' uses 32-bit capabilities (legacy support in use) [ 277.493508][ T6476] Bluetooth: hci3: command tx timeout [ 279.103072][ T9407] chnl_net:caif_netlink_parms(): no params data found [ 279.538739][ T6476] Bluetooth: hci3: command tx timeout [ 281.088231][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.088333][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.089121][ T9407] bridge_slave_0: entered allmulticast mode [ 281.090136][ T9407] bridge_slave_0: entered promiscuous mode [ 281.092603][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.092888][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.093177][ T9407] bridge_slave_1: entered allmulticast mode [ 281.094370][ T9407] bridge_slave_1: entered promiscuous mode [ 281.125284][ T9407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.315943][ T9407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.897268][ T6476] Bluetooth: hci3: command tx timeout [ 282.221905][ T9407] team0: Port device team_slave_0 added [ 282.223388][ T9407] team0: Port device team_slave_1 added [ 282.250106][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.252328][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.260002][ T9407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.266045][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.267999][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.275852][ T9407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.316938][ T9407] hsr_slave_0: entered promiscuous mode [ 282.320482][ T9407] hsr_slave_1: entered promiscuous mode [ 282.324508][ T9407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.324539][ T9407] Cannot create hsr debugfs directory [ 283.934797][ T6476] Bluetooth: hci3: command tx timeout [ 284.001847][ T31] audit: type=1326 audit(283.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.1.780" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab75a168 code=0x0 [ 284.751183][ T9407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.787989][ T9508] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 285.057316][ T9407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.619462][ T9508] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 285.634425][ T9516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.640215][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 285.705987][ T9407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.753814][ T650] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 286.215545][ T9407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.516350][ T9407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.533152][ T9407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.704562][ T9407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.708263][ T9407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.830843][ T9407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.840312][ T9407] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.850822][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.850888][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.851613][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.851671][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.568385][ T9407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.651975][ T9407] veth0_vlan: entered promiscuous mode [ 291.044730][ T9407] veth1_vlan: entered promiscuous mode [ 291.245423][ T9407] veth0_macvtap: entered promiscuous mode [ 291.252866][ T9407] veth1_macvtap: entered promiscuous mode [ 291.276318][ T9407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.280488][ T9407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.285151][ T9407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.292205][ T9407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.295458][ T9407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.298295][ T9407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.301351][ T9407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.304942][ T9407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.359599][ T9407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.369349][ T9407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.369415][ T9407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.369450][ T9407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.510041][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 292.082493][ T9586] batman_adv: batadv0: Adding interface: vlan0 [ 292.082567][ T9586] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.082615][ T9586] batman_adv: batadv0: Interface activated: vlan0 [ 292.098724][ T9586] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.661464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.663800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.910362][ T9600] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 292.911066][ T9600] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 292.915021][ T9600] bridge0: port 3(team0) entered blocking state [ 292.915082][ T9600] bridge0: port 3(team0) entered disabled state [ 292.921558][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.922698][ T9600] vlan0: entered promiscuous mode [ 292.923010][ T9600] vlan0: left allmulticast mode [ 292.926301][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.547910][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.548139][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.574353][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.574565][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.592469][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 302.705116][ T9692] dummy0: entered promiscuous mode [ 302.705385][ T9692] macvtap1: entered promiscuous mode [ 302.708920][ T9692] macvtap1: entered allmulticast mode [ 302.708977][ T9692] dummy0: entered allmulticast mode [ 305.857603][ T9728] loop2: detected capacity change from 0 to 4096 [ 305.942909][ T9728] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 306.530359][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 306.572404][ T9728] ntfs3(loop2): ino=19, mi_enum_attr [ 306.572477][ T9728] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 306.572531][ T9728] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 306.578776][ T9728] ntfs3(loop2): ino=18, mi_enum_attr [ 306.580921][ T9728] ntfs3(loop2): Failed to load root (-22). [ 306.581112][ T9728] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 307.353429][ T9727] loop2: detected capacity change from 0 to 256 [ 310.450141][ T9780] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 311.266377][ T2384] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 311.266620][ T2384] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.266681][ T2384] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.311882][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 316.535860][ T9864] loop2: detected capacity change from 0 to 1024 [ 318.293652][ T44] hfsplus: b-tree write err: -5, ino 4 [ 323.016134][ T9921] loop2: detected capacity change from 0 to 256 [ 323.016683][ T9921] exfat: Deprecated parameter 'namecase' [ 323.110589][ T9921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 327.449450][ T9960] syz.4.884 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.782632][ T9978] TCP: out of memory -- consider tuning tcp_mem [ 329.953940][ T31] audit: type=1326 audit(329.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9972 comm="syz.0.889" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5a168 code=0x0 [ 333.254807][T10005] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.254888][T10005] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.254937][T10005] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.254972][T10005] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.255035][T10005] geneve3: entered allmulticast mode [ 337.994634][T10061] trusted_key: encrypted_key: insufficient parameters specified [ 338.924676][T10052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.445421][T10083] loop2: detected capacity change from 0 to 64 [ 342.699252][ T45] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 343.058536][T10123] netlink: 'syz.1.926': attribute type 30 has an invalid length. [ 343.058710][T10123] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 343.058760][T10123] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 347.024114][T10166] Invalid ELF header magic: != ELF [ 348.146725][T10171] netlink: 80 bytes leftover after parsing attributes in process `syz.3.938'. [ 349.433044][T10183] Falling back ldisc for ttyS3. [ 350.910233][T10196] macsec0: entered promiscuous mode [ 350.910970][T10196] macsec0: entered allmulticast mode [ 350.911079][T10196] veth1_macvtap: entered allmulticast mode [ 352.686607][T10209] loop0: detected capacity change from 0 to 256 [ 352.700282][T10209] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 355.969742][T10231] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.729669][T10253] x_tables: unsorted entry at hook 2 [ 358.629587][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 361.112969][T10294] cgroup: fork rejected by pids controller in /syz3 [ 363.587310][T10339] netlink: 'syz.1.980': attribute type 10 has an invalid length. [ 363.693218][T10339] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.834281][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.072442][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.076361][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.079405][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.081924][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.085745][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.305241][T10346] chnl_net:caif_netlink_parms(): no params data found [ 364.358826][T10354] loop0: detected capacity change from 0 to 2048 [ 364.395830][T10355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.526713][T10357] loop2: detected capacity change from 0 to 64 [ 364.572904][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.573076][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.573193][T10346] bridge_slave_0: entered allmulticast mode [ 364.574088][T10346] bridge_slave_0: entered promiscuous mode [ 364.575453][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.575514][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.575619][T10346] bridge_slave_1: entered allmulticast mode [ 364.576759][T10346] bridge_slave_1: entered promiscuous mode [ 364.597807][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.599498][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.231222][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 365.325492][T10346] team0: Port device team_slave_0 added [ 365.327212][T10346] team0: Port device team_slave_1 added [ 365.390342][T10355] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 365.393398][T10355] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 365.401538][T10355] Remounting filesystem read-only [ 365.412364][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.414327][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.421994][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.462137][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.464322][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.476207][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.306346][ T6476] Bluetooth: hci2: command tx timeout [ 366.312856][ T6474] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 