last executing test programs: 38.472224769s ago: executing program 3 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) capset(0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 34.604908059s ago: executing program 3 (id=1039): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) 32.847104987s ago: executing program 3 (id=1045): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0xac7}], 0x1}, 0x20000044) 30.519983413s ago: executing program 3 (id=1051): socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 30.287104787s ago: executing program 3 (id=1052): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) socket$inet6(0xa, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) 28.069414572s ago: executing program 3 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000300), 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) io_setup(0x3ff, &(0x7f0000000500)) 12.571456864s ago: executing program 32 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000300), 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) io_setup(0x3ff, &(0x7f0000000500)) 5.78868566s ago: executing program 0 (id=1100): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x101) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0]) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x400b}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000600)={{0x0, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 4.859512384s ago: executing program 0 (id=1105): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x2, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x801, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='f2fs_direct_IO_enter\x00', r2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4.841798565s ago: executing program 2 (id=1106): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x78ad, 0x0, 0x3, 0x34a}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) 4.750640936s ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) syz_open_dev$usbfs(0x0, 0x400077, 0x6b4380) r3 = syz_open_dev$loop(&(0x7f0000001580), 0x8, 0x8080) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) 4.541369679s ago: executing program 2 (id=1109): socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000075c0)='net/igmp6\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x40007) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 3.718248102s ago: executing program 4 (id=1111): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 3.670829092s ago: executing program 1 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.22503936s ago: executing program 1 (id=1113): r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1000, 0x3, 0x2, 0x0, 0x20}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), 0x4) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000640)='workdir\x86\x12d\xa5B\xc4\xa9-\xf9\xc0\x17lB\xe1\xbd=\x14zb\xe5.\x1c\xc4\xf3\xb8s)\xd49r2\xbaKk\x1d\xdd>\xa2\xf1\xf8/\xee\xf2\xea1\xe9(\xeeW\xcf\xdb\x97X\xa8\x84#:\xf3N\x1b#\xd0\x1d\x83\xd4v\x81\x00\x12\xf2b\xbb f\x01\xb7\xe4\xef\xbb\x9b\xcfq\xa2\x1a\x1f\xb0?\xb4\x18)\xa0\x17\xa4\x8d#,p\xb6\xe2\x83fm\xbb\xd5\x95\xea\x19\xd9/\xa1GIl\xeb|t\xd8\x81T\\E\xf5%\xb2\xde\xbbP7\x13\xac\xf6\xc8\x7f\xcd\x19\x88\xb6SMG\x0fM|GAN\x83\xfd\xa5\xd0\xb1\x11\xbcdbl\xec\xb91&\x86\xd7q}\xcf\x15G6\x1d}W\xcf\x93\xaa\x8c\x1b\xbd\xb2]V\xb2\x9d\nM\xf9=\xc0\xed\xd4(o{#P\xee\xba\x82\x7f\x0fn\xcc\xd5~\x8cf\xf64\x9a\x009cx\x89\x90\x10\xa5c\xc8\x10\x8bB\"w\x01g\xa8\x88\xfc\xb0\xd9\x90\xa6\x17 \xb8\x97EU],\xcc\x8d\xb3\xe5s\x16\xfc\xcb\xb5s`\x03\xeej\xaf\x12\xe0\x9bA\r\xe5Qe\x91\x0e\xb1F\xd81S4\xf6c\x97\xf2\x9f$\xd1\xcdx|\xa7`H]\x89\ft\x11DP\xd9\xb9\xedN\xf2\"\xca\x04\xe9I\bys\x90\x8e\xf4\x94\xf9kI\xf9\x15\xbdz\xab\x0eNn;\xb6C\xbd\x13p\xa3\x81\v\xf1\'\xdd\x95\xb7\xc7\xeb4(9\xb1\xe4\flD!\xf2D\x84\x94\xc7\xc0\xff\x86\xe5\xd3\xbaO\xfe\xcf\f\x17\xf0yv\x7f\xa9\xa9V\xfb\xe1\xf4\xaf \xb8w\x9c\x88\x8a\xa8\xea\xa8\x05\xe6\xffl\x0f=\xe7\xfad\xf6\x0f$cT\x89\xec\xee\x84\x01H\x8c\t\xd7\xa0G\xdf$\x92e\xbc,\xe9\xd8s\xf8\xc2x\xea\xa0\x13\x9d\xedU\xa2\xbb\x88\xfe\xc6x\xa66\xd5\xe8\x83\xe0\x92>\x1dAp\x9f9K~Am>\xe5\xa5\xe1\xca\x9d\n\xad\xa5X\x8b2\x81U\xec\x10$U\x1f7\xc4;I\xe1\xe8\xc8\xaekzb\x8dB\x97\x117\x84X\xf7\x1a@\xb1K\x89^\x0ffB\x13xS\xa0\xa4\xb0\x87\xea^#\x81\xf8\x88\xafZc\xee\xdf1\xab\x99\xb4y\xf6=\xe1\x00\x00\x00\x00\x00\x00\x00', 0x215, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES32=r3], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000e40)=@req={0x2, 0xce63, 0xac2c, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2d000000010001", 0x7) 3.149579771s ago: executing program 4 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ef", 0xffe3}], 0x1, 0x0, 0x0, 0x20000000}, 0xa}], 0x420, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.136891711s ago: executing program 0 (id=1115): socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.921159274s ago: executing program 2 (id=1116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) 2.155167707s ago: executing program 0 (id=1117): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r3, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r4, 0x1) 2.154599697s ago: executing program 2 (id=1118): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x2, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x5, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 2.144459546s ago: executing program 4 (id=1119): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x2, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x5, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 2.104935147s ago: executing program 1 (id=1120): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xfffffffd, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.041089298s ago: executing program 0 (id=1121): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900), 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'erspan0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 2.039985708s ago: executing program 1 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1210801, &(0x7f0000002ac0)=ANY=[], 0x1, 0x1fc, &(0x7f0000000680)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0xc08, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2.031152108s ago: executing program 4 (id=1123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) socket$key(0xf, 0x3, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.958957399s ago: executing program 2 (id=1124): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) 222.628017ms ago: executing program 1 (id=1125): socket(0x2000000000000021, 0x802, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], 0xd, 0x1ad, &(0x7f0000000580)="$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") r0 = syz_io_uring_setup(0x6438, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 217.746647ms ago: executing program 4 (id=1126): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r3, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000400)="010000000037a788a11d18000000000000006923c6", 0x15, r4) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 54.884599ms ago: executing program 2 (id=1127): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\x06\x00\x00\x00\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x6) userfaultfd(0x80001) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x163341) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000280)=[0xffffffff], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x1000000000007f}) 54.388259ms ago: executing program 0 (id=1128): socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) 0s ago: executing program 1 (id=1129): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10002, 0x0) kernel console output (not intermixed with test programs): 4029] device bridge_slave_1 entered promiscuous mode [ 46.132632][ T4023] device hsr_slave_0 entered promiscuous mode [ 46.176903][ T4023] device hsr_slave_1 entered promiscuous mode [ 46.210779][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.212596][ T4023] Cannot create hsr debugfs directory [ 46.272651][ T4027] device hsr_slave_0 entered promiscuous mode [ 46.310841][ T4027] device hsr_slave_1 entered promiscuous mode [ 46.370686][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.372476][ T4027] Cannot create hsr debugfs directory [ 46.395303][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.417125][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.495885][ T4029] team0: Port device team_slave_0 added [ 46.518940][ T4029] team0: Port device team_slave_1 added [ 46.596512][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.598208][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.604915][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.608932][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.610796][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.617139][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.661395][ T4030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.702868][ T4030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.802717][ T4029] device hsr_slave_0 entered promiscuous mode [ 46.821324][ T3606] Bluetooth: hci1: command 0x0409 tx timeout [ 46.821545][ T1535] Bluetooth: hci2: command 0x0409 tx timeout [ 46.823237][ T3606] Bluetooth: hci4: command 0x0409 tx timeout [ 46.824670][ T1535] Bluetooth: hci0: command 0x0409 tx timeout [ 46.851001][ T4029] device hsr_slave_1 entered promiscuous mode [ 46.890658][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.892602][ T4029] Cannot create hsr debugfs directory [ 46.895218][ T4030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.900745][ T3606] Bluetooth: hci3: command 0x0409 tx timeout [ 46.934946][ T4030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.027152][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.073028][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.132742][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.196850][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.265556][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.318348][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.358838][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.399050][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.480440][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.483203][ T4027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.532823][ T4027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.582545][ T4027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.650159][ T4027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.709015][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.712743][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.717626][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.733336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.736687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.739229][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.741202][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.755756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.773488][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.776051][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.778593][ T1706] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.780228][ T1706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.788904][ T4029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.846108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.854126][ T4029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.894052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.897294][ T4029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.955367][ T4029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.997531][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.013950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.018988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.022952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.025552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.028184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.031200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.033584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.036090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.038495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.049532][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.088411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.092109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.115547][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.132027][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.149241][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.153147][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.155437][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.157162][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.159536][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.176859][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.178783][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.181649][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.183987][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.194661][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.201305][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.204004][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.206374][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.208100][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.214977][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.226387][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.228791][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.232551][ T1706] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.234177][ T1706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.236403][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.239294][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.245798][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.264305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.266909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.269539][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.271381][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.274613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.278601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.282817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.298957][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.301409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.320079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.323431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.326047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.328712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.332733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.335238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.337716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.340179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.345027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.347551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.352621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.356854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.359426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.376476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.378979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.381746][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.383462][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.385608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.388004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.391839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.395037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.398464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.401490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.404074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.406503][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.408238][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.425210][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.427627][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.430069][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.443364][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.454216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.458001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.466871][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.475529][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.478462][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.484410][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.487319][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.489754][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.518174][ T4030] device veth0_vlan entered promiscuous mode [ 48.528150][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.531853][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.534484][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.537505][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.543945][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.558325][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.575183][ T4027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.577760][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.594050][ T4030] device veth1_vlan entered promiscuous mode [ 48.599222][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.602612][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.604968][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.607595][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.610179][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.620209][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.652028][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.654395][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.656382][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.664203][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.666697][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.669039][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.678317][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.680294][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.696352][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.699560][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.703838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.706392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.708846][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.710590][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.713737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.736163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.738819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.743338][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.745182][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.747387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.749804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.763597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.770505][ T4030] device veth0_macvtap entered promiscuous mode [ 48.777902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.780266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.789742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.794312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.797882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.799735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.803796][ T4030] device veth1_macvtap entered promiscuous mode [ 48.815697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.817986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.820368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.825136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.827646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.830157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.836817][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.872876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.875423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.878087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.881942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.884479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.888102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.901112][ T4075] Bluetooth: hci0: command 0x041b tx timeout [ 48.901295][ T4072] Bluetooth: hci2: command 0x041b tx timeout [ 48.902693][ T4075] Bluetooth: hci4: command 0x041b tx timeout [ 48.905994][ T4075] Bluetooth: hci1: command 0x041b tx timeout [ 48.909943][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.913987][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.916387][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.918982][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.924446][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.929621][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.932470][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.948208][ T4024] device veth0_vlan entered promiscuous mode [ 48.953152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.955552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.957982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.962013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.966904][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.971006][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.977218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.979512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.983140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.985751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.991115][ T4075] Bluetooth: hci3: command 0x041b tx timeout [ 48.997817][ T4023] device veth0_vlan entered promiscuous mode [ 49.005079][ T4030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.007466][ T4030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.009522][ T4030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.013335][ T4030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.018475][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.027740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.031404][ T4024] device veth1_vlan entered promiscuous mode [ 49.037721][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.040228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.046880][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.054413][ T4027] device veth0_vlan entered promiscuous mode [ 49.092204][ T4023] device veth1_vlan entered promiscuous mode [ 49.100155][ T4027] device veth1_vlan entered promiscuous mode [ 49.125188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.128352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.132003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.134507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.137696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.140138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.145346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.147398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.164528][ T4024] device veth0_macvtap entered promiscuous mode [ 49.176482][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.197979][ T4024] device veth1_macvtap entered promiscuous mode [ 49.203140][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.205534][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.208005][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.242529][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.245181][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.247662][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.250256][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.256487][ T4023] device veth0_macvtap entered promiscuous mode [ 49.262801][ T4023] device veth1_macvtap entered promiscuous mode [ 49.274831][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.277660][ T4027] device veth0_macvtap entered promiscuous mode [ 49.289268][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.296250][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.300074][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.316130][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.324315][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.326748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.329836][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.332677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.336007][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.338576][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.343159][ T4027] device veth1_macvtap entered promiscuous mode [ 49.366279][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.368877][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.382651][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.385205][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.388979][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.394477][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.397193][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.407088][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.411463][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.413607][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.417734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.420118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.423864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.426382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.429225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.432343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.435559][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.438001][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.440382][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.444145][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.447597][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.454156][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.456721][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.459123][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.462484][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.464960][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.467395][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.471456][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.483397][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.486015][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.488614][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.492854][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.498626][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.503628][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.505817][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.507852][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.516610][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.519507][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.522366][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.524541][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.555764][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.558393][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.561149][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.570377][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.580695][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.583578][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.587156][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.598415][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.601428][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.629096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.633261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.678725][ T4027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.683743][ T4027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.685823][ T4027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.687898][ T4027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.793122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.795467][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.798260][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.811461][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.819397][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.831952][ T4029] device veth0_vlan entered promiscuous mode [ 49.835695][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.857825][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.876397][ T401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.878285][ T401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.893225][ T4029] device veth1_vlan entered promiscuous mode [ 49.909899][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.913426][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.937614][ T4110] xt_CT: No such helper "netbios-ns" [ 49.950097][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.959167][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.982414][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.984890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.026470][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.028548][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.037963][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.066275][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.068315][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.104057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.157881][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.162049][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.176114][ T4029] device veth0_macvtap entered promiscuous mode [ 50.203109][ T1706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.205467][ T4029] device veth1_macvtap entered promiscuous mode [ 50.205696][ T1706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.233963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.236407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.238903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.307730][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.314795][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.317374][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.321205][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.323999][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.326838][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.329439][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.333983][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.338513][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.361677][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.369123][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.374816][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.377815][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.380410][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.387692][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.406753][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.417738][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.437329][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.451971][ T4029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.454220][ T4029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.456412][ T4029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.458518][ T4029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.921411][ T4033] Bluetooth: hci2: command 0x040f tx timeout [ 52.224364][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.225479][ T4105] Bluetooth: hci1: command 0x040f tx timeout [ 52.228049][ T4105] Bluetooth: hci4: command 0x040f tx timeout [ 52.229550][ T4105] Bluetooth: hci0: command 0x040f tx timeout [ 52.231630][ T4105] Bluetooth: hci3: command 0x040f tx timeout [ 52.255641][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.268232][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.287360][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.375890][ T4139] loop3: detected capacity change from 0 to 2048 [ 52.424773][ T4136] loop2: detected capacity change from 0 to 1024 [ 52.429455][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.429783][ T4141] binder: BINDER_SET_CONTEXT_MGR already set [ 52.435246][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.461214][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.484595][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.487225][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.490361][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.506116][ T4141] binder: 4140:4141 ioctl 4018620d 20000040 returned -16 [ 52.508829][ T4144] binder: tried to use weak ref as strong ref [ 52.523736][ T4144] binder: 4140:4144 Acquire 1 refcount change on invalid ref 0 ret -22 [ 52.582755][ T4141] binder: 4140:4141 got transaction to invalid handle, 1 [ 52.601169][ T4141] binder: 4140:4141 transaction failed 29201/-22, size 0-0 line 2917 [ 52.607035][ T4136] ======================================================= [ 52.607035][ T4136] WARNING: The mand mount option has been deprecated and [ 52.607035][ T4136] and is ignored by this kernel. Remove the mand [ 52.607035][ T4136] option from the mount to silence this warning. [ 52.607035][ T4136] ======================================================= [ 52.607339][ T4072] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.638047][ T4139] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.536627][ T4136] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.481197][ T4033] Bluetooth: hci2: command 0x0419 tx timeout [ 54.483077][ T4072] Bluetooth: hci3: command 0x0419 tx timeout [ 54.484668][ T4072] Bluetooth: hci0: command 0x0419 tx timeout [ 54.486263][ T4072] Bluetooth: hci4: command 0x0419 tx timeout [ 54.487778][ T4072] Bluetooth: hci1: command 0x0419 tx timeout [ 55.290483][ C0] sched: RT throttling activated [ 55.355835][ T4136] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 55.362242][ T4136] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 55.365334][ T4136] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.365334][ T4136] [ 55.367592][ T4136] EXT4-fs (loop2): Total free blocks count 0 [ 55.369112][ T4136] EXT4-fs (loop2): Free/Dirty block details [ 55.370457][ T4136] EXT4-fs (loop2): free_blocks=4293918720 [ 55.411185][ T4139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 55.420249][ T4136] EXT4-fs (loop2): dirty_blocks=64 [ 55.424080][ T4136] EXT4-fs (loop2): Block reservation details [ 55.425648][ T4136] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 57.541851][ T4192] udc-core: couldn't find an available UDC or it's busy [ 57.552146][ T4192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.712873][ T4192] loop2: detected capacity change from 0 to 128 [ 59.765006][ T4198] device syzkaller0 entered promiscuous mode [ 60.090660][ T4209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30'. [ 60.092657][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 60.930958][ T4214] mmap: syz.4.32 (4214) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 61.959973][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.962296][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.967529][ T4226] xt_nat: multiple ranges no longer supported [ 62.040525][ T4227] syz.4.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.762375][ T4232] loop4: detected capacity change from 0 to 512 [ 62.797961][ T4232] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 62.799814][ T4232] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 62.811089][ T4234] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 62.875337][ T4236] device ip6erspan0 entered promiscuous mode [ 64.171097][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 64.267353][ T26] audit: type=1326 audit(64.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.277097][ T26] audit: type=1326 audit(64.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.286993][ T4259] loop4: detected capacity change from 0 to 16 [ 64.297013][ T26] audit: type=1326 audit(64.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.315451][ T26] audit: type=1326 audit(64.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.332803][ T26] audit: type=1326 audit(64.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.346249][ T4259] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 64.366816][ T26] audit: type=1326 audit(64.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.387253][ T26] audit: type=1326 audit(64.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.407616][ T26] audit: type=1326 audit(64.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.594866][ T26] audit: type=1326 audit(64.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 64.606172][ T26] audit: type=1326 audit(64.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 66.325008][ T4265] fuse: root generation should be zero [ 66.342676][ T4259] tipc: Started in network mode [ 66.348661][ T4259] tipc: Node identity ac14140f, cluster identity 4711 [ 66.351509][ T4259] tipc: New replicast peer: 10.1.1.2 [ 66.420446][ T4259] tipc: Enabled bearer , priority 10 [ 66.537275][ T4281] netlink: 'syz.1.55': attribute type 21 has an invalid length. [ 66.556285][ T4281] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 66.596032][ T4281] netlink: 512 bytes leftover after parsing attributes in process `syz.1.55'. [ 67.421640][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 67.497046][ T4292] netlink: 830 bytes leftover after parsing attributes in process `syz.1.60'. [ 67.503959][ T4292] device bond_slave_0 entered promiscuous mode [ 67.505763][ T4292] device bond_slave_1 entered promiscuous mode [ 67.551617][ T4073] tipc: Node number set to 2886997007 [ 67.833947][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 68.786471][ T4315] MPTCP: addr_signal error, add_addr=1, echo=0 [ 69.826598][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.829757][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.908671][ T3322] cfg80211: failed to load regulatory.db [ 70.953063][ T4345] udc-core: couldn't find an available UDC or it's busy [ 70.954889][ T4345] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.008590][ T4347] loop0: detected capacity change from 0 to 512 [ 71.053686][ T4347] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 71.056114][ T4347] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 71.304727][ T4357] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 72.321861][ T4347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 72.456667][ T4347] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.503674][ T4347] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.81: attempt to clear invalid blocks 1024 len 1 [ 72.521551][ T4347] EXT4-fs (loop0): Remounting filesystem read-only [ 72.524855][ T4347] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.81: bg 0: block 361: padding at end of block bitmap is not set [ 72.531060][ T4347] EXT4-fs (loop0): Remounting filesystem read-only [ 72.532617][ T4347] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 72.541014][ T4347] EXT4-fs (loop0): Remounting filesystem read-only [ 72.547657][ T4347] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.81: invalid indirect mapped block 1811939328 (level 0) [ 72.589364][ T4347] EXT4-fs (loop0): Remounting filesystem read-only [ 72.607299][ T4347] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.81: invalid indirect mapped block 2185560079 (level 1) [ 72.622633][ T4347] EXT4-fs (loop0): Remounting filesystem read-only [ 72.624686][ T4347] EXT4-fs (loop0): 1 truncate cleaned up [ 72.626193][ T4347] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 72.666451][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 72.699418][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 72.699431][ T26] audit: type=1326 audit(72.660:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4346 comm="syz.0.81" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff801a1d28 code=0x0 [ 73.521905][ T4371] loop2: detected capacity change from 0 to 512 [ 73.586191][ T4374] loop1: detected capacity change from 0 to 512 [ 73.610646][ T4374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.613966][ T4374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.689838][ T4371] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.88: inode #1: comm syz.2.88: iget: illegal inode # [ 73.694779][ T4374] EXT4-fs (loop1): 1 truncate cleaned up [ 73.703979][ T4374] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 73.720930][ T4371] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.88: error while reading EA inode 1 err=-117 [ 73.761942][ T4371] EXT4-fs (loop2): 1 orphan inode deleted [ 73.763499][ T4371] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 75.918052][ T4400] process 'syz.3.96' launched './file1' with NULL argv: empty string added [ 76.197477][ T4410] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.257958][ T4410] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.382556][ T4418] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 77.999409][ T26] audit: type=1400 audit(77.910:83): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=4427 comm="syz.4.105" [ 78.593427][ T4442] MPTCP: kernel_bind error, err=-22 [ 78.718774][ T4446] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 78.771198][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.773972][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.835917][ T4449] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 78.839263][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.841225][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.843643][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.845664][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.898744][ T4449] team0: Port device bridge0 added [ 79.842716][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.113'. [ 79.851231][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 81.173008][ T4472] Zero length message leads to an empty skb [ 81.463642][ T4479] loop3: detected capacity change from 0 to 8 [ 82.306162][ T4479] SQUASHFS error: xz decompression failed, data probably corrupt [ 82.308327][ T4479] SQUASHFS error: Failed to read block 0x108: -5 [ 82.319679][ T4479] SQUASHFS error: Unable to read metadata cache entry [106] [ 82.346839][ T4479] SQUASHFS error: Unable to read inode 0x11f [ 83.697740][ T4507] loop1: detected capacity change from 0 to 128 [ 83.851231][ T4507] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.071437][ T4516] syz.3.134 sent an empty control message without MSG_MORE. [ 84.466411][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 86.705978][ T4561] loop1: detected capacity change from 0 to 512 [ 86.764945][ T4559] netlink: 'syz.4.146': attribute type 1 has an invalid length. [ 86.895146][ T4567] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.898970][ T4567] F2FS-fs (loop5): Unable to read 1th superblock [ 86.902812][ T4567] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.905935][ T4567] F2FS-fs (loop5): Unable to read 2th superblock [ 87.496268][ T4559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.504681][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 87.681488][ T4568] bond1: (slave gretap1): making interface the new active one [ 87.691558][ T4568] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.699877][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 88.781188][ T4582] loop2: detected capacity change from 0 to 128 [ 88.996861][ T4584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.863948][ T4599] loop0: detected capacity change from 0 to 1024 [ 89.908324][ T26] audit: type=1326 audit(89.870:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 89.922266][ T26] audit: type=1326 audit(89.890:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 89.929993][ T26] audit: type=1326 audit(89.890:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 89.942481][ T4599] EXT4-fs (loop0): Ignoring removed orlov option [ 89.944218][ T4599] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 89.947963][ T26] audit: type=1326 audit(89.890:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.011941][ T4599] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 90.024403][ T26] audit: type=1326 audit(89.890:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.063434][ T148] Bluetooth: hci6: Frame reassembly failed (-84) [ 90.083477][ T26] audit: type=1326 audit(89.930:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=433 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.134387][ T26] audit: type=1326 audit(89.930:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.157651][ T4614] tipc: Started in network mode [ 90.164159][ T4614] tipc: Node identity 4, cluster identity 4711 [ 90.174304][ T4614] tipc: Node number set to 4 [ 90.184787][ T26] audit: type=1326 audit(89.930:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.206502][ T26] audit: type=1326 audit(89.930:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.217542][ T26] audit: type=1326 audit(89.930:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x7ffc0000 [ 90.371632][ T4210] Bluetooth: Error in BCSP hdr checksum [ 90.636608][ T148] Bluetooth: Error in BCSP hdr checksum [ 90.900933][ T4210] Bluetooth: Error in BCSP hdr checksum [ 91.179620][ T4310] Bluetooth: Error in BCSP hdr checksum [ 91.296485][ T4639] xt_TCPMSS: Only works on TCP SYN packets [ 91.469459][ T4649] loop1: detected capacity change from 0 to 512 [ 91.494983][ T4426] Bluetooth: Error in BCSP hdr checksum [ 91.516682][ T4647] loop0: detected capacity change from 0 to 2048 [ 91.555157][ T4649] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.557052][ T4649] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 92.232390][ T4042] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 92.236971][ T4072] Bluetooth: hci5: command 0x1003 tx timeout [ 92.314442][ T4647] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 92.318746][ T4647] UDF-fs: Scanning with blocksize 512 failed [ 92.388821][ T4647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.391796][ T4659] syz.4.168 uses obsolete (PF_INET,SOCK_PACKET) [ 93.590853][ T4682] udc-core: couldn't find an available UDC or it's busy [ 93.592478][ T4682] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.323337][ T4692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 95.052656][ T1535] Bluetooth: hci5: command 0x1001 tx timeout [ 95.054395][ T4042] Bluetooth: hci5: sending frame failed (-49) [ 98.254445][ T25] Bluetooth: hci5: command 0x1009 tx timeout [ 98.356548][ T4719] loop3: detected capacity change from 0 to 64 [ 98.369687][ T4717] loop4: detected capacity change from 0 to 128 [ 98.387535][ T4718] loop1: detected capacity change from 0 to 2048 [ 98.417398][ T4718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.753096][ T4732] loop4: detected capacity change from 0 to 256 [ 98.767338][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 98.791672][ T4732] FAT-fs (loop4): Unrecognized mount option "shortname=" or missing value [ 98.853451][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 98.995809][ T4739] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 99.591125][ T4042] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 99.594750][ T4042] CPU: 0 PID: 4042 Comm: kworker/u5:8 Not tainted 5.15.179-syzkaller #0 [ 99.596917][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.599456][ T4042] Workqueue: hci2 hci_rx_work [ 99.600623][ T4042] Call trace: [ 99.601456][ T4042] dump_backtrace+0x0/0x530 [ 99.602618][ T4042] show_stack+0x2c/0x3c [ 99.603628][ T4042] dump_stack_lvl+0x108/0x170 [ 99.604843][ T4042] dump_stack+0x1c/0x58 [ 99.605919][ T4042] sysfs_create_dir_ns+0x278/0x318 [ 99.607222][ T4042] kobject_add_internal+0x384/0x8f0 [ 99.608594][ T4042] kobject_add+0x14c/0x21c [ 99.609776][ T4042] device_add+0x400/0xef4 [ 99.610861][ T4042] hci_conn_add_sysfs+0xc4/0x1cc [ 99.612074][ T4042] le_conn_complete_evt+0x954/0x1228 [ 99.613302][ T4042] hci_le_meta_evt+0x234/0x31c0 [ 99.614483][ T4042] hci_event_packet+0xd34/0x12b4 [ 99.615674][ T4042] hci_rx_work+0x1d0/0x830 [ 99.616758][ T4042] process_one_work+0x790/0x11b8 [ 99.617923][ T4042] worker_thread+0x910/0x1034 [ 99.619036][ T4042] kthread+0x37c/0x45c [ 99.619998][ T4042] ret_from_fork+0x10/0x20 [ 99.623360][ T4042] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.626799][ T4042] Bluetooth: hci2: failed to register connection device [ 101.302965][ T4772] loop4: detected capacity change from 0 to 512 [ 101.314578][ T4775] No such timeout policy "syz0" [ 103.297756][ T4770] loop2: detected capacity change from 0 to 190 [ 104.261210][ T4770] __ntfs_warning: 2 callbacks suppressed [ 104.261223][ T4770] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 105.052059][ T4770] ntfs: (device loop2): ntfs_read_inode_mount(): Failed to load the complete runlist for $MFT/$DATA. Driver bug or corrupt $MFT. Run chkdsk. [ 105.056094][ T4770] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 105.087670][ T4772] EXT4-fs: failed to create workqueue [ 105.089027][ T4772] EXT4-fs (loop4): mount failed [ 105.124627][ T4770] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 105.310344][ T4798] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 105.511460][ T4806] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 107.140598][ T3606] Bluetooth: hci2: command 0x0406 tx timeout [ 107.191752][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.241639][ T3322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.253595][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.379002][ T4829] 9pnet: Insufficient options for proto=fd [ 107.383872][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.349968][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.620983][ T4858] loop3: detected capacity change from 0 to 512 [ 109.411517][ T4858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.418489][ T4858] EXT4-fs (loop3): 1 truncate cleaned up [ 109.419940][ T4858] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 109.425955][ T4107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.486834][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.507973][ T4841] dccp_close: ABORT with 84 bytes unread [ 109.566491][ T4858] tipc: Enabled bearer , priority 0 [ 110.528232][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.551699][ T4072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.704237][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.714827][ T4901] netlink: 68 bytes leftover after parsing attributes in process `syz.1.243'. [ 112.674986][ T25] net_ratelimit: 1 callbacks suppressed [ 112.675001][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.917277][ T4918] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 113.230988][ T4928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.301257][ T4928] udc-core: couldn't find an available UDC or it's busy [ 113.303512][ T4928] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.340602][ T4923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.249'. [ 113.367327][ T4918] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 113.397851][ T4927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.411199][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.460896][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.545988][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.777838][ T4944] netlink: 'syz.1.253': attribute type 3 has an invalid length. [ 114.780125][ T4944] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 114.782239][ T4944] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.253'. [ 114.965918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.978879][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.254921][ T4948] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 115.276055][ T4948] EXT4-fs (loop9): unable to read superblock [ 115.292022][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.301752][ T3322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.306604][ T3322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.325094][ T4946] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 115.454495][ T3322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.534124][ T4946] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.536651][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 115.596503][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 117.443674][ T26] audit: type=1326 audit(117.410:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.507983][ T26] audit: type=1326 audit(117.470:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.553508][ T26] audit: type=1326 audit(117.520:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.583700][ T26] audit: type=1326 audit(117.520:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.589782][ T26] audit: type=1326 audit(117.520:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.656799][ T4995] loop4: detected capacity change from 0 to 8 [ 117.669826][ T26] audit: type=1326 audit(117.520:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.689797][ T26] audit: type=1326 audit(117.520:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.706728][ T4995] SQUASHFS error: lzo decompression failed, data probably corrupt [ 117.708786][ T4995] SQUASHFS error: Failed to read block 0x91: -5 [ 117.712074][ T5006] loop2: detected capacity change from 0 to 16 [ 