last executing test programs: 38.438421032s ago: executing program 3 (id=209): socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 38.237104528s ago: executing program 1 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="cd6e7cf048261c733075ce6d283ecdc8817e04ca1b6977b4f8c64e67cb7893f4c322a7e4aa0257d2f2331adb19be1ae6aaf8bd99768dcd0ca615d9b6d3e517885ba006a774ce5bbb577c4c3a163ad5ff3583908e1356185946268f7e39ea62b6b040626a4973e1ec18c8b315d2829aebad31904e780ccc17e5780204b89b86bbf8e64471b9b4d6", 0x87}, {&(0x7f0000000500)="1a806043fb4a51663a17cd4fddfe6ae0150fc5bd1f64cf7c891b0d7cc2ab42a7263d33c30e1bd8091744b8bfb3eb885d6dce39ef067c18250fec8a2d726851c7d757a18cfe434f15fb37f67fb032f252e73020d9e087df5ffc7989f4ff3bdcc56984450a020c181e80e8e41a38e9eaa70d7eb2a42fc5e0c518ab7e856ffb33ab19d807357d2c8b40805cd35a8ca96f4b7f11eddfd41303941c2374592ec0d468c6ef76ba6943b81cb8888fc539fa8d9438477c57aa1cb86a74d45ce2c417185b168ee6a05457a05f3611a3bd55d4c53009bf7fea69aca47d435ada985f81e7", 0xdf}, {&(0x7f0000000600)="3148e05cc88950103775ca02319ea1d173446c1b7e61b75a3f48beb8981f892ea3f90f88e94469b45e8c8606d4d1fe8053e97e95dd15d107b7c2775eb1d97f1b3868d1cf44f14ce16a3c0fe599375dbb6e48123387f0c1d3b8878f95c4962156333d869561f9e556bd51a11a5c80e83211f6ef816dc39c3c1e911b612c883e24bf0ed529cff4438785f6c70c3f77b77b85351dc5e445a05a7f5e6b05c11bff4d08ce9cd4a239983d442432b82610998ff07fda70aaf617394a4cff9a18a5381729391553b9c255c6593c39bf3b", 0xcd}, {&(0x7f0000000700)="8f0f2a9c0ddf2a6a38d612796cf787561bfdd282a1bc5b6d359566481bbd43462b5c2722c51d4f7f37c031864a939e31fe4db2eb2ba9485fc3514d5748350df346c43ca47e706dfa", 0x48}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)="b3196da3e55ed01cbd854057b9059b1f8210a65b96544b2828ad4c4d303d0833c065183e39e0859e740ec79adaf1baf87f7ba66a9f0a93da19fa770049760d4040e7a7db698bfb908641429803e2de72a4a6580f510348a109b366b5ea3f9451f6cefc8a591a334af4622fea383c0f4ab4fab226236bb78d837ffd673b1beec22a86a62e0db8fa7ff2ec00d559f009c1f5b3b53cdfba59781685a5000b53921c42ba8dc70f8471c0fd207a7539fb4ac2b248ba68d9f2a59099f334964b7ca888b362467a22d9c369a1d2caa48b11d260b58048ccbcb8f11121c00f2584aeaf07f5c136f8fdbf4c89d5", 0xe9}, {&(0x7f0000002380)="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", 0xc9c}], 0x2}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 38.119161622s ago: executing program 3 (id=212): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x48004) read$alg(r2, &(0x7f0000000100)=""/50, 0x32) 38.078625363s ago: executing program 1 (id=214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x100) dup3(r1, r0, 0x0) 37.830394441s ago: executing program 1 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@arm64={0x9, 0x6, 0x75, '\x00', 0x80}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x6d, 0x4}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0xe000, 0xd000, 0x1f, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x29, 0x0, 0x0, 0x4}, {0x80a0000, 0x7}, {0x7000, 0x4}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.481100402s ago: executing program 1 (id=218): setns(0xffffffffffffffff, 0x8020000) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) ioprio_set$pid(0x2, r0, 0x4004) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 37.052790236s ago: executing program 3 (id=221): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}], 0x1, 0x2090) 37.005715967s ago: executing program 1 (id=222): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 36.793832564s ago: executing program 3 (id=223): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x0, 0x3, 0x800000) 35.97596996s ago: executing program 3 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 35.844348334s ago: executing program 1 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x300}, 0x0) 35.461182337s ago: executing program 32 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x300}, 0x0) 34.400400891s ago: executing program 3 (id=236): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close(r2) 34.131518949s ago: executing program 33 (id=236): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close(r2) 8.43504429s ago: executing program 5 (id=381): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="30e22ebf3bc0f9d5", 0x8}, {0x0}], 0x2) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.114506886s ago: executing program 5 (id=390): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 5.113813116s ago: executing program 0 (id=398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) listen(r0, 0x70000008) 4.942308552s ago: executing program 0 (id=392): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x1, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010100, @multicast2}}}}}}, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) 4.602057103s ago: executing program 0 (id=394): socket$xdp(0x2c, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$caif_stream(0x25, 0x1, 0x4) unshare(0x2c020400) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x89) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.597534195s ago: executing program 0 (id=400): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg$unix(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x101d0}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000240), 0x2, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xff22}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/246, 0xf6}], 0x1, &(0x7f00000008c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x58ca2280, 0x0) 2.565469198s ago: executing program 0 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.252787668s ago: executing program 5 (id=405): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.239080278s ago: executing program 4 (id=406): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bond\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r1, 0x1) 2.052447455s ago: executing program 5 (id=407): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x57, &(0x7f0000000080)={@multicast2, @empty}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.816163042s ago: executing program 5 (id=408): connect$unix(0xffffffffffffffff, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x20000}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.551392301s ago: executing program 4 (id=410): msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x2000, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 