366.481702][T10346] hsr_slave_0: entered promiscuous mode [ 366.509549][T10346] hsr_slave_1: entered promiscuous mode [ 366.509934][T10346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.509974][T10346] Cannot create hsr debugfs directory [ 368.643635][ T6476] Bluetooth: hci2: command tx timeout [ 369.445737][T10398] netlink: 'syz.1.992': attribute type 3 has an invalid length. [ 369.445808][T10398] netlink: 'syz.1.992': attribute type 5 has an invalid length. [ 369.445847][T10398] netlink: 'syz.1.992': attribute type 6 has an invalid length. [ 369.445873][T10398] netlink: 198064 bytes leftover after parsing attributes in process `syz.1.992'. [ 370.729546][T10402] loop2: detected capacity change from 0 to 32768 [ 370.780286][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.801649][T10346] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.812560][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.812640][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.821622][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.821702][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.831014][T10402] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 370.869513][T10402] XFS (loop2): Ending clean mount [ 370.871950][T10402] XFS (loop2): Quotacheck needed: Please wait. [ 370.883009][T10346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.883061][T10346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.913106][ T6476] Bluetooth: hci2: command tx timeout [ 371.014838][T10402] XFS (loop2): Quotacheck: Done. [ 371.805863][T10429] Cannot find del_set index 0 as target [ 372.370887][ T9407] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 372.392243][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.182628][ T6476] Bluetooth: hci2: command tx timeout [ 374.982371][T10346] veth0_vlan: entered promiscuous mode [ 374.992108][T10346] veth1_vlan: entered promiscuous mode [ 375.056439][T10346] veth0_macvtap: entered promiscuous mode [ 375.081840][T10346] veth1_macvtap: entered promiscuous mode [ 375.092701][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.095901][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.098732][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.102141][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.105596][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.134368][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.134434][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.134738][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.134922][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.135110][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.135326][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.136022][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.342818][ T2384] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 375.343343][ T2384] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.345727][ T2384] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.436991][T10450] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 375.479669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.479735][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.520774][T10473] 9pnet_fd: Insufficient options for proto=fd [ 375.531803][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.531867][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.434108][T10519] overlayfs: failed to clone upperpath [ 382.280583][ T507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.152847][ T507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.609935][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.619144][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.620027][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.621146][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.621510][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.721902][ T507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.953485][ T55] Bluetooth: hci3: command tx timeout [ 388.599587][T10588] loop0: detected capacity change from 0 to 512 [ 388.600326][T10588] EXT4-fs: Ignoring removed nobh option [ 388.600371][T10588] EXT4-fs: Ignoring removed nobh option [ 389.268069][ T55] Bluetooth: hci3: command tx timeout [ 389.488036][ T507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.518976][T10588] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 389.519527][T10588] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1032: invalid indirect mapped block 2683928664 (level 1) [ 389.521919][T10588] EXT4-fs (loop0): 1 truncate cleaned up [ 389.524206][T10588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.720639][T10633] batman_adv: batadv0: Adding interface: dummy0 [ 389.720713][T10633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.720766][T10633] batman_adv: batadv0: Interface activated: dummy0 [ 390.411708][T10632] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 390.581779][T10636] batadv0: mtu less than device minimum [ 390.585340][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.587298][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.589897][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.592173][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.593946][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.595704][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.597454][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.598587][T10632] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 390.599256][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.601012][T10636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 390.656021][ T6474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.673594][T10558] chnl_net:caif_netlink_parms(): no params data