117.716831][ T4995] SQUASHFS error: Unable to read metadata cache entry [8f] [ 117.718622][ T4995] SQUASHFS error: Unable to read inode 0x11f [ 117.737154][ T26] audit: type=1326 audit(117.520:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.753078][ T26] audit: type=1326 audit(117.520:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.778908][ T26] audit: type=1326 audit(117.520:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7fc00000 [ 117.789114][ T5006] erofs: (device loop2): mounted with root inode @ nid 36. [ 118.156193][ T5022] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 118.278963][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 118.283550][ T5022] device bond1 entered promiscuous mode [ 118.285528][ T5022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.304204][ T5022] device ip6gretap1 entered promiscuous mode [ 118.306304][ T5022] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 118.500913][ T4152] net_ratelimit: 25 callbacks suppressed [ 118.500928][ T4152] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.731221][ T1706] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.007083][ T4152] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 119.167147][ T5035] loop2: detected capacity change from 0 to 512 [ 120.133908][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'. [ 120.176864][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 120.190297][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 120.209760][ T5035] netlink: 'syz.2.280': attribute type 16 has an invalid length. [ 120.213402][ T5035] netlink: 'syz.2.280': attribute type 17 has an invalid length. [ 120.322568][ T5035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.341581][ T5050] loop3: detected capacity change from 0 to 2048 [ 120.415312][ T5052] tipc: Started in network mode [ 120.416599][ T5052] tipc: Node identity ac14142f, cluster identity 4711 [ 120.438534][ T5052] tipc: New replicast peer: 0.0.0.0 [ 120.438757][ T5050] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.454481][ T5052] tipc: Enabled bearer , priority 10 [ 121.696407][ T4072] tipc: Node number set to 2886997039 [ 121.888762][ T5076] loop3: detected capacity change from 0 to 256 [ 121.933231][ T5082] loop4: detected capacity change from 0 to 1024 [ 121.951854][ T5076] exfat: Bad value for 'uid' [ 121.955364][ T5076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 123.111769][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 124.101170][ T5096] delete_channel: no stack [ 125.224154][ T5122] loop1: detected capacity change from 0 to 512 [ 125.242256][ T5123] netlink: 71 bytes leftover after parsing attributes in process `syz.0.310'. [ 125.387929][ T5122] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 125.390207][ T5122] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 125.424394][ T5122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c198, mo2=0002] [ 125.426537][ T5122] System zones: 1-12 [ 125.438085][ T5122] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.311: corrupted in-inode xattr [ 125.443584][ T5122] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.311: couldn't read orphan inode 15 (err -117) [ 125.448156][ T5122] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,minixdf,,errors=continue. Quota mode: none. [ 127.240306][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 127.399538][ T5146] loop2: detected capacity change from 0 to 128 [ 127.483388][ T5146] gfs2: gfs2 mount does not exist [ 129.997860][ T5169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 131.141960][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.419363][ T5192] Bluetooth: hci5: Frame reassembly failed (-84) [ 133.510297][ T5216] loop4: detected capacity change from 0 to 128 [ 133.550915][ T3606] Bluetooth: hci5: command 0x1003 tx timeout [ 133.552516][ T4038] Bluetooth: hci5: sending frame failed (-49) [ 135.657703][ T3322] Bluetooth: hci5: command 0x1001 tx timeout [ 135.662317][ T4038] Bluetooth: hci5: sending frame failed (-49) [ 136.711004][ T5240] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.819533][ T3322] Bluetooth: hci5: command 0x1009 tx timeout [ 138.231196][ T5260] 9pnet_virtio: no channels available for device syz [ 142.586068][ T5307] loop4: detected capacity change from 0 to 256 [ 143.436562][ T5304] device wlan0 entered promiscuous mode [ 143.438099][ T5304] device macsec1 entered promiscuous mode [ 143.595297][ T5304] device wlan0 left promiscuous mode [ 148.682047][ T5371] device ipip0 entered promiscuous mode [ 149.519849][ T5380] udc-core: couldn't find an available UDC or it's busy [ 149.534238][ T5380] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.699492][ T5389] udc-core: couldn't find an available UDC or it's busy [ 149.710633][ T5389] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.718418][ T5386] device wlan0 entered promiscuous mode [ 149.743450][ T5386] device macsec1 entered promiscuous mode [ 149.758865][ T5386] device wlan0 left promiscuous mode [ 150.138487][ T5403] loop4: detected capacity change from 0 to 512 [ 151.249404][ T5403] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.397: casefold flag without casefold feature [ 151.254467][ T5403] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.397: couldn't read orphan inode 15 (err -117) [ 151.261452][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.934594][ T5438] netlink: 'syz.2.403': attribute type 4 has an invalid length. [ 153.999385][ T5438] netlink: 'syz.2.403': attribute type 4 has an invalid length. [ 154.080121][ T5444] device vlan2 entered promiscuous mode [ 155.172996][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 155.482880][ T5444] device hsr_slave_1 left promiscuous mode [ 155.531684][ T5459] kernel read not supported for file /L (pid: 5459 comm: syz.4.410) [ 155.793360][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 158.065407][ T5482] loop2: detected capacity change from 0 to 2048 [ 159.545046][ T5482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.661941][ T5513] kernel read not supported for file /L (pid: 5513 comm: syz.3.428) [ 160.603593][ T5521] device ipip0 entered promiscuous mode [ 165.070671][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 165.072964][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 165.810419][ T5575] sctp: [Deprecated]: syz.4.444 (pid 5575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.810419][ T5575] Use struct sctp_sack_info instead [ 166.922021][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 166.922035][ T26] audit: type=1326 audit(166.850:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 166.929133][ T26] audit: type=1326 audit(166.880:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 167.147059][ T26] audit: type=1326 audit(166.880:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 167.170691][ T26] audit: type=1326 audit(166.880:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 167.328818][ T26] audit: type=1326 audit(166.880:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 168.067073][ T26] audit: type=1326 audit(166.880:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 168.090958][ T26] audit: type=1326 audit(166.880:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 168.098859][ T26] audit: type=1326 audit(166.880:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 168.111376][ T26] audit: type=1326 audit(166.880:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 168.173510][ T26] audit: type=1326 audit(166.880:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x7ffc0000 [ 168.181975][ T5591] loop2: detected capacity change from 0 to 512 [ 169.274609][ T4075] Bluetooth: hci3: command 0x0406 tx timeout [ 169.300847][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 169.302486][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 169.303990][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 169.305490][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 170.075158][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.450: casefold flag without casefold feature [ 170.095472][ T5610] netlink: 'syz.0.454': attribute type 21 has an invalid length. [ 170.096050][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.450: couldn't read orphan inode 15 (err -117) [ 170.097659][ T5610] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 170.111358][ T5591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.300641][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 171.302863][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 172.070181][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 172.070195][ T26] audit: type=1326 audit(172.030:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.3.459" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae244d28 code=0x0 [ 172.164132][ T5629] loop1: detected capacity change from 0 to 256 [ 172.232114][ T5629] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 173.713305][ T5640] loop4: detected capacity change from 0 to 2048 [ 173.838995][ T5640] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.250610][ T5668] sctp: [Deprecated]: syz.3.470 (pid 5668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.250610][ T5668] Use struct sctp_sack_info instead [ 175.820771][ T5672] netlink: 'syz.3.472': attribute type 21 has an invalid length. [ 175.822761][ T5672] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 175.927508][ T5672] netlink: 512 bytes leftover after parsing attributes in process `syz.3.472'. [ 176.059539][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.318224][ T5677] bond0: (slave rose0): Enslaving as an active interface with an up link [ 177.830624][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'. [ 177.833106][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 177.838916][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 178.110649][ T26] audit: type=1326 audit(178.040:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.2.480" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x0 [ 180.856923][ T5719] sctp: [Deprecated]: syz.4.487 (pid 5719) Use of int in max_burst socket option. [ 180.856923][ T5719] Use struct sctp_assoc_value instead [ 180.961901][ T5725] netlink: 'syz.2.490': attribute type 21 has an invalid length. [ 180.963884][ T5725] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 180.984884][ T5725] netlink: 512 bytes leftover after parsing attributes in process `syz.2.490'. [ 182.096715][ T5737] udc-core: couldn't find an available UDC or it's busy [ 182.110627][ T5737] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.156788][ T5737] loop3: detected capacity change from 0 to 128 [ 182.240229][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 182.245347][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 182.368675][ T5746] loop4: detected capacity change from 0 to 512 [ 182.439508][ T5746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.497: inode #1: comm syz.4.497: iget: illegal inode # [ 182.447419][ T5746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.497: error while reading EA inode 1 err=-117 [ 182.456221][ T5746] EXT4-fs (loop4): 1 orphan inode deleted [ 182.457684][ T5746] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 183.509568][ T5757] loop2: detected capacity change from 0 to 256 [ 184.490769][ T5757] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 184.548324][ T5766] loop4: detected capacity change from 0 to 512 [ 184.575295][ T5766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.733433][ T5766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 186.735735][ T5766] System zones: 1-12 [ 186.771209][ T5766] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.787268][ T5766] EXT4-fs (loop4): 1 truncate cleaned up [ 186.788826][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 186.859648][ T4228] tipc: Subscription rejected, illegal request [ 187.118504][ T21] Bluetooth: hci3: command 0x0405 tx timeout [ 189.635955][ T5792] loop2: detected capacity change from 0 to 512 [ 189.698869][ T5790] loop1: detected capacity change from 0 to 4096 [ 189.752159][ T5790] ntfs3: Unknown parameter 'case' [ 189.894684][ T5792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.241261][ T5792] EXT4-fs (loop2): 1 truncate cleaned up [ 190.244837][ T5792] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 193.947078][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.382585][ T5887] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 200.385250][ T5887] F2FS-fs (loop3): Unable to read 1th superblock [ 200.386902][ T5887] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 200.389417][ T5887] F2FS-fs (loop3): Unable to read 2th superblock [ 201.445093][ T5888] delete_channel: no stack [ 201.863436][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 201.890973][ T5893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.697021][ T5919] netlink: 36 bytes leftover after parsing attributes in process `syz.3.539'. [ 203.812390][ T5921] sock: sock_set_timeout: `syz.0.540' (pid 5921) tries to set negative timeout [ 204.470846][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 204.517890][ T5927] loop3: detected capacity change from 0 to 8 [ 204.593561][ T5927] SQUASHFS error: xz decompression failed, data probably corrupt [ 204.595574][ T5927] SQUASHFS error: Failed to read block 0x91: -5 [ 204.597171][ T5927] SQUASHFS error: Unable to read metadata cache entry [8f] [ 