last executing test programs: 13.525683986s ago: executing program 3 (id=413): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1, 0x1, "d64724f6257e43b341dc333940c1ca0000000000002000", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 12.394104602s ago: executing program 3 (id=422): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000a80)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030303030342c726f6f746469722d30303030303030303030303030303030303030342c696f636861727365743d63703835352c4b69643dc5dad0927263587677dce42e8b4d27efdbf1b0144a2a01f76d0adaf979dca0fc772094f530dc965718a3c0a76b4dcda94da4e43eafb87bbca77ac7367f16e50978b66f811a38c7e85ca290834558c1a0c7c21cb97052208ac4f10f3ad9f1fc7904a30d77749603b2bac1096a", @ANYRESDEC=0xee01, @ANYBLOB=',gid=ignore,iocharset=cp865,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000), 0x4, 0x51b, &(0x7f0000001a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 11.946351572s ago: executing program 4 (id=430): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x79, 0xa0, 0xdd, 0x40, 0x1199, 0x68a3, 0xe2e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x7, 0x10, 0x68, [{{0x9, 0x4, 0x36, 0x6, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0x3, 0x10, 0x9}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200660d000000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x3, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x20}]}}]}, 0x4c}}, 0x0) ioctl$KDFONTOP_SET(r0, 0x4bfb, &(0x7f0000000040)={0x0, 0x0, 0xe, 0xb, 0x200, 0x0}) 11.074496903s ago: executing program 3 (id=433): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) keyctl$chown(0x4, r2, 0x0, 0xee00) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) 10.297002754s ago: executing program 3 (id=435): set_mempolicy(0x6, 0x0, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='\a', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40418c4}, 0x20040041) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 9.196341181s ago: executing program 3 (id=441): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x8, &(0x7f0000000940)={[{@bh}, {@errors_remount}, {@orlov}, {@nojournal_checksum}, {@quota}, {@lazytime}, {@nodiscard}, {@discard}]}, 0x4, 0x49c, &(0x7f0000000480)="$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") chdir(&(0x7f0000000400)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000009000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x44, r2, 0x1904, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x51}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x44}}, 0xc844) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000080)={0x17c04, r1, 0x0, 0x1000fffff, 0x1a}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0xd0, 0x3f4, 0x4, 0x70bd2d, 0x25dfdbfd, "7706bf94f60728e04f4efcdf7a3c61d4ef6d3562f717db9bb97daed4e2766ebf591be03512ccaefef04eb7929887fa158327cda882772ea52befcb9c40176a94020cbf197a4ac81fac6dcc65f5e8bc557692cd6ccb3510be92e6bcde3fb9e57fbcb0ff881cc0c9bcacca193cd9bc6428d35c69bf996d305134603fcdb58175a1242b334ac154f6f9ba56b763a653e2f6c715322b4bb95004f4afb811274547c115b64ca176b0bd948059149b837c6f8882dcc92759ebad5c5e148a696f"}, 0xd0}, 0x1, 0x0, 0x0, 0x24000084}, 0x800) 8.371849801s ago: executing program 1 (id=442): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 8.371493921s ago: executing program 0 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004500), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004540)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004800) 8.370562364s ago: executing program 4 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) ptrace(0x4206, r3) 8.326844422s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5], 0x24}}, 0x0) 8.260889591s ago: executing program 2 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) 6.727709634s ago: executing program 2 (id=447): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000021c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2505000000080009000200000008000c00aa0a0000060001000500000008000b0002000040a049184274f9ce8092658da4c5f574"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000) 6.72627447s ago: executing program 4 (id=448): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.493987227s ago: executing program 4 (id=449): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x1}, {0x6, 0x0, 0xd, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6.473103143s ago: executing program 1 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.437873376s ago: executing program 0 (id=451): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6.43668723s ago: executing program 2 (id=452): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 5.51461135s ago: executing program 4 (id=453): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000340)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) request_key(0x0, 0x0, 0x0, 0x0) 5.514188646s ago: executing program 1 (id=454): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000281000/0x4000)=nil, 0x4000) munlock(&(0x7f000087f000/0x4000)=nil, 0x4000) munlockall() socket$inet(0x2, 0x800, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x4e, &(0x7f0000000180)={{0x12, 0x1, 0x141, 0x34, 0xbc, 0xd0, 0x40, 0x403, 0xabb8, 0x1fae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5f, 0x7, 0x0, 0xde, 0xea, 0x24, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x6, 0x9, 0x7}, @feature_unit={0x7, 0x24, 0x6, 0x6, 0x6, 0x0, [], 0xfb}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x6, 0x0, "380f0597"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x6, "ab"}]}]}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="5b37182347bc", @random="130c937beae8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "55a6a4", 0x0, 0x6, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "0a2b7a6e3481dd35"}}}}}}}, 0x0) 5.512116322s ago: executing program 0 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r3, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 5.491676138s ago: executing program 2 (id=456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x8, 0x4) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ebeaa220d0070141c08701020301090234"], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x4, "11988c7ba5bb888131cac156c94e0a000000000000df5be03664724d1dd748c3fa198dcd95bf761a3a4c868b46327ff700000000000000005026b76100"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x400c1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="c0110000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000008001e008000000008001f0001"], 0x11c0}}, 0x20004800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 4.459559975s ago: executing program 1 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 4.390582785s ago: executing program 0 (id=458): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) ioctl$TCSETSW(r3, 0x5403, 0x0) 4.326390977s ago: executing program 2 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1.043328615s ago: executing program 0 (id=460): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.042690409s ago: executing program 2 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f0000000300)={r4, 0x10, 0x4}, 0x8) 1.042144735s ago: executing program 4 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.005835445s ago: executing program 1 (id=463): socket(0x2a, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 72.443802ms ago: executing program 1 (id=464): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x2, 0x21, 0x8, @multicast1, @multicast2}, "d506df2b08d79ad5"}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) 0s ago: executing program 0 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0xf5ffffff, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.194' (ED25519) to the list of known hosts. [ 35.479121][ T6478] cgroup: Unknown subsys name 'net' [ 35.732086][ T6478] cgroup: Unknown subsys name 'cpuset' [ 35.735747][ T6478] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.075877][ T6478] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.515958][ T6491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.520311][ T6491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.522704][ T6491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.525643][ T6491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.528144][ T6491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.531377][ T6491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.547585][ T6491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.550542][ T6491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.553786][ T6491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.556337][ T6491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.558904][ T6491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.567749][ T6499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.570775][ T6491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.573462][ T6499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.576116][ T6499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.606291][ T6058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.609163][ T6058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.612176][ T6058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.614439][ T6058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.617021][ T6058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.619948][ T6058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.621898][ T6491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.624416][ T6058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.628043][ T6058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.628486][ T6058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.962573][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 37.991622][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 38.046462][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 38.066356][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 38.078920][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.079066][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.079200][ T6489] bridge_slave_0: entered allmulticast mode [ 38.080594][ T6489] bridge_slave_0: entered promiscuous mode [ 38.082709][ T6497] chnl_net:caif_netlink_parms(): no params data found [ 38.112809][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.112881][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.112992][ T6489] bridge_slave_1: entered allmulticast mode [ 38.114455][ T6489] bridge_slave_1: entered promiscuous mode [ 38.164719][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.166376][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.204157][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.206274][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.208478][ T6500] bridge_slave_0: entered allmulticast mode [ 38.210519][ T6500] bridge_slave_0: entered promiscuous mode [ 38.211916][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.211963][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.212061][ T6500] bridge_slave_1: entered allmulticast mode [ 38.212830][ T6500] bridge_slave_1: entered promiscuous mode [ 38.244966][ T6489] team0: Port device team_slave_0 added [ 38.247597][ T6489] team0: Port device team_slave_1 added [ 38.267381][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.267478][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.267623][ T6492] bridge_slave_0: entered allmulticast mode [ 38.268427][ T6492] bridge_slave_0: entered promiscuous mode [ 38.283816][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.315697][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.317751][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.320308][ T6492] bridge_slave_1: entered allmulticast mode [ 38.323009][ T6492] bridge_slave_1: entered promiscuous mode [ 38.332130][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.335337][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.335395][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.335432][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.336889][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.336914][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.336945][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.360194][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.362254][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.364303][ T6497] bridge_slave_0: entered allmulticast mode [ 38.365776][ T6497] bridge_slave_0: entered promiscuous mode [ 38.367170][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.367214][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.367309][ T6497] bridge_slave_1: entered allmulticast mode [ 38.368208][ T6497] bridge_slave_1: entered promiscuous mode [ 38.412923][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.429150][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.429253][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.429364][ T6495] bridge_slave_0: entered allmulticast mode [ 38.430603][ T6495] bridge_slave_0: entered promiscuous mode [ 38.433066][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.433114][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.433224][ T6495] bridge_slave_1: entered allmulticast mode [ 38.434146][ T6495] bridge_slave_1: entered promiscuous mode [ 38.436596][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.438605][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.444836][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.454399][ T6500] team0: Port device team_slave_0 added [ 38.456156][ T6500] team0: Port device team_slave_1 added [ 38.474453][ T6489] hsr_slave_0: entered promiscuous mode [ 38.476606][ T6489] hsr_slave_1: entered promiscuous mode [ 38.500654][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.511623][ T6497] team0: Port device team_slave_0 added [ 38.515974][ T6497] team0: Port device team_slave_1 added [ 38.519400][ T6492] team0: Port device team_slave_0 added [ 38.522557][ T6492] team0: Port device team_slave_1 added [ 38.531917][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.533934][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.541068][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.545607][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.570577][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.572560][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.579848][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.610488][ T6495] team0: Port device team_slave_0 added [ 38.645459][ T6495] team0: Port device team_slave_1 added [ 38.653440][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.653489][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.653532][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.654700][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.654725][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.654760][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.676739][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.676770][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.676812][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.677911][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.677935][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.677968][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.714840][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.714893][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.714935][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.737451][ T6500] hsr_slave_0: entered promiscuous mode [ 38.737980][ T6500] hsr_slave_1: entered promiscuous mode [ 38.738342][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.738425][ T6500] Cannot create hsr debugfs directory [ 38.748418][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.748466][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.748510][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.755425][ T6497] hsr_slave_0: entered promiscuous mode [ 38.755968][ T6497] hsr_slave_1: entered promiscuous mode [ 38.757175][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.757207][ T6497] Cannot create hsr debugfs directory [ 38.788039][ T6492] hsr_slave_0: entered promiscuous mode [ 38.788538][ T6492] hsr_slave_1: entered promiscuous mode [ 38.788863][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.788891][ T6492] Cannot create hsr debugfs directory [ 38.886541][ T6495] hsr_slave_0: entered promiscuous mode [ 38.887151][ T6495] hsr_slave_1: entered promiscuous mode [ 38.887516][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.887544][ T6495] Cannot create hsr debugfs directory [ 39.099988][ T6489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.117277][ T6489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.125906][ T6489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.133834][ T6489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.157830][ T6500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.172004][ T6500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.182019][ T6500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.191642][ T6500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.199107][ T6497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.204466][ T6497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.209487][ T6497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.213370][ T6497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.288930][ T6492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.293689][ T6492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.298451][ T6492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.315644][ T6492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.330452][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.345665][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.376166][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.376299][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.398699][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.398783][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.404136][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.404623][ T6495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.418831][ T6497] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.419494][ T6495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.441307][ T6495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.450258][ T6495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.464233][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.464322][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.465521][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.465594][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.467376][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.512815][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.547942][ T2121] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.548016][ T2121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.558033][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.569742][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.575802][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.595451][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.600282][ T6494] Bluetooth: hci0: command tx timeout [ 39.600478][ T6058] Bluetooth: hci1: command tx timeout [ 39.600688][ T6058] Bluetooth: hci2: command tx timeout [ 39.612546][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.612630][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.615187][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.615245][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.625333][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.625403][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.642707][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.642804][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.684743][ T6494] Bluetooth: hci3: command tx timeout [ 39.685035][ T6058] Bluetooth: hci4: command tx timeout [ 39.696699][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.696802][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.719252][ T6489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.720333][ T6489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.723891][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.745991][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.775628][ T6500] veth0_vlan: entered promiscuous mode [ 39.806174][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.815183][ T6500] veth1_vlan: entered promiscuous mode [ 39.896525][ T6500] veth0_macvtap: entered promiscuous mode [ 39.898392][ T6500] veth1_macvtap: entered promiscuous mode [ 39.928150][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.938346][ T6497] veth0_vlan: entered promiscuous mode [ 39.945134][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.949366][ T6497] veth1_vlan: entered promiscuous mode [ 39.963112][ T6500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.964293][ T6500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.964326][ T6500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.964355][ T6500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975385][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.985621][ T6497] veth0_macvtap: entered promiscuous mode [ 39.989232][ T6497] veth1_macvtap: entered promiscuous mode [ 40.023575][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.028523][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.046206][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.064933][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.068252][ T6497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.073821][ T6497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.073894][ T6497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.073924][ T6497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.108445][ T6489] veth0_vlan: entered promiscuous mode [ 40.176339][ T6489] veth1_vlan: entered promiscuous mode [ 40.206923][ T6492] veth0_vlan: entered promiscuous mode [ 40.210774][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.214345][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.226263][ T6492] veth1_vlan: entered promiscuous mode [ 40.245109][ T6495] veth0_vlan: entered promiscuous mode [ 40.254346][ T6489] veth0_macvtap: entered promiscuous mode [ 40.256916][ T2121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.256978][ T2121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.267161][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.267215][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.294897][ T6489] veth1_macvtap: entered promiscuous mode [ 40.297112][ T6495] veth1_vlan: entered promiscuous mode [ 40.303712][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.303776][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.333985][ T6492] veth0_macvtap: entered promiscuous mode [ 40.335832][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.337730][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.342128][ T6489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.344626][ T6489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.347064][ T6489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.348633][ T6489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.371942][ T6500] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.377445][ T6495] veth0_macvtap: entered promiscuous mode [ 40.394654][ T6492] veth1_macvtap: entered promiscuous mode [ 40.415106][ T6495] veth1_macvtap: entered promiscuous mode [ 40.426320][ T2121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.426378][ T2121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.427267][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.429456][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.454244][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.459501][ T6492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.463339][ T6492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.465761][ T6492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.468326][ T6492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.486835][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.486903][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.556971][ T6573] loop1: detected capacity change from 0 to 256 [ 40.563760][ T6573] ======================================================= [ 40.563760][ T6573] WARNING: The mand mount option has been deprecated and [ 40.563760][ T6573] and is ignored by this kernel. Remove the mand [ 40.563760][ T6573] option from the mount to silence this warning. [ 40.563760][ T6573] ======================================================= [ 40.574226][ T6573] exfat: Bad value for 'uid' [ 40.575663][ T6573] exfat: Bad value for 'uid' [ 40.591461][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.596369][ T6495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.599622][ T6495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.602131][ T6495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.604555][ T6495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.680712][ T6058] Bluetooth: hci2: command tx timeout [ 41.680793][ T6058] Bluetooth: hci1: command tx timeout [ 41.680845][ T6058] Bluetooth: hci0: command tx timeout [ 41.880496][ T6494] Bluetooth: hci4: command tx timeout [ 41.880831][ T6494] Bluetooth: hci3: command tx timeout [ 41.986711][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 41.986819][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 42.097449][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 42.116672][ T541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.119219][ T541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.144533][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 42.389500][ T2121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.393940][ T2121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.481861][ T714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.481922][ T714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.743275][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.743334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.759937][ T6494] Bluetooth: hci1: command tx timeout [ 43.760004][ T6494] Bluetooth: hci2: command tx timeout [ 43.763310][ T6058] Bluetooth: hci0: command tx timeout [ 43.957234][ T6499] Bluetooth: hci3: command tx timeout [ 43.959665][ T6499] Bluetooth: hci4: command tx timeout [ 44.680071][ T6608] loop0: detected capacity change from 0 to 256 [ 46.031204][ T6058] Bluetooth: hci0: command tx timeout [ 46.031288][ T6058] Bluetooth: hci2: command tx timeout [ 46.031349][ T6058] Bluetooth: hci1: command tx timeout [ 46.031408][ T6058] Bluetooth: hci4: command tx timeout [ 46.031449][ T6058] Bluetooth: hci3: command tx timeout [ 47.437067][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 47.439351][ T6629] loop2: detected capacity change from 0 to 512 [ 47.494255][ T6629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.494318][ T6629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.573381][ T6629] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.577909][ T6629] EXT4-fs (loop2): 1 truncate cleaned up [ 47.603087][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.913426][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.936645][ T6641] loop0: detected capacity change from 0 to 4096 [ 47.966674][ T6645] loop4: detected capacity change from 0 to 128 [ 47.982453][ T6641] NILFS (loop0): invalid segment: Checksum error in segment payload [ 47.982557][ T6641] NILFS (loop0): trying rollback from an earlier position [ 48.001228][ T6645] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.110117][ T6641] NILFS (loop0): recovery complete [ 48.131472][ T6649] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.207691][ T6610] loop3: detected capacity change from 0 to 32768 [ 49.958444][ T6492] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.993031][ T6641] mkiss: ax0: crc mode is auto. [ 50.022339][ T6643] loop1: detected capacity change from 0 to 32768 [ 50.028812][ T6643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19 (6643) [ 50.044443][ T6663] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.203023][ T6643] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.203198][ T6643] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 50.203236][ T6643] BTRFS info (device loop1): using free-space-tree [ 50.890275][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 50.891421][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 50.904026][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 50.904260][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 50.904475][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 50.904679][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 50.915609][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 50.916414][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 50.916622][ T6643] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 50.964195][ T6643] BTRFS error (device loop1): open_ctree failed: -12 [ 51.200888][ T6685] netlink: 'syz.2.28': attribute type 4 has an invalid length. [ 51.929371][ T6685] netlink: 'syz.2.28': attribute type 4 has an invalid length. [ 53.456271][ T6714] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 54.087171][ T6699] Zero length message leads to an empty skb [ 54.162463][ T6722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.240844][ T6722] bridge0: entered promiscuous mode [ 54.242589][ T6722] vlan2: entered promiscuous mode [ 54.377526][ T6732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.318611][ T6748] loop0: detected capacity change from 0 to 512 [ 56.149819][ T6754] overlayfs: statfs failed on './file0' [ 57.109077][ T6769] capability: warning: `syz.0.53' uses 32-bit capabilities (legacy support in use) [ 57.112221][ T6769] capability: warning: `syz.0.53' uses deprecated v2 capabilities in a way that may be insecure [ 57.150599][ T6499] Bluetooth: Wrong link type (-71) [ 57.150757][ T6499] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 57.154372][ T6499] Bluetooth: Wrong link type (-22) [ 58.612502][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.58'. [ 58.615615][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.58'. [ 58.865520][ T6789] loop4: detected capacity change from 0 to 512 [ 58.877674][ T6789] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.927889][ T6789] EXT4-fs (loop4): 1 truncate cleaned up [ 58.961118][ T6799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.60'. [ 59.552588][ T6789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.594185][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 59.647798][ T6803] loop2: detected capacity change from 0 to 1024 [ 59.870147][ T6805] binder: 6804:6805 tried to acquire reference to desc 0, got 1 instead [ 59.870798][ T6805] binder: 6804:6805 got transaction to invalid handle, 3 [ 59.870946][ T6805] binder: 6805:6804 cannot find target node [ 59.870988][ T6805] binder: 6804:6805 transaction call to 0:0 failed 10/29201/-22, code 0 size 0-0 line 3150 [ 59.872884][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 59.872970][ T6541] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.892821][ T6541] binder: undelivered transaction 9, process died. [ 61.660566][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.725468][ T35] hfsplus: b-tree write err: -5, ino 4 [ 61.943249][ T6820] vlan2: entered allmulticast mode [ 61.943312][ T6820] bond_slave_1: entered allmulticast mode [ 62.963076][ T6825] loop1: detected capacity change from 0 to 1764 [ 63.449003][ T31] audit: type=1326 audit(63.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209627][ T31] audit: type=1326 audit(64.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209721][ T31] audit: type=1326 audit(64.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209786][ T31] audit: type=1326 audit(64.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209832][ T31] audit: type=1326 audit(64.190:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209875][ T31] audit: type=1326 audit(64.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209918][ T31] audit: type=1326 audit(64.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.209961][ T31] audit: type=1326 audit(64.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.210004][ T31] audit: type=1326 audit(64.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.210048][ T31] audit: type=1326 audit(64.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955a7a8 code=0x7fc00000 [ 64.333900][ T6834] loop4: detected capacity change from 0 to 4096 [ 64.385199][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.387849][ T6836] batadv_slave_0: entered promiscuous mode [ 64.487423][ T2394] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.487563][ T2394] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.141385][ T6867] loop3: detected capacity change from 0 to 64 [ 68.203612][ T6887] mmap: syz.4.87 (6887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.217512][ T6887] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 68.223511][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 68.240239][ T6884] loop3: detected capacity change from 0 to 1024 [ 68.242994][ T6884] EXT4-fs: Ignoring removed orlov option [ 68.259021][ T6884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.391782][ T6894] loop1: detected capacity change from 0 to 4096 [ 68.399161][ T6894] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 68.485893][ T6897] binder: 6896:6897 tried to acquire reference to desc 0, got 1 instead [ 68.490679][ T6897] binder: 6896:6897 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.494492][ T6897] binder: 6897 RLIMIT_NICE not set [ 68.496244][ T6897] binder: 6897 RLIMIT_NICE not set [ 68.498750][ T6897] binder: 6896:6897 got new transaction with bad transaction stack, transaction 15 has target 6896:6897 [ 68.503452][ T6897] binder: 6896:6897 transaction call to 6896:0 failed 16/29201/-71, code 0 size 0-48 line 3210 [ 68.508343][ T1801] binder: release 6896:6897 transaction 15 out, still active [ 68.508481][ T1801] binder: undelivered TRANSACTION_COMPLETE [ 68.508519][ T1801] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.532913][ T1801] binder: release 6896:6897 transaction 15 in, still active [ 68.535277][ T1801] binder: send failed reply for transaction 15, target dead [ 69.714607][ T26] cfg80211: failed to load regulatory.db [ 70.466700][ T6906] loop0: detected capacity change from 0 to 64 [ 70.476528][ T6906] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 70.511276][ T6500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.454130][ T6981] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 78.471875][ T6981] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 78.520380][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.520812][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.292255][ T6499] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 79.292415][ T6499] Bluetooth: hci0: Injecting HCI hardware error event [ 79.293379][ T6499] Bluetooth: hci0: hardware error 0x00 [ 82.239843][ T6499] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.316983][ T7006] loop2: detected capacity change from 0 to 32768 [ 82.481673][ T7006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.122 (7006) [ 82.706558][ T7006] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.706675][ T7006] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 82.706712][ T7006] BTRFS info (device loop2): using free-space-tree [ 83.381868][ T7035] loop1: detected capacity change from 0 to 1024 [ 83.396501][ T7035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.405365][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 83.450320][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 83.450498][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 83.450633][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 83.450836][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 83.450966][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 83.451100][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 83.451235][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 83.451367][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 83.451507][ T7006] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 83.492704][ T7006] BTRFS error (device loop2): open_ctree failed: -12 [ 85.397708][ T7066] loop3: detected capacity change from 0 to 512 [ 85.398317][ T7066] EXT4-fs: Ignoring removed i_version option [ 85.424990][ T7066] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.425059][ T7066] EXT4-fs (loop3): blocks per group (41) and clusters per group (32768) inconsistent [ 85.737382][ T7077] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 89.544925][ T7107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.548040][ T7107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.001586][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 90.004402][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 90.033185][ T7119] loop2: detected capacity change from 0 to 2048 [ 90.053494][ T7119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.472268][ T7126] ufs: You didn't specify the type of your ufs filesystem [ 90.472268][ T7126] [ 90.472268][ T7126] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 90.472268][ T7126] [ 90.472268][ T7126] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 90.472388][ T7126] ufs: ufstype=old is supported read-only [ 90.473038][ T7126] syz.3.147: attempt to access beyond end of device [ 90.473038][ T7126] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 91.613572][ T7135] binder: 7133:7135 tried to acquire reference to desc 0, got 1 instead [ 91.614880][ T7135] binder: release 7133:7135 transaction 21 out, still active [ 91.614912][ T7135] binder: undelivered TRANSACTION_COMPLETE [ 91.614942][ T7135] binder: undelivered TRANSACTION_COMPLETE [ 91.623625][ T26] binder: send failed reply for transaction 21, target dead [ 91.623702][ T26] binder: undelivered transaction 22, process died. [ 91.667866][ T7141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.157'. [ 91.702501][ T7142] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 91.702736][ T7142] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 91.703876][ T7142] binder: 7142 RLIMIT_NICE not set [ 91.725793][ T7141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.157'. [ 93.899055][ T7166] loop4: detected capacity change from 0 to 64 [ 96.887207][ T7191] process 'syz.3.170' launched '/dev/fd/3' with NULL argv: empty string added [ 96.948454][ T7194] netlink: 'syz.0.171': attribute type 4 has an invalid length. [ 97.046448][ T7202] netlink: 'syz.3.173': attribute type 10 has an invalid length. [ 98.259078][ T7219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.259263][ T7219] IPv6: NLM_F_CREATE should be set when creating new route [ 98.948394][ T7219] lo: entered allmulticast mode [ 98.950783][ T7219] tunl0: entered allmulticast mode [ 98.952294][ T7219] gre0: entered allmulticast mode [ 99.095176][ T7219] gretap0: entered allmulticast mode [ 99.401587][ T7219] erspan0: entered allmulticast mode [ 99.405729][ T7219] ip_vti0: entered allmulticast mode [ 99.409189][ T7219] ip6_vti0: entered allmulticast mode [ 99.459037][ T7219] sit0: entered allmulticast mode [ 99.468099][ T7219] ip6tnl0: entered allmulticast mode [ 99.477789][ T7219] ip6gre0: entered allmulticast mode [ 99.494652][ T7219] syz_tun: entered allmulticast mode [ 99.497130][ T7219] ip6gretap0: entered allmulticast mode [ 99.500280][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.500757][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.504137][ T7219] bridge0: entered allmulticast mode [ 99.516735][ T7219] bond0: entered allmulticast mode [ 99.516768][ T7219] bond_slave_0: entered allmulticast mode [ 99.516791][ T7219] bond_slave_1: entered allmulticast mode [ 99.524214][ T7219] team0: entered allmulticast mode [ 99.524249][ T7219] team_slave_0: entered allmulticast mode [ 99.524274][ T7219] team_slave_1: entered allmulticast mode [ 99.527000][ T7219] dummy0: entered allmulticast mode [ 99.535594][ T7219] nlmon0: entered allmulticast mode [ 99.536896][ T7219] caif0: entered allmulticast mode [ 99.537190][ T7219] batadv0: entered allmulticast mode [ 99.539302][ T7219] vxcan0: entered allmulticast mode [ 99.541756][ T7219] vxcan1: entered allmulticast mode [ 99.543985][ T7219] veth0: entered allmulticast mode [ 99.546036][ T7219] veth1: entered allmulticast mode [ 99.660691][ T7219] wg0: entered allmulticast mode [ 99.922340][ T7219] wg1: entered allmulticast mode [ 100.267495][ T7219] wg2: entered allmulticast mode [ 100.271310][ T7219] veth0_to_bridge: entered allmulticast mode [ 100.278906][ T7219] veth1_to_bridge: entered allmulticast mode [ 100.285822][ T7219] veth0_to_bond: entered allmulticast mode [ 100.291006][ T7219] veth1_to_bond: entered allmulticast mode [ 100.296848][ T7219] veth0_to_team: entered allmulticast mode [ 100.303020][ T7219] veth1_to_team: entered allmulticast mode [ 100.310688][ T7219] veth0_to_batadv: entered allmulticast mode [ 100.314488][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.317197][ T7219] batadv_slave_0: entered allmulticast mode [ 100.322365][ T7219] veth1_to_batadv: entered allmulticast mode [ 100.326236][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.328780][ T7219] batadv_slave_1: entered allmulticast mode [ 100.333927][ T7219] xfrm0: entered allmulticast mode [ 100.337436][ T7219] veth0_to_hsr: entered allmulticast mode [ 100.341209][ T7219] hsr_slave_0: entered allmulticast mode [ 100.344650][ T7219] veth1_to_hsr: entered allmulticast mode [ 100.348212][ T7219] hsr_slave_1: entered allmulticast mode [ 100.353266][ T7219] hsr0: entered allmulticast mode [ 100.358968][ T7219] veth1_virt_wifi: entered allmulticast mode [ 100.366078][ T7219] veth0_virt_wifi: entered allmulticast mode [ 100.371564][ T7219] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 100.374216][ T7219] veth1_vlan: entered allmulticast mode [ 100.378303][ T7219] veth0_vlan: entered allmulticast mode [ 100.386908][ T7219] vlan0: entered allmulticast mode [ 100.388592][ T7219] vlan1: entered allmulticast mode [ 100.571738][ T7219] macvlan0: entered allmulticast mode [ 100.751028][ T7219] macvlan1: entered allmulticast mode [ 101.184370][ T7219] ipvlan0: entered allmulticast mode [ 101.184511][ T7219] ipvlan1: entered allmulticast mode [ 101.185060][ T7219] veth1_macvtap: entered allmulticast mode [ 101.187323][ T7219] veth0_macvtap: entered allmulticast mode [ 101.234632][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.234951][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.280474][ T7219] macvtap0: entered allmulticast mode [ 101.286776][ T7219] macsec0: entered allmulticast mode [ 101.444296][ T7219] geneve0: entered allmulticast mode [ 101.448495][ T7219] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.452172][ T7219] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.455289][ T7219] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.455352][ T7219] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.502744][ T7219] geneve1: entered allmulticast mode [ 101.657843][ T7219] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 102.097349][ T7219] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 102.189200][ T7219] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 102.195291][ T7219] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 102.249974][ T7253] binder: 7252:7253 tried to acquire reference to desc 0, got 1 instead [ 102.251130][ T7253] binder: 7252:7253 got transaction to invalid handle, 1 [ 102.251193][ T7253] binder: 7253:7252 cannot find target node [ 102.251224][ T7253] binder: 7252:7253 transaction async to 0:0 failed 32/29201/-22, code 0 size 0-0 line 3150 [ 102.252056][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 102.283737][ T2298] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.283854][ T2298] binder: undelivered transaction 27, process died. [ 102.318595][ T7219] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 102.438898][ T7219] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 102.446084][ T7243] bridge0: port 3(vxlan0) entered blocking state [ 102.446186][ T7243] bridge0: port 3(vxlan0) entered disabled state [ 102.446312][ T7243] vxlan0: entered allmulticast mode [ 102.458734][ T7243] vxlan0: entered promiscuous mode [ 102.547201][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.192'. [ 102.611573][ T7254] loop2: detected capacity change from 0 to 32768 [ 102.614708][ T7254] jfs: Bad value for 'uid' [ 102.619629][ T7254] jfs: Bad value for 'uid' [ 103.699428][ T7277] loop4: detected capacity change from 0 to 512 [ 103.720019][ T7277] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 103.727292][ T7277] EXT4-fs (loop4): invalid journal inode [ 103.729299][ T7277] EXT4-fs (loop4): can't get journal size [ 103.861446][ T7277] EXT4-fs (loop4): 1 truncate cleaned up [ 103.867614][ T7277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.891864][ T7277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.466504][ T7312] loop4: detected capacity change from 0 to 16 [ 106.470291][ T7312] erofs: Unknown parameter '01777777777777777777777ÿ' [ 106.512629][ T7312] loop4: detected capacity change from 0 to 512 [ 107.679094][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.679748][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.025114][ T7346] loop4: detected capacity change from 0 to 4096 [ 109.059470][ T7334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.099398][ T7334] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.118170][ T7348] loop1: detected capacity change from 0 to 1024 [ 109.125863][ T7348] ext4: Unknown parameter 'nouser_xattr' [ 110.298701][ T7349] fido_id[7349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.465747][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.493347][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.628063][ T7366] loop1: detected capacity change from 0 to 512 [ 111.686798][ T7372] netfs: Couldn't get user pages (rc=-14) [ 111.686960][ T7372] netfs: Zero-sized read [R=6] [ 111.764485][ T7315] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.764559][ T7315] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.764590][ T7315] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.764620][ T7315] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.822083][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 113.714041][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'. [ 114.548290][ T7406] loop1: detected capacity change from 0 to 64 [ 115.211998][ T7420] fuse: Unknown parameter 'use00000000000000000000' [ 115.710684][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 115.723056][ T7432] loop3: detected capacity change from 0 to 47 [ 116.921342][ T7432] overlayfs: upper fs needs to support d_type. [ 116.929883][ T7432] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.929970][ T7432] overlayfs: failed to set xattr on upper [ 116.929990][ T7432] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.930008][ T7432] overlayfs: ...falling back to index=off. [ 116.930025][ T7432] overlayfs: ...falling back to uuid=null. [ 117.198908][ T7443] fuse: Bad value for 'fd' [ 117.473812][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 117.473882][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 118.343506][ T7468] overlayfs: overlapping lowerdir path [ 118.932038][ T7473] loop4: detected capacity change from 0 to 1024 [ 119.072574][ T7480] loop1: detected capacity change from 0 to 1024 [ 119.075201][ T7480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.113593][ T7486] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.113593][ T7486] The task syz.2.258 (7486) triggered the difference, watch for misbehavior. [ 119.114416][ T7480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.123498][ T7486] overlayfs: failed to resolve './file0': -2 [ 119.144801][ T6497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.889122][ T45] hfsplus: b-tree write err: -5, ino 4 [ 120.805822][ T7504] netlink: 'syz.4.265': attribute type 12 has an invalid length. [ 120.808127][ T7504] netlink: 'syz.4.265': attribute type 29 has an invalid length. [ 120.814045][ T7504] netlink: 148 bytes leftover after parsing attributes in process `syz.4.265'. [ 120.816804][ T7504] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 120.820043][ T7504] netlink: 43 bytes leftover after parsing attributes in process `syz.4.265'. [ 121.786811][ T7527] loop1: detected capacity change from 0 to 1024 [ 122.724177][ T7536] loop3: detected capacity change from 0 to 1024 [ 122.779989][ T6715] hfsplus: b-tree write err: -5, ino 4 [ 123.462050][ T7536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.204183][ T6500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.920426][ T2394] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920503][ T2394] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.958661][ T7567] binder: 7564:7567 tried to acquire reference to desc 0, got 1 instead [ 125.982681][ T6480] binder: undelivered TRANSACTION_COMPLETE [ 126.086692][ T6480] binder: undelivered transaction 37, process died. [ 126.143985][ T7573] loop1: detected capacity change from 0 to 65 [ 126.153317][ T7575] loop3: detected capacity change from 0 to 256 [ 126.158153][ T7573] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 126.185657][ T7575] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.185808][ T7575] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 126.203976][ T7575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 129.179037][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.294'. [ 130.293146][ T7611] loop4: detected capacity change from 0 to 512 [ 130.342292][ T7611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.358406][ T7613] warning: `syz.0.298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.413457][ T7613] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 130.526190][ T7611] EXT4-fs (loop4): 1 truncate cleaned up [ 130.536009][ T7611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.425552][ T7613] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.530713][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.039965][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.040265][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.445398][ T6499] Bluetooth: hci1: command tx timeout [ 135.359749][ T6499] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 135.362195][ T6499] Bluetooth: hci1: Injecting HCI hardware error event [ 135.365519][ T6058] Bluetooth: hci1: hardware error 0x00 [ 135.391410][ T7668] syz_tun: entered allmulticast mode [ 135.419924][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 135.495102][ T7668] syz_tun (unregistering): left allmulticast mode [ 135.719494][ T7681] loop3: detected capacity change from 0 to 512 [ 135.723940][ T7681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.743317][ T7681] EXT4-fs (loop3): 1 truncate cleaned up [ 135.747601][ T7681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.513851][ T6500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.661966][ T7697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.766567][ T6058] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 