found [ 391.906337][ T55] Bluetooth: hci3: command tx timeout [ 391.942585][T10658] loop0: detected capacity change from 0 to 128 [ 392.015433][T10658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.062146][T10558] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.064170][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.067610][T10558] bridge_slave_0: entered allmulticast mode [ 392.074748][T10558] bridge_slave_0: entered promiscuous mode [ 392.106778][T10558] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.106854][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.106974][T10558] bridge_slave_1: entered allmulticast mode [ 392.114024][T10558] bridge_slave_1: entered promiscuous mode [ 392.139175][ T507] bridge_slave_1: left allmulticast mode [ 392.141040][ T507] bridge_slave_1: left promiscuous mode [ 392.145340][ T507] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.935803][ T507] bridge_slave_0: left allmulticast mode [ 392.937546][ T507] bridge_slave_0: left promiscuous mode [ 392.939227][ T507] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.944129][ T6474] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.235818][ T55] Bluetooth: hci3: command tx timeout [ 398.754881][T10723] loop0: detected capacity change from 0 to 2048 [ 398.762061][T10723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.002460][ T507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.044217][ T507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.097643][ T507] bond0 (unregistering): Released all slaves [ 400.113949][T10693] bridge0: port 3(gretap0) entered blocking state [ 400.114028][T10693] bridge0: port 3(gretap0) entered disabled state [ 400.386253][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.387854][T10558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.372227][T10558] team0: Port device team_slave_0 added [ 405.017062][T10558] team0: Port device team_slave_1 added [ 405.217923][T10558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.217990][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.218035][T10558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.219031][T10558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.219071][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.219101][T10558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.128779][ T507] hsr_slave_0: left promiscuous mode [ 406.129194][ T507] hsr_slave_1: left promiscuous mode [ 406.129905][ T507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.130252][ T507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.131036][ T507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.134172][ T507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.707359][ T507] [ 406.708086][ T507] ============================================ [ 406.709699][ T507] WARNING: possible recursive locking detected [ 406.711321][ T507] 6.15.0-rc1-syzkaller-g2fe2b96c3818 #0 Not tainted [ 406.713115][ T507] -------------------------------------------- [ 406.714772][ T507] kworker/u8:6/507 is trying to acquire lock: [ 406.716341][ T507] ffff0000f08fed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0xfc/0x218 [ 406.718983][ T507] [ 406.718983][ T507] but task is already holding lock: [ 406.720955][ T507] ffff0000f08fed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x4b8/0x210c [ 406.724073][ T507] and the lock comparison function returns 0: [ 406.725678][ T507] [ 406.725678][ T507] other info that might help us debug this: [ 406.727817][ T507] Possible unsafe locking scenario: [ 406.727817][ T507] [ 406.729785][ T507] CPU0 [ 406.730649][ T507] ---- [ 406.731541][ T507] lock(&dev_instance_lock_key#3); [ 406.733017][ T507] lock(&dev_instance_lock_key#3); [ 406.734459][ T507] [ 406.734459][ T507] *** DEADLOCK *** [ 406.734459][ T507] [ 406.736724][ T507] May be due to missing lock nesting notation [ 406.736724][ T507] [ 406.739013][ T507] 5 locks held by kworker/u8:6/507: [ 406.740400][ T507] #0: ffff0000c183a148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 [ 406.743314][ T507] #1: ffff80009ce27b80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 [ 406.746017][ T507] #2: ffff800093074a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x148/0xa48 [ 406.748705][ T507] #3: ffff8000930815a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 406.751050][ T507] #4: ffff0000f08fed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x4b8/0x210c [ 406.754308][ T507] [ 406.754308][ T507] stack backtrace: [ 406.755891][ T507] CPU: 1 UID: 0 PID: 507 Comm: kworker/u8:6 Not tainted 6.15.0-rc1-syzkaller-g2fe2b96c3818 #0 PREEMPT [ 406.758852][ T507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.761569][ T507] Workqueue: netns cleanup_net [ 406.762885][ T507] Call trace: [ 406.763727][ T507] show_stack+0x2c/0x3c (C) [ 406.764984][ T507] dump_stack_lvl+0xe4/0x150 [ 406.766253][ T507] dump_stack+0x1c/0x28 [ 406.767367][ T507] print_deadlock_bug+0x338/0x340 [ 406.768731][ T507] __lock_acquire+0x164c/0x32c4 [ 406.770008][ T507] lock_acquire+0x150/0x2e8 [ 406.771246][ T507] __mutex_lock_common+0x1f0/0x2604 [ 406.772631][ T507] mutex_lock_nested+0x2c/0x38 [ 406.773799][ T507] dev_set_allmulti+0xfc/0x218 [ 406.774884][ T507] macvlan_stop+0x194/0x368 [ 406.775908][ T507] __dev_close_many+0x428/0x76c [ 406.777023][ T507] dev_close_many+0x1e0/0x474 [ 406.778136][ T507] unregister_netdevice_many_notify+0x52c/0x210c [ 406.779892][ T507] default_device_exit_batch+0x904/0x984 [ 406.781396][ T507] cleanup_net+0x6c4/0xa48 [ 406.782563][ T507] process_one_work+0x810/0x1638 [ 406.783854][ T507] worker_thread+0x97c/0xf08 [ 406.785057][ T507] kthread+0x674/0x7dc [ 406.786126][ T507] ret_from_fork+0x10/0x20 [ 406.816636][T10799] No such timeout policy "syz1"