1.425338814s ago: executing program 2 (id=411): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) pipe(&(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000e003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 1.346901407s ago: executing program 4 (id=412): pipe2$9p(&(0x7f0000000080), 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.149535534s ago: executing program 2 (id=413): getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600000076657468315f6d616376746170080000080001400000000514000000110001"], 0xe8}}, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x1, 0x100) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x180980001, 0x0, "b15dff0f251ed700f6c214525a2572ce1ced49e8981e103268fadc1433ae00", 0x40, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x4]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x80, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b0007"], 0xf4}}, 0x0) 1.035259187s ago: executing program 4 (id=414): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}]}}]}, 0x50}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 939.78224ms ago: executing program 0 (id=415): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0x200, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x241}], 0x1}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) poll(&(0x7f0000000000)=[{r0, 0x414}], 0x1, 0xb45d) 928.611951ms ago: executing program 2 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r1) 795.982704ms ago: executing program 2 (id=417): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) 793.271225ms ago: executing program 5 (id=418): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) write$binfmt_elf64(r0, 0x0, 0x78) 788.425475ms ago: executing program 4 (id=419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000140, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0xfff8, 0xa93d, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x400) creat(&(0x7f0000000000)='./file1\x00', 0x100) 574.388082ms ago: executing program 2 (id=420): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x2, 0x7fff0000}]}) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 208.363583ms ago: executing program 2 (id=421): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 0s ago: executing program 4 (id=422): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 56.442757][ T5753] cgroup: Unknown subsys name 'net' [ 56.609813][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.927535][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.330039][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.344671][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.345001][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.361766][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.363806][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.369503][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.383952][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.392309][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.399159][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.400405][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.414389][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.415423][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.429067][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.429351][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.436360][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.452074][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.452358][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.467006][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.467439][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.484204][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.485116][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.501584][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.513822][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.521199][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.853328][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 59.899696][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 60.011290][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 60.049329][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.059229][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.068847][ T5766] bridge_slave_0: entered allmulticast mode [ 60.076194][ T5766] bridge_slave_0: entered promiscuous mode [ 60.091943][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.099363][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.106945][ T5766] bridge_slave_1: entered allmulticast mode [ 60.114609][ T5766] bridge_slave_1: entered promiscuous mode [ 60.169842][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.177053][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.184986][ T5764] bridge_slave_0: entered allmulticast mode [ 60.191644][ T5764] bridge_slave_0: entered promiscuous mode [ 60.205960][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.215288][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 60.233393][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.240627][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.248395][ T5764] bridge_slave_1: entered allmulticast mode [ 60.255758][ T5764] bridge_slave_1: entered promiscuous mode [ 60.268353][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.334915][ T5766] team0: Port device team_slave_0 added [ 60.368568][ T5766] team0: Port device team_slave_1 added [ 60.393203][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.403482][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.412695][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.420440][ T5765] bridge_slave_0: entered allmulticast mode [ 60.428288][ T5765] bridge_slave_0: entered promiscuous mode [ 60.454737][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.466272][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.473402][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.480885][ T5765] bridge_slave_1: entered allmulticast mode [ 60.488237][ T5765] bridge_slave_1: entered promiscuous mode [ 