204.599032][ T5927] SQUASHFS error: Unable to read inode 0x11f [ 206.875879][ T5957] loop4: detected capacity change from 0 to 8 [ 207.221711][ T5957] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 207.550324][ T5956] cramfs: Error -5 while decompressing! [ 207.552182][ T5956] cramfs: 00000000bae0b042(26)->000000005f9f31c8(4096) [ 207.554004][ T5956] cramfs: Error -3 while decompressing! [ 207.555463][ T5956] cramfs: 00000000ee19852f(26)->0000000060626fde(4096) [ 207.557095][ T5956] cramfs: Error -3 while decompressing! [ 207.558369][ T5956] cramfs: 0000000062b2ea1e(16)->00000000e3f849fb(4096) [ 207.560159][ T5956] cramfs: Error -5 while decompressing! [ 207.561681][ T5956] cramfs: 00000000bae0b042(26)->000000005f9f31c8(4096) [ 207.789828][ T5960] loop3: detected capacity change from 0 to 2048 [ 209.403689][ T5975] loop1: detected capacity change from 0 to 64 [ 209.604260][ T5960] UDF-fs: iocharset euc-j [ 209.604260][ T5960] not found [ 210.995541][ T5993] loop3: detected capacity change from 0 to 256 [ 211.023094][ T5994] netlink: 'syz.2.563': attribute type 7 has an invalid length. [ 211.025074][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 212.368534][ T6002] cgroup2: Unknown parameter 'pids_localevents' [ 213.347503][ T6005] bridge0: port 3(syz_tun) entered blocking state [ 213.349367][ T6005] bridge0: port 3(syz_tun) entered disabled state [ 213.373857][ T5993] FAT-fs (loop3): Directory bread(block 64) failed [ 213.375609][ T5993] FAT-fs (loop3): Directory bread(block 65) failed [ 213.405237][ T5993] FAT-fs (loop3): Directory bread(block 66) failed [ 213.421333][ T5993] FAT-fs (loop3): Directory bread(block 67) failed [ 213.423118][ T5993] FAT-fs (loop3): Directory bread(block 68) failed [ 213.424709][ T5993] FAT-fs (loop3): Directory bread(block 69) failed [ 213.426297][ T5993] FAT-fs (loop3): Directory bread(block 70) failed [ 213.427958][ T5993] FAT-fs (loop3): Directory bread(block 71) failed [ 213.429608][ T5993] FAT-fs (loop3): Directory bread(block 72) failed [ 213.433199][ T6005] device syz_tun entered promiscuous mode [ 213.435957][ T6005] bridge0: port 3(syz_tun) entered blocking state [ 213.437944][ T6005] bridge0: port 3(syz_tun) entered forwarding state [ 213.463270][ T5993] FAT-fs (loop3): Directory bread(block 73) failed [ 213.484647][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 213.523440][ T6012] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 213.764145][ T6014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.949816][ T6027] 9pnet: Insufficient options for proto=fd [ 217.481932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.491563][ T5118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.026983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.204613][ T6072] loop4: detected capacity change from 0 to 256 [ 218.241375][ T6072] exfat: Deprecated parameter 'namecase' [ 218.251033][ T6072] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 218.252715][ T6075] device wireguard0 entered promiscuous mode [ 218.500853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.503323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.819769][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.822626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.907680][ T295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.910271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.360762][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.641712][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.644461][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.647060][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.649517][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.652298][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.654843][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.657461][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.660007][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.662709][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 219.665365][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 223.045596][ T5118] net_ratelimit: 12 callbacks suppressed [ 223.045612][ T5118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.066317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.212528][ T6112] loop3: detected capacity change from 0 to 8192 [ 223.284697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.327444][ T6112] loop3: p1 p2 p3 [ 223.442423][ T6134] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 223.444343][ T6134] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 224.100699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.103359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.150786][ T5118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.347216][ T6136] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 224.392696][ T6136] EXT4-fs (loop3): unable to read superblock [ 224.471572][ T4302] udevd[4302]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 224.477883][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 224.499102][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 224.502311][ T4210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.504627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.507104][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.509405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.652605][ T6152] loop3: detected capacity change from 0 to 256 [ 226.528982][ T26] audit: type=1326 audit(226.490:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 226.561075][ T26] audit: type=1326 audit(226.530:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.324573][ T26] audit: type=1326 audit(227.290:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.370617][ T26] audit: type=1326 audit(227.310:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.393634][ T26] audit: type=1326 audit(227.310:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.432331][ T26] audit: type=1326 audit(227.310:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.437573][ T26] audit: type=1326 audit(227.310:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.466797][ T26] audit: type=1326 audit(227.310:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.502669][ T26] audit: type=1326 audit(227.310:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.508168][ T26] audit: type=1326 audit(227.310:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 227.891239][ T6181] netlink: 'syz.3.615': attribute type 3 has an invalid length. [ 227.893244][ T6181] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 227.895162][ T6181] __nla_validate_parse: 48 callbacks suppressed [ 227.895199][ T6181] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.615'. [ 229.546364][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.622'. [ 229.548580][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.622'. [ 229.715192][ T6203] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 229.715192][ T6203] [ 231.581504][ T6226] loop2: detected capacity change from 0 to 2048 [ 232.307586][ T6231] netlink: 'syz.4.632': attribute type 3 has an invalid length. [ 232.309400][ T6231] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 232.311383][ T6231] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.632'. [ 232.988814][ T6226] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 232.991281][ T6226] UDF-fs: Scanning with blocksize 512 failed [ 232.997586][ T6226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.019918][ T6221] loop1: detected capacity change from 0 to 4096 [ 233.072477][ T6237] loop4: detected capacity change from 0 to 164 [ 233.132638][ T6221] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 233.179147][ T6221] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 233.454920][ T6221] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 234.232275][ T6221] device wlan1 entered promiscuous mode [ 234.238907][ T6221] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.508899][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 235.432247][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 235.436642][ T6285] udc-core: couldn't find an available UDC or it's busy [ 235.438367][ T6285] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.459337][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.654'. [ 235.481735][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.654'. [ 235.812157][ T6295] loop4: detected capacity change from 0 to 512 [ 236.689307][ T6295] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 236.696630][ T6295] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 237.016818][ T6295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c198, mo2=0002] [ 237.020198][ T6295] System zones: 1-12 [ 237.098702][ T6295] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.656: corrupted in-inode xattr [ 237.102698][ T6295] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.656: couldn't read orphan inode 15 (err -117) [ 237.112320][ T6295] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,minixdf,,errors=continue. Quota mode: none. [ 241.694189][ T6351] loop1: detected capacity change from 0 to 256 [ 242.041191][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.043787][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.046308][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.048704][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.051237][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.053635][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.056184][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.058851][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.061330][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.063883][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 242.642815][ T6351] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.736046][ T6351] FAT-fs (loop1): Directory bread(block 64) failed [ 242.737742][ T6351] FAT-fs (loop1): Directory bread(block 65) failed [ 242.739417][ T6351] FAT-fs (loop1): Directory bread(block 66) failed [ 242.741190][ T6351] FAT-fs (loop1): Directory bread(block 67) failed [ 242.742989][ T6351] FAT-fs (loop1): Directory bread(block 68) failed [ 242.744654][ T6351] FAT-fs (loop1): Directory bread(block 69) failed [ 242.746389][ T6351] FAT-fs (loop1): Directory bread(block 70) failed [ 242.748007][ T6351] FAT-fs (loop1): Directory bread(block 71) failed [ 242.749598][ T6351] FAT-fs (loop1): Directory bread(block 72) failed [ 242.751384][ T6351] FAT-fs (loop1): Directory bread(block 73) failed [ 242.991138][ T6361] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 243.779688][ T3322] Bluetooth: hci3: command 0x0405 tx timeout [ 247.289190][ T6391] ODEBUG: Out of memory. ODEBUG disabled [ 248.611832][ T6407] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 248.613239][ T6409] net_ratelimit: 6 callbacks suppressed [ 248.613252][ T6409] IPv6: addrconf: prefix option has invalid lifetime [ 248.617628][ T6409] IPv6: addrconf: prefix option has invalid lifetime [ 248.630889][ T6407] bridge0: port 3(syz_tun) entered disabled state [ 248.632704][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.649766][ T6409] fuse: Bad value for 'fd' [ 248.687487][ T6407] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 248.691267][ T6407] bridge0: port 3(syz_tun) entered blocking state [ 248.693097][ T6407] bridge0: port 3(syz_tun) entered forwarding state [ 248.695962][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.697763][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.522611][ T6407] team0: Port device bridge0 added [ 249.525041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.812632][ T6428] __nla_validate_parse: 43 callbacks suppressed [ 250.812647][ T6428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 250.839801][ T6429] loop1: detected capacity change from 0 to 1024 [ 250.887344][ T6428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 251.176675][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.022348][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.042810][ T6440] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.044969][ T6440] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.490827][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.492646][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.647912][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.649747][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.688862][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 252.700663][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.520663][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.522461][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.525473][ T6440] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.527504][ T6440] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.580081][ T6460] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 253.601001][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.603138][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 253.612826][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.614916][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.421170][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.455480][ T6466] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 254.458887][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.460870][ T6466] bridge0: port 2(bridge_slave_1) entered