138.027534][ T7715] bridge1: entered allmulticast mode [ 138.607920][ T7720] loop4: detected capacity change from 0 to 32768 [ 139.218252][ T7720] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 139.237195][ T7720] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 139.237195][ T7720] allowing incompatible features above 0.0: (unknown version) [ 139.238640][ T7720] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 139.238798][ T7720] bcachefs (loop4): Version upgrade required: [ 139.238798][ T7720] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 139.238798][ T7720] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 139.238798][ T7720] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 139.272664][ T7720] bcachefs (loop4): dropping and reconstructing all alloc info [ 140.205324][ T7720] bcachefs (loop4): accounting_read... done [ 140.262840][ T7720] bcachefs (loop4): alloc_read... done [ 140.262937][ T7720] bcachefs (loop4): snapshots_read... done [ 140.263132][ T7720] bcachefs (loop4): check_allocations... done [ 140.303398][ T7720] bcachefs (loop4): going read-write [ 140.303550][ T7720] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1 [ 140.303550][ T7720] rw journal devs: [ 140.315136][ T7720] bcachefs (loop4): done starting filesystem [ 140.568810][ T7751] binder: BINDER_SET_CONTEXT_MGR already set [ 140.568989][ T7751] binder: 7750:7751 ioctl 4018620d 20000040 returned -16 [ 140.569363][ T7751] binder: tried to use weak ref as strong ref [ 140.569399][ T7751] binder: 7750:7751 Acquire 1 refcount change on invalid ref 0 ret -22 [ 140.569748][ T7751] binder: 7750:7751 got transaction to invalid handle, 1 [ 140.569784][ T7751] binder: 7751:7750 cannot find target node [ 140.569813][ T7751] binder: 7750:7751 transaction async to 0:0 failed 46/29201/-22, code 0 size 0-0 line 3150 [ 140.571039][ T7357] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.957884][ T6492] bcachefs (loop4): shutting down [ 141.958056][ T6492] bcachefs (loop4): going read-only [ 141.958269][ T6492] bcachefs (loop4): finished waiting for writes to stop [ 142.256978][ T6492] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 142.257294][ T6492] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 142.290286][ T6492] bcachefs (loop4): unclean shutdown complete, journal seq 10 [ 142.317966][ T7765] 9pnet_fd: p9_fd_create_tcp (7765): problem connecting socket to 127.0.0.1 [ 143.016815][ T6492] bcachefs (loop4): done going read-only, filesystem not clean [ 143.097448][ T6492] bcachefs (loop4): shutdown complete [ 143.118195][ T7773] loop3: detected capacity change from 0 to 128 [ 143.143067][ T7773] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.229386][ T6500] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.277979][ T7760] loop1: detected capacity change from 0 to 32768 [ 143.282117][ T7760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.340 (7760) [ 143.293932][ T7760] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.294028][ T7760] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 143.294065][ T7760] BTRFS info (device loop1): using free-space-tree [ 143.297606][ T7780] loop3: detected capacity change from 0 to 128 [ 143.361664][ T7780] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.365372][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.365489][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.389336][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.389469][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.407875][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.413126][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.421952][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.426829][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.433155][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.437641][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.450977][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.455645][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.464590][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.464650][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.469367][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.469406][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.477687][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.477733][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.481576][ T7780] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:376: inode #2: comm syz.3.348: No space for directory leaf checksum. Please run e2fsck -D. [ 143.481613][ T7780] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.348: checksumming directory block 0 [ 143.534250][ T6500] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.638625][ T7802] tipc: Started in network mode [ 143.642121][ T7802] tipc: Node identity 080211, cluster identity 4711 [ 143.644392][ T7802] tipc: Enabled bearer , priority 0 [ 143.648243][ T7802] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 143.654321][ T7802] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 143.654873][ T7802] tipc: Resetting bearer [ 143.671480][ T6715] tipc: Resetting bearer [ 143.692085][ T7802] tipc: Resetting bearer [ 143.853866][ T6497] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.966890][ T7357] tipc: Node number set to 134353152 [ 145.044029][ T7819] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.284969][ T7822] xt_nat: multiple ranges no longer supported [ 145.947967][ T7829] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 147.093203][ T7837] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 148.894784][ T7849] veth0_vlan: left promiscuous mode [ 148.895410][ T7849] veth0_vlan: entered promiscuous mode [ 149.904513][ T7855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.910151][ T7855] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 150.009283][ T7857] loop3: detected capacity change from 0 to 4096 [ 150.045099][ T7860] bridge1: entered allmulticast mode [ 151.978848][ T7857] netlink: 'syz.3.365': attribute type 11 has an invalid length. [ 154.340335][ T7900] loop1: detected capacity change from 0 to 16 [ 154.347285][ T7900] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 156.577994][ T6480] kernel write not supported for file bpf-prog (pid: 6480 comm: kworker/1:3) [ 156.778126][ T7930] binder: BINDER_SET_CONTEXT_MGR already set [ 156.778179][ T7930] binder: 7929:7930 ioctl 4018620d 20000040 returned -16 [ 156.778892][ T7930] binder: 7929:7930 got transaction to invalid handle, 1 [ 156.778934][ T7930] binder: 7930:7929 cannot find target node [ 156.778964][ T7930] binder: 7929:7930 transaction async to 0:0 failed 49/29201/-22, code 0 size 0-0 line 3150 [ 156.789969][ T7356] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.862152][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.385'. [ 156.862224][ T7934] nbd: must specify an index to disconnect [ 156.873884][ T7934] loop3: detected capacity change from 0 to 128 [ 156.875955][ T7934] ufs: Unable to do repair on error, will lock lock instead [ 157.070349][ T7934] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 158.807907][ T7956] tipc: Failed to remove unknown binding: 66,1,1/0:2212674000/2212674002 [ 158.811091][ T7956] tipc: Failed to remove unknown binding: 66,1,1/0:2212674000/2212674002 [ 159.979315][ T7958] loop4: detected capacity change from 0 to 4096 [ 160.273941][ T7978] loop1: detected capacity change from 0 to 256 [ 161.056086][ T7957] dccp_close: ABORT with 3425 bytes unread [ 161.104485][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 161.104553][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 161.297166][ T7986] loop3: detected capacity change from 0 to 512 [ 162.344859][ T8000] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 162.359812][ T8000] bridge_slave_0: left promiscuous mode [ 162.373593][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.405518][ T8000] bridge_slave_1: left promiscuous mode [ 162.405695][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.407240][ T7986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.420247][ T8008] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 162.443637][ T8000] bond0: (slave bond_slave_0): Releasing backup interface [ 162.478480][ T6500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.506259][ T8000] bond0: (slave bond_slave_1): Releasing backup interface [ 162.539497][ T8000] team0: Port device team_slave_0 removed [ 162.543220][ T8000] team0: Port device team_slave_1 removed [ 162.544093][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.545992][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.548468][ T8001] tipc: Started in network mode [ 162.548501][ T8001] tipc: Node identity 4, cluster identity 4711 [ 162.548521][ T8001] tipc: Node number set to 4 [ 162.558651][ T8011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.565795][ T8008] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 162.566038][ T8008] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.566592][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 163.661802][ T8033] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.726762][ T8033] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 163.736753][ T8033] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 163.767899][ T8035] syz_tun: entered allmulticast mode [ 163.777691][ T8035] xfrm0: entered allmulticast mode [ 163.835822][ T8035] dvmrp1: entered allmulticast mode [ 164.241555][ T6491] Bluetooth: hci2: command 0x0406 tx timeout [ 164.266658][ T6491] Bluetooth: hci3: command 0x0406 tx timeout [ 164.775592][ T8055] loop3: detected capacity change from 0 to 2048 [ 164.778722][ T8055] udf: Unknown parameter 'rootdir-00000000000000000004' [ 164.814179][ T8059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.140444][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.141552][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.818402][ T8095] binder: 8094:8095 tried to acquire reference to desc 0, got 1 instead [ 166.821876][ T8095] binder: 8094:8095 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 166.825554][ T8095] binder: 8095 RLIMIT_NICE not set [ 166.827012][ T8095] binder: 8095 RLIMIT_NICE not set [ 166.829488][ T7354] binder: release 8094:8095 transaction 54 out, still active [ 166.832174][ T7354] binder: undelivered TRANSACTION_COMPLETE [ 166.841627][ T7354] binder: release 8094:8095 transaction 54 in, still active [ 166.843699][ T7354] binder: send failed reply for transaction 54, target dead [ 167.857654][ T8105] loop1: detected capacity change from 0 to 1024 [ 167.872932][ T8105] hfsplus: failed to load extents file [ 168.009374][ T8111] loop3: detected capacity change from 0 to 512 [ 168.027313][ T8111] EXT4-fs: Ignoring removed bh option [ 168.027388][ T8111] EXT4-fs: Ignoring removed orlov option [ 168.033523][ T8111] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 169.830646][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 171.647975][ T8157] loop4: detected capacity change from 0 to 256 [ 171.792157][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.792475][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.806991][ T8160] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.456'. [ 171.842213][ T8160] netlink: 104 bytes leftover after parsing attributes in process `syz.2.456'. [ 171.848887][ T8157] FAT-fs (loop4): Directory bread(block 64) failed [ 171.849868][ T8157] FAT-fs (loop4): Directory bread(block 65) failed [ 171.849961][ T8157] FAT-fs (loop4): Directory bread(block 66) failed [ 171.849998][ T8157] FAT-fs (loop4): Directory bread(block 67) failed [ 171.850058][ T8157] FAT-fs (loop4): Directory bread(block 68) failed [ 171.850094][ T8157] FAT-fs (loop4): Directory bread(block 69) failed [ 171.850153][ T8157] FAT-fs (loop4): Directory bread(block 70) failed [ 171.850188][ T8157] FAT-fs (loop4): Directory bread(block 71) failed [ 171.850246][ T8157] FAT-fs (loop4): Directory bread(block 72) failed [ 171.850282][ T8157] FAT-fs (loop4): Directory bread(block 73) failed [ 171.983879][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 177.123431][ C1] Unable to handle kernel paging request at virtual address dfff800000000018 [ 177.123578][ C1] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 177.123629][ C1] Mem abort info: [ 177.123651][ C1] ESR = 0x0000000096000005 [ 177.123682][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 177.123707][ C1] SET = 0, FnV = 0 [ 177.123730][ C1] EA = 0, S1PTW = 0 [ 177.123752][ C1] FSC = 0x05: level 1 translation fault [ 177.123775][ C1] Data abort info: [ 177.123802][ C1] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 177.123825][ C1] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 177.123849][ C1] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 177.123883][ C1] [dfff800000000018] address between user and kernel address ranges [ 177.124043][ C1] Internal error: Oops: 0000000096000005 [#1] SMP [ 177.145530][ C1] Modules linked in: [ 177.146584][ C1] CPU: 1 UID: 0 PID: 8152 Comm: syz.3.445 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 177.149550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.152261][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 177.154382][ C1] pc : find_match+0xa0/0xacc [ 177.155623][ C1] lr : find_match+0x74/0xacc [ 177.156865][ C1] sp : ffff8000800165e0 [ 177.157986][ C1] x29: ffff800080016600 x28: 1fffe00019d9e2e6 x27: 1fffe00019d9e2e4 [ 177.160207][ C1] x26: 00000000000000c0 x25: ffff0000cecf1737 x24: 0000000000000201 [ 177.162390][ C1] x23: 0000000000000002 x22: ffff0000cecf1720 x21: 0000000000000000 [ 177.164543][ C1] x20: dfff800000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 177.166707][ C1] x17: 0000000000000000 x16: ffff80008051c10c x15: 0000000000000002 [ 177.168852][ C1] x14: 1ffff00010002d00 x13: 0000000000000000 x12: 0000000000000000 [ 177.170969][ C1] x11: ffff700010002d02 x10: 0000000000ff0100 x9 : 0000000000000000 [ 177.173152][ C1] x8 : 0000000000000018 x7 : ffff800080016990 x6 : 0000000000000002 [ 177.175313][ C1] x5 : ffff800080016990 x4 : ffff800080016980 x3 : 0000000000000002 [ 177.177450][ C1] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 177.179633][ C1] Call trace: [ 177.180499][ C1] find_match+0xa0/0xacc (P) [ 177.181728][ C1] rt6_nh_find_match+0xcc/0x138 [ 177.183040][ C1] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 177.184597][ C1] __find_rr_leaf+0x3b8/0x5c8 [ 177.186187][ C1] fib6_table_lookup+0x308/0x8b8 [ 177.187657][ C1] ip6_pol_route+0x1f8/0x1014 [ 177.188909][ C1] ip6_pol_route_output+0x60/0x94 [ 177.190276][ C1] fib6_rule_lookup+0x258/0x45c [ 177.191626][ C1] ip6_route_output_flags+0x2e4/0x578 [ 177.193123][ C1] ip6_dst_lookup_tail+0x168/0x12e4 [ 177.194561][ C1] ip6_dst_lookup_flow+0x54/0xe0 [ 177.195966][ C1] udp_tunnel6_dst_lookup+0x1e8/0x354 [ 177.197382][ C1] geneve_xmit+0xd28/0x2afc [ 177.198603][ C1] dev_hard_start_xmit+0x2b0/0x8ac [ 177.200028][ C1] __dev_queue_xmit+0x15a4/0x31f0 [ 177.201463][ C1] neigh_resolve_output+0x550/0x654 [ 177.202922][ C1] ip6_finish_output2+0x1544/0x1c7c [ 177.204331][ C1] ip6_finish_output+0x418/0x7b4 [ 177.205701][ C1] ip6_output+0x274/0x504 [ 177.206922][ C1] ndisc_send_skb+0xb48/0x1524 [ 177.208209][ C1] ndisc_send_rs+0x378/0x514 [ 177.209482][ C1] addrconf_rs_timer+0x2f4/0x580 [ 177.210955][ C1] call_timer_fn+0x1b4/0x818 [ 177.212162][ C1] __run_timer_base+0x51c/0x76c [ 177.213460][ C1] run_timer_softirq+0xcc/0x194 [ 177.214842][ C1] handle_softirqs+0x328/0xc88 [ 177.216158][ C1] __do_softirq+0x14/0x20 [ 177.217319][ C1] ____do_softirq+0x14/0x20 [ 177.218589][ C1] call_on_irq_stack+0x24/0x30 [ 177.219915][ C1] do_softirq_own_stack+0x20/0x2c [ 177.221269][ C1] __irq_exit_rcu+0x1b0/0x478 [ 177.222514][ C1] irq_exit_rcu+0x14/0x84 [ 177.223698][ C1] el1_interrupt+0x38/0x54 [ 177.224937][ C1] el1h_64_irq_handler+0x18/0x24 [ 177.226277][ C1] el1h_64_irq+0x6c/0x70 [ 177.227405][ C1] arch_local_irq_restore+0x8/0xc (P) [ 177.228816][ C1] __might_resched+0x48/0x4c4 [ 177.230140][ C1] __might_sleep+0x94/0x110 [ 177.231346][ C1] __mutex_lock_common+0x10c/0x2190 [ 177.232770][ C1] mutex_lock_nested+0x2c/0x38 [ 177.234038][ C1] __unix_dgram_recvmsg+0x178/0xb88 [ 177.235443][ C1] unix_dgram_recvmsg+0xd0/0xe8 [ 177.236745][ C1] sock_recvmsg_nosec+0x90/0xec [ 177.238109][ C1] ____sys_recvmsg+0x5e0/0x744 [ 177.239423][ C1] ___sys_recvmsg+0x188/0x45c [ 177.240666][ C1] do_recvmmsg+0x294/0x7cc [ 177.241835][ C1] __arm64_sys_recvmmsg+0x17c/0x238 [ 177.243206][ C1] invoke_syscall+0x98/0x2b8 [ 177.244454][ C1] el0_svc_common+0x130/0x23c [ 177.245660][ C1] do_el0_svc+0x48/0x58 [ 177.246756][ C1] el0_svc+0x58/0x17c [ 177.247858][ C1] el0t_64_sync_handler+0x78/0x108 [ 177.249188][ C1] el0t_64_sync+0x198/0x19c [ 177.250461][ C1] Code: 97978776 f94002c8 9103011a d343ff48 (38746908) [ 177.252357][ C1] ---[ end trace 0000000000000000 ]--- [ 177.639214][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 177.641377][ C1] SMP: stopping secondary CPUs [ 177.642675][ C1] Kernel Offset: disabled [ 177.643831][ C1] CPU features: 0x0800,000040e0,01000250,82017203 [ 177.645540][ C1] Memory Limit: none [ 178.004220][ C1] Rebooting in 86400 seconds..