60.495620][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.502567][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.531000][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.542740][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.550211][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.557488][ T5767] bridge_slave_0: entered allmulticast mode [ 60.564610][ T5767] bridge_slave_0: entered promiscuous mode [ 60.571878][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.579166][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.586430][ T5767] bridge_slave_1: entered allmulticast mode [ 60.593068][ T5767] bridge_slave_1: entered promiscuous mode [ 60.634697][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.645154][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.652110][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.680751][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.708410][ T5764] team0: Port device team_slave_0 added [ 60.716327][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.736638][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.748790][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.759808][ T5764] team0: Port device team_slave_1 added [ 60.807253][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.814434][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.840532][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.854774][ T5765] team0: Port device team_slave_0 added [ 60.870770][ T5765] team0: Port device team_slave_1 added [ 60.895452][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.902409][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.928915][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.964470][ T5767] team0: Port device team_slave_0 added [ 60.974628][ T5766] hsr_slave_0: entered promiscuous mode [ 60.980893][ T5766] hsr_slave_1: entered promiscuous mode [ 61.010650][ T5767] team0: Port device team_slave_1 added [ 61.044480][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.051426][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.077702][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.098699][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.105840][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.131779][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.152257][ T5764] hsr_slave_0: entered promiscuous mode [ 61.158921][ T5764] hsr_slave_1: entered promiscuous mode [ 61.165684][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.173483][ T5764] Cannot create hsr debugfs directory [ 61.185290][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.192249][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.218276][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.262591][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.269719][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.295769][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.365948][ T5765] hsr_slave_0: entered promiscuous mode [ 61.372079][ T5765] hsr_slave_1: entered promiscuous mode [ 61.379022][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.387477][ T5765] Cannot create hsr debugfs directory [ 61.433766][ T5767] hsr_slave_0: entered promiscuous mode [ 61.439920][ T5767] hsr_slave_1: entered promiscuous mode [ 61.446147][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.453766][ T5767] Cannot create hsr debugfs directory [ 61.484917][ T5774] Bluetooth: hci2: command tx timeout [ 61.554085][ T5774] Bluetooth: hci3: command tx timeout [ 61.554828][ T51] Bluetooth: hci1: command tx timeout [ 61.565269][ T5775] Bluetooth: hci0: command tx timeout [ 61.749336][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.765422][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.775428][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.794384][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.839213][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.854214][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.875458][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.885544][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.944828][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.970336][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.981597][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.008130][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.054389][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.065108][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.078804][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.087920][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.120398][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.182018][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.198060][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.205406][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.229955][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.237062][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.322725][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.355952][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.379580][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.386786][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.400052][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.419995][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.427141][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.442830][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.479704][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.508084][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.532384][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.539594][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.585275][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.592975][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.617266][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.624757][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.646596][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.653800][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.757101][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.888293][ T5764] veth0_vlan: entered promiscuous mode [ 62.921974][ T5764] veth1_vlan: entered promiscuous mode [ 63.032496][ T5764] veth0_macvtap: entered promiscuous mode [ 63.066933][ T5764] veth1_macvtap: entered promiscuous mode [ 