listening state [ 254.462774][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.464503][ T6466] bridge0: port 1(bridge_slave_0) entered listening state [ 254.660696][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 254.662657][ T6429] hfsplus: request for non-existent node 33423360 in B*Tree [ 254.676029][ T6466] team0: Port device bridge0 added [ 255.727945][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 255.755846][ T6479] udc-core: couldn't find an available UDC or it's busy [ 255.757568][ T6479] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 257.014974][ T6493] loop3: detected capacity change from 0 to 64 [ 257.299018][ T6498] xt_hashlimit: max too large, truncated to 1048576 [ 260.307415][ T6527] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 260.476644][ T6525] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.510723][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.512814][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.540191][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 262.430126][ T6534] netlink: 'syz.2.723': attribute type 10 has an invalid length. [ 262.452041][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.454169][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.457184][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.458945][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.489745][ T6534] team0: Port device bridge0 added [ 262.601696][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.611346][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 262.695580][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.735'. [ 262.698628][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 264.885283][ T6570] bridge0: port 3(syz_tun) entered blocking state [ 264.886928][ T6570] bridge0: port 3(syz_tun) entered disabled state [ 264.889320][ T6570] device syz_tun entered promiscuous mode [ 264.926839][ T6570] bridge0: port 3(syz_tun) entered blocking state [ 264.928356][ T6570] bridge0: port 3(syz_tun) entered forwarding state [ 269.843310][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'. [ 269.845505][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 269.864588][ T6712] netlink: 'syz.1.754': attribute type 10 has an invalid length. [ 269.891438][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.893245][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.931203][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.933079][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.934983][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.936760][ T6712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.940608][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 269.942706][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 269.962665][ T6712] device bridge0 entered promiscuous mode [ 269.969498][ T6712] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 269.985293][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 269.992157][ T6714] bridge0: port 3(syz_tun) entered blocking state [ 270.000797][ T6714] bridge0: port 3(syz_tun) entered disabled state [ 270.024227][ T6714] device syz_tun entered promiscuous mode [ 270.078705][ T6718] netlink: 64 bytes leftover after parsing attributes in process `syz.4.752'. [ 270.414606][ T6714] bridge0: port 3(syz_tun) entered blocking state [ 270.416205][ T6714] bridge0: port 3(syz_tun) entered forwarding state [ 275.302370][ T6756] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 276.972295][ T6771] netlink: 'syz.2.769': attribute type 4 has an invalid length. [ 277.064905][ T6775] loop3: detected capacity change from 0 to 256 [ 277.091092][ T6775] exfat: Deprecated parameter 'namecase' [ 277.131890][ T6775] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 278.221501][ T6794] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 278.351726][ T6794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.494114][ T6803] loop1: detected capacity change from 0 to 64 [ 280.186638][ T6794] bond3: (slave ip6gretap2): making interface the new active one [ 280.189427][ T6794] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 280.195260][ T6807] device vlan3 entered promiscuous mode [ 280.196645][ T6807] device bond3 entered promiscuous mode [ 280.198429][ T6807] device ip6gretap2 entered promiscuous mode [ 280.223729][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 280.289819][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 280.395381][ T6817] netlink: 'syz.0.786': attribute type 4 has an invalid length. [ 284.682618][ T13] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 284.685000][ T13] Bluetooth: hci2: Injecting HCI hardware error event [ 284.701838][ T4028] Bluetooth: hci2: hardware error 0x00 [ 285.302015][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.303835][ C1] bridge0: topology change detected, propagating [ 285.305492][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.307212][ C1] bridge0: topology change detected, propagating [ 287.956562][ T6937] loop4: detected capacity change from 0 to 64 [ 288.124361][ T6909] netlink: 116 bytes leftover after parsing attributes in process `syz.0.802'. [ 288.143060][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.378381][ T6967] loop3: detected capacity change from 0 to 512 [ 288.430095][ T6967] EXT4-fs (loop3): journaled quota format not specified [ 288.522466][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 293.550144][ T7086] overlayfs: missing 'lowerdir' [ 294.443589][ T7093] capability: warning: `syz.3.821' uses deprecated v2 capabilities in a way that may be insecure [ 296.377569][ T7106] udc-core: couldn't find an available UDC or it's busy [ 296.379416][ T7106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 296.455183][ T7110] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.458658][ T7110] FAT-fs (loop1): unable to read boot sector [ 297.488913][ T7124] loop1: detected capacity change from 0 to 128 [ 297.508547][ T7124] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.523100][ T7124] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 297.527270][ T7124] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 297.533455][ T7124] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 297.540665][ T7124] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.840: Directory block failed checksum [ 297.546209][ T7124] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 297.550022][ T7124] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 297.647918][ T7124] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 297.731470][ T7124] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 297.737719][ T7129] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 297.750757][ T7129] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 298.327391][ T7124] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 298.341345][ T7124] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 298.364204][ T7124] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 298.367836][ T7124] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 298.572549][ T7129] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 298.576434][ T7129] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 298.587114][ T7145] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.840: No space for directory leaf checksum. Please run e2fsck -D. [ 298.591801][ T7145] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.840: checksumming directory block 0 [ 299.551512][ T7161] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.649943][ T7141] loop3: detected capacity change from 0 to 32768 [ 299.802537][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 301.172578][ T7141] (syz.3.843,7141,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 301.189668][ T7141] (syz.3.843,7141,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 301.722360][ T7141] (syz.3.843,7141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0x8a3e433b. Applying ECC. [ 302.328952][ T7141] (syz.3.843,7141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0xa0996707. Applying ECC. [ 302.413252][ T7141] (syz.3.843,7141,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x8a8daa09 [ 302.562669][ T7141] (syz.3.843,7141,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 25 [ 302.565433][ T7141] (syz.3.843,7141,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 302.579493][ T7141] (syz.3.843,7141,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 302.603516][ T7141] (syz.3.843,7141,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 302.609269][ T7141] (syz.3.843,7141,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 302.609295][ T7141] (syz.3.843,7141,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 303.254023][ T7141] (syz.3.843,7141,1):ocfs2_initialize_super:2278 ERROR: status = -22 [ 303.254077][ T7141] (syz.3.843,7141,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 303.276933][ T7190] loop4: detected capacity change from 0 to 512 [ 303.347249][ T7194] netlink: 'syz.2.859': attribute type 3 has an invalid length. [ 303.413153][ T7190] EXT4-fs (loop4): Ignoring removed orlov option [ 303.427892][ T7190] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.858: Attempting to read directory block (0) that is past i_size (256) [ 303.451629][ T7190] EXT4-fs (loop4): Remounting filesystem read-only [ 303.453602][ T7190] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 303.455676][ T7190] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,auto_da_alloc,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 304.507650][ T7212] udc-core: couldn't find an available UDC or it's busy [ 304.509507][ T7212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 304.524001][ T7212] udc-core: couldn't find an available UDC or it's busy [ 304.525838][ T7212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 304.618443][ T7214] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 304.622459][ T7214] device syz_tun entered promiscuous mode [ 304.642024][ T7214] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 304.877749][ T7225] loop4: detected capacity change from 0 to 512 [ 304.884894][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 304.889796][ T7221] device macsec0 entered promiscuous mode [ 304.929432][ T7225] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.869: bad orphan inode 13 [ 304.932698][ T7225] ext4_test_bit(bit=12, block=4) = 1 [ 304.934195][ T7225] is_bad_inode(inode)=0 [ 304.935350][ T7225] NEXT_ORPHAN(inode)=0 [ 304.937545][ T7225] max_ino=32 [ 304.938425][ T7225] i_nlink=1 [ 304.942708][ T7225] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.058433][ T7232] loop1: detected capacity change from 0 to 2048 [ 306.089098][ T7232] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 307.199852][ T7249] netlink: 80 bytes leftover after parsing attributes in process `syz.0.876'. [ 307.202217][ T7249] netlink: 80 bytes leftover after parsing attributes in process `syz.0.876'. [ 307.205618][ T7249] netlink: 80 bytes leftover after parsing attributes in process `syz.0.876'. [ 307.627406][ T7255] device bridge_slave_1 left promiscuous mode [ 307.755355][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.455624][ T7255] device bridge_slave_0 left promiscuous mode [ 308.476051][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.432293][ T7272] loop3: detected capacity change from 0 to 128 [ 309.551664][ T7274] loop1: detected capacity change from 0 to 1024 [ 310.983535][ T7274] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 311.243988][ T7286] device sit1 entered promiscuous mode [ 311.323313][ T7286] device netdevsim0 entered promiscuous mode [ 311.327304][ T7286] device netdevsim0 left promiscuous mode [ 312.734400][ T7293] netlink: 'syz.2.887': attribute type 12 has an invalid length. [ 312.993133][ T7310] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 313.024385][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.033245][ T7310] bond0: (slave team0): Enslaving as an active interface with an up link [ 313.141490][ T7313] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 315.396045][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.724900][ T7328] loop4: detected capacity change from 0 to 512 [ 315.797067][ T7328] EXT4-fs (loop4): journaled quota format not specified [ 318.702479][ T7354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.704684][ T7354] IPv6: NLM_F_CREATE should be set when creating new route [ 320.828131][ T7375] xt_ipcomp: unknown flags B [ 320.829081][ T7376] loop4: detected capacity change from 0 to 8 [ 320.923646][ T7376] SQUASHFS error: zlib decompression failed, data probably corrupt [ 320.925778][ T7376] SQUASHFS error: Failed to read block 0x9b: -5 [ 320.927463][ T7376] SQUASHFS error: Unable to read metadata cache entry [99] [ 320.929551][ T7376] SQUASHFS error: Unable to read inode 0x127 [ 321.028486][ T7376] xt_TCPMSS: Only works on TCP SYN packets [ 321.138022][ T7354] bridge0: port 3(syz_tun) entered disabled state [ 321.198358][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.201297][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.234571][ T7354] tipc: Resetting bearer [ 322.892583][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.930157][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.467209][ T7354] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.469448][ T7354] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.472049][ T7354] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.474187][ T7354] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.667819][ T7354] device ipip0 left promiscuous mode [ 323.688222][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'. [ 323.781627][ C0] Unknown status report in ack skb [ 323.893944][ T7405] device bond_slave_0 entered promiscuous mode [ 323.895622][ T7405] device bond_slave_1 entered promiscuous mode [ 323.910606][ T7405] device vlan0 entered promiscuous mode [ 323.912062][ T7405] device bond0 entered promiscuous mode [ 323.933423][ T7405] device bond0 left promiscuous mode [ 323.935138][ T7405] device bond_slave_0 left promiscuous mode [ 323.936673][ T7405] device bond_slave_1 left promiscuous mode [ 324.935076][ T7418] fuse: Bad value for 'fd' [ 325.218789][ T7424] tmpfs: Bad value for 'mpol' [ 326.467642][ T7435] loop4: detected capacity change from 0 to 512 [ 326.523468][ T7435] FAT-fs (loop4): bogus logical sector size 2176 [ 326.525095][ T7435] FAT-fs (loop4): Can't find a valid FAT filesystem [ 328.148247][ T7451] netlink: 68 bytes leftover after parsing attributes in process `syz.0.934'. [ 328.155020][ T7446] netlink: 80 bytes leftover after parsing attributes in process `syz.1.932'. [ 328.167839][ T7446] netlink: 6 bytes leftover after parsing attributes in process `syz.1.932'. [ 328.376072][ T7446] IPVS: Unknown mcast interface: vcan0 [ 328.406623][ T7453] loop3: detected capacity change from 0 to 1024 [ 329.326719][ T7453] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.366237][ T7467] loop1: detected capacity change from 0 to 1024 [ 331.751951][ T616] hfsplus: b-tree write err: -5, ino 3 [ 331.758785][ T4024] hfsplus: node 4:3 still has 7 user(s)! [ 333.922229][ T7502] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 337.008541][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 337.008553][ T26] audit: type=1326 audit(336.961:181): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.963" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcad5d28 code=0x0 [ 339.351692][ T7557] loop4: detected capacity change from 0 to 256 [ 339.496980][ T7559] loop3: detected capacity change from 0 to 1024 [ 339.640386][ T7559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.683355][ T7559] raw_sendmsg: syz.3.970 forgot to set AF_INET. Fix it! [ 339.711912][ T7561] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.714611][ T7561] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.716852][ T7561] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.718998][ T7561] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.744559][ T7561] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 339.750679][ T7559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.970'. [ 339.754074][ T7559] netlink: 'syz.3.970': attribute type 10 has an invalid length. [ 339.771006][ T7559] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 343.328890][ T26] audit: type=1326 audit(343.291:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.336823][ T26] audit: type=1326 audit(343.301:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.342810][ T7622] fuse: Bad value for 'fd' [ 343.352533][ T26] audit: type=1326 audit(343.311:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.357742][ T26] audit: type=1326 audit(343.311:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.393692][ T26] audit: type=1326 audit(343.311:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.399122][ T26] audit: type=1326 audit(343.311:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.492413][ T26] audit: type=1326 audit(343.311:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 343.517622][ T26] audit: type=1326 audit(343.331:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 344.791022][ T26] audit: type=1326 audit(343.331:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 344.894176][ T26] audit: type=1326 audit(343.331:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 346.990379][ T7665] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 346.992579][ T7665] device hsr0 entered promiscuous mode [ 346.995093][ T7665] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.293933][ T7671] loop4: detected capacity change from 0 to 256 [ 349.396605][ T7671] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 349.475481][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 349.477698][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.593068][ T7674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.431919][ T7691] fuse: Bad value for 'fd' [ 354.551734][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 355.831228][ T7742] loop4: detected capacity change from 0 to 16 [ 357.333057][ T7742] erofs: Unknown parameter '' [ 368.171248][ T7845] 8021q: VLANs not supported on ip6tnl0 [ 369.819426][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 369.819470][ T26] audit: type=1326 audit(369.761:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 370.244629][ T26] audit: type=1326 audit(369.761:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffba67f254 code=0x7ffc0000 [ 370.250178][ T26] audit: type=1326 audit(369.771:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 370.276802][ T26] audit: type=1326 audit(369.771:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 370.321623][ T26] audit: type=1326 audit(369.771:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 370.327060][ T26] audit: type=1326 audit(369.771:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba680d28 code=0x7ffc0000 [ 370.484989][ T7855] bond0: (slave wlan1): Releasing backup interface [ 372.051444][ T7876] delete_channel: no stack [ 376.883139][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.085701][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 377.088552][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 389.360326][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1096'. [ 389.856211][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 391.691173][ T4076] Bluetooth: hci5: command 0x0409 tx timeout [ 392.657940][ T8025] netlink: 'syz.4.1102': attribute type 10 has an invalid length. [ 392.659943][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1102'. [ 392.763872][ T7862] device syz_tun left promiscuous mode [ 392.765114][ T7862] bridge0: port 3(syz_tun) entered disabled state [ 392.803419][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.805324][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.808110][ T7988] device bridge_slave_0 entered promiscuous mode [ 392.813162][ T8030] bridge0: port 3(syz_tun) entered disabled state [ 392.815048][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.868304][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.870151][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.873347][ T7988] device bridge_slave_1 entered promiscuous mode [ 393.713027][ T4075] Bluetooth: hci5: command 0x041b tx timeout [ 393.767416][ T8030] device syz_tun left promiscuous mode [ 393.768896][ T8030] bridge0: port 3(syz_tun) entered disabled state [ 393.803973][ T8030] device bridge_slave_1 left promiscuous mode [ 393.805849][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.848697][ T8030] device bridge_slave_0 left promiscuous mode [ 393.850137][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.952651][ T8030] team0: Port device bridge0 removed [ 394.082672][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.085721][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 394.092402][ T8044] device bond_slave_0 entered promiscuous mode [ 394.094084][ T8044] device bond_slave_1 entered promiscuous mode [ 394.095570][ T8044] device vxlan0 entered promiscuous mode [ 394.099487][ T8044] device macvtap1 entered promiscuous mode [ 394.103624][ T8044] device bond0 entered promiscuous mode [ 394.109780][ T8044] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 394.153512][ T8048] device bond0 left promiscuous mode [ 394.155661][ T8048] device bond_slave_0 left promiscuous mode [ 394.157293][ T8048] device bond_slave_1 left promiscuous mode [ 394.158807][ T8048] device vxlan0 left promiscuous mode [ 394.221170][ T8045] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 394.252100][ T8045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.269867][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.296226][ T7988] team0: Port device team_slave_0 added [ 394.300407][ T7988] team0: Port device team_slave_1 added [ 394.387701][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.389405][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.410573][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.414509][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.416108][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.450621][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.033535][ T7988] device hsr_slave_0 entered promiscuous mode [ 395.372293][ T7988] device hsr_slave_1 entered promiscuous mode [ 395.393032][ T8063] delete_channel: no stack [ 395.401320][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.403138][ T7988] Cannot create hsr debugfs directory [ 395.414170][ T8065] delete_channel: no stack [ 395.780757][ T4036] Bluetooth: hci5: command 0x040f tx timeout [ 396.071284][ T8079] overlayfs: failed to clone upperpath [ 397.363552][ T26] audit: type=1326 audit(397.321:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.369050][ T26] audit: type=1326 audit(397.321:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.405820][ T26] audit: type=1326 audit(397.361:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.431739][ T26] audit: type=1326 audit(397.381:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.437063][ T26] audit: type=1326 audit(397.381:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.493929][ T8089] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 397.496466][ T8089] Mem abort info: [ 397.497443][ T8089] ESR = 0x0000000086000006 [ 397.498612][ T8089] EC = 0x21: IABT (current EL), IL = 32 bits [ 397.500078][ T8089] SET = 0, FnV = 0 [ 397.501163][ T8089] EA = 0, S1PTW = 0 [ 397.502153][ T8089] FSC = 0x06: level 2 translation fault [ 397.503538][ T8089] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000124732000 [ 397.505361][ T8089] [0000000000000000] pgd=080000012d9c1003, p4d=080000012d9c1003, pud=080000012b16c003, pmd=0000000000000000 [ 397.505711][ T26] audit: type=1326 audit(397.401:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.508414][ T8089] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 397.515276][ T8089] Modules linked in: [ 397.516292][ T8089] CPU: 0 PID: 8089 Comm: syz.0.1128 Not tainted 5.15.179-syzkaller #0 [ 397.518390][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.520917][ T8089] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 397.522902][ T8089] pc : 0x0 [ 397.523640][ T8089] lr : bond_xdp_xmit+0x310/0x4f4 [ 397.524869][ T8089] sp : ffff8000209272a0 [ 397.525950][ T8089] x29: ffff8000209273e0 x28: 1ffff00004124e72 x27: 1ffff00004124e6e [ 397.527960][ T8089] x26: dfff800000000000 x25: ffff0000e58e8000 x24: ffff800020927360 [ 397.530026][ T8089] x23: ffff800020927340 x22: ffff800012b37878 x21: fffffbffeff95de0 [ 397.530522][ T26] audit: type=1326 audit(397.401:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.532115][ T8089] x20: ffff0000ee8f8140 x19: 0000000000000000 x18: 0000000000000200 [ 397.539701][ T8089] x17: 0000000000000002 x16: ffff8000082eb59c x15: 0000000000000001 [ 397.541809][ T8089] x14: ffff0000ce6c0000 x13: 0000000000ff0100 x12: 0000000000080000 [ 397.543878][ T8089] x11: 0000000000000454 x10: ffff800021cfa000 x9 : 0000000000000455 [ 397.544524][ T7988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 397.545965][ T8089] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 397.549773][ T8089] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [ 397.551864][ T8089] x2 : ffff800020927340 x1 : 0000000000000001 x0 : ffff0000e58e8000 [ 397.553920][ T8089] Call trace: [ 397.554810][ T8089] 0x0 [ 397.555532][ T8089] bq_xmit_all+0xd20/0x1140 [ 397.556688][ T8089] __dev_flush+0xc8/0x1a0 [ 397.557767][ T8089] xdp_do_flush+0x14/0x28 [ 397.558090][ T26] audit: type=1326 audit(397.401:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.558892][ T8089] tun_get_user+0x27d8/0x3774 [ 397.565467][ T8089] tun_chr_write_iter+0xfc/0x20c [ 397.566700][ T8089] vfs_write+0x884/0xb44 [ 397.567782][ T8089] ksys_write+0x15c/0x26c [ 397.568886][ T8089] __arm64_sys_write+0x7c/0x90 [ 397.570103][ T8089] invoke_syscall+0x98/0x2b8 [ 397.571309][ T8089] el0_svc_common+0x138/0x258 [ 397.572489][ T8089] do_el0_svc+0x58/0x14c [ 397.573547][ T8089] el0_svc+0x7c/0x1f0 [ 397.574605][ T8089] el0t_64_sync_handler+0x84/0xe4 [ 397.574627][ T26] audit: type=1326 audit(397.401:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 397.575880][ T8089] el0t_64_sync+0x1a0/0x1a4 [ 397.575903][ T8089] Code: bad PC value [ 397.575911][ T8089] ---[ end trace b2fe99178bfe5021 ]--- [ 397.590510][ T26] audit: type=1326 audit(397.401:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8147fd28 code=0x7ffc0000 [ 398.125942][ T8089] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 398.127879][ T8089] SMP: stopping secondary CPUs [ 398.129117][ T8089] Kernel Offset: disabled [ 398.130175][ T8089] CPU features: 0x8,000081c1,21302e40 [ 398.131525][ T8089] Memory Limit: none [ 398.619773][ T8089] Rebooting in 86400 seconds..