63.106701][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.122445][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.140564][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.182796][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.202262][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.211630][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.223446][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.272429][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.288113][ T5766] veth0_vlan: entered promiscuous mode [ 63.307227][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.346814][ T5766] veth1_vlan: entered promiscuous mode [ 63.446432][ T5765] veth0_vlan: entered promiscuous mode [ 63.456327][ T5767] veth0_vlan: entered promiscuous mode [ 63.485650][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.500007][ T5766] veth0_macvtap: entered promiscuous mode [ 63.505517][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.526154][ T5767] veth1_vlan: entered promiscuous mode [ 63.536134][ T5765] veth1_vlan: entered promiscuous mode [ 63.547238][ T5766] veth1_macvtap: entered promiscuous mode [ 63.564065][ T5775] Bluetooth: hci2: command tx timeout [ 63.592686][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.602169][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.622287][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.636061][ T5775] Bluetooth: hci0: command tx timeout [ 63.641525][ T5775] Bluetooth: hci1: command tx timeout [ 63.647438][ T51] Bluetooth: hci3: command tx timeout [ 63.653208][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.675385][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.719979][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.755247][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.767112][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.787868][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.797599][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.806905][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.815694][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.841789][ T5767] veth0_macvtap: entered promiscuous mode [ 63.867660][ T5767] veth1_macvtap: entered promiscuous mode [ 63.900059][ T5765] veth0_macvtap: entered promiscuous mode [ 63.923189][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.934804][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.946123][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.957321][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.969487][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.013894][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.025843][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.036417][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.047400][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.059417][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.071355][ T5765] veth1_macvtap: entered promiscuous mode [ 64.092983][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.103034][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.113150][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.124078][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.158730][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.166067][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.170698][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.187881][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.189432][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.202429][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.217041][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.227643][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.238711][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.250547][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.261468][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.271588][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.283333][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.293239][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.303834][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.315082][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.361319][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.367932][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.369283][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.382571][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.395081][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.404072][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.496997][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.510375][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.597760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.611878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.692530][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.721196][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.731561][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.745389][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.633770][ T5775] Bluetooth: hci2: command tx timeout [ 65.714069][ T5774] Bluetooth: hci0: command tx timeout [ 65.714072][ T51] Bluetooth: hci3: command tx timeout [ 65.714167][ T5775] Bluetooth: hci1: command tx timeout [ 67.713714][ T5775] Bluetooth: hci2: command tx timeout [ 67.794229][ T5774] Bluetooth: hci0: command tx timeout [ 67.794241][ T51] Bluetooth: hci3: command tx timeout [ 67.798837][ T5775] Bluetooth: hci1: command tx timeout [ 68.983545][ C0] sched: RT throttling activated [ 69.469855][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.694727][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.835752][ T5935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.905722][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 69.924462][ T5772] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 69.932845][ T5772] usb 4-1: config 0 has no interface number 0 [ 69.953652][ T5772] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 69.985844][ T5772] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 69.996353][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.005867][ T5772] usb 4-1: Product: syz [ 70.010175][ T5772] usb 4-1: Manufacturer: syz [ 70.015076][ T5772] usb 4-1: SerialNumber: syz [ 70.036794][ T5772] usb 4-1: config 0 descriptor?? [ 70.046762][ T5901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.250950][ T5953] syz.1.44[5953]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 70.284074][ T5953] loop1: detected capacity change from 0 to 1024 [ 70.297384][ T5901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.301220][ T5953] ======================================================= [ 70.301220][ T5953] WARNING: The mand mount option has been deprecated and [ 70.301220][ T5953] and is ignored by this kernel. Remove the mand [ 70.301220][ T5953] option from the mount to silence this warning. [ 70.301220][ T5953] ======================================================= [ 70.396316][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.615705][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.751910][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 71.108719][ T5971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.161971][ T5966] loop1: detected capacity change from 0 to 32768 [ 71.181514][ T5966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.47 (5966) [ 71.242437][ T5966] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.263764][ T5966] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 71.283244][ T5966] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 71.321724][ T5966] BTRFS info (device loop1): trying to use backup root at mount time [ 71.349102][ T5966] BTRFS info (device loop1): setting nodatasum [ 71.360128][ T5966] BTRFS info (device loop1): enabling ssd optimizations [ 71.369601][ T5966] BTRFS info (device loop1): using spread ssd allocation scheme [ 71.380874][ T5966] BTRFS info (device loop1): turning on flush-on-commit [ 71.400770][ T5966] BTRFS info (device loop1): force zlib compression, level 3 [ 71.426717][ T5966] BTRFS info (device loop1): using free space tree [ 71.492882][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504693][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.581412][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 71.968166][ T5772] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.999504][ T5772] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 72.048251][ T5772] asix: probe of 4-1:0.188 failed with error -71 [ 72.107966][ T5772] usb 4-1: USB disconnect, device number 2 [ 72.219300][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.289683][ T6011] tipc: Failed to remove unknown binding: 66,1,1/0:3909209030/3909209032 [ 72.298517][ T6011] tipc: Failed to remove unknown binding: 66,1,1/0:3909209030/3909209032 [ 72.518925][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 72.735889][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 72.807965][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 72.909409][ T27] audit: type=1326 audit(1774964956.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7fc00000 [ 72.973647][ T27] audit: type=1326 audit(1774964956.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31b4d9c819 code=0x7fc00000 [ 73.043616][ T27] audit: type=1326 audit(1774964956.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7fc00000 [ 73.068030][ T6025] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 73.116864][ T6027] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 73.162803][ T6027] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 73.202717][ T6027] team0: Failed to send options change via netlink (err -105) [ 73.228257][ T6027] team0: Port device netdevsim0 added [ 73.306966][ T6027] syz.2.64 (6027) used greatest stack depth: 20168 bytes left [ 73.968535][ T6049] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 74.123714][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 74.147718][ T6057] loop0: detected capacity change from 0 to 512 [ 74.154532][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.268624][ T6049] bridge_slave_0 (unregistering): left allmulticast mode [ 74.306770][ T6049] bridge_slave_0 (unregistering): left promiscuous mode [ 74.324271][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.351894][ T6057] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.370572][ T6057] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.392128][ T6057] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.555115][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 74.623342][ T5764] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 74.952763][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 75.101848][ T6087] loop2: detected capacity change from 0 to 512 [ 75.124362][ T6087] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.146091][ T6087] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.170316][ T6087] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.210588][ T6087] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.83: bad orphan inode 16 [ 75.231530][ T6087] ext4_test_bit(bit=15, block=4) = 0 [ 75.237218][ T6087] EXT4-fs (loop2): 1 orphan inode deleted [ 75.244410][ T6087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.271588][ T6087] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.83: reserved inode found cleared - inode=9 [ 75.371672][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.754151][ T6106] loop3: detected capacity change from 0 to 1024 [ 76.827901][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.894786][ T6106] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.034276][ T6106] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm syz.3.90: lblock 0 mapped to illegal pblock 0 (length 5) [ 77.252469][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.480583][ T6127] loop3: detected capacity change from 0 to 128 [ 77.547492][ T6127] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.595987][ T6127] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.711472][ T6127] syz.3.97 (pid 6127) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 77.797236][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.060984][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 79.075708][ T6172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.083245][ T6172] IPv6: NLM_F_CREATE should be set when creating new route [ 79.103057][ T6172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.110339][ T6172] IPv6: NLM_F_CREATE should be set when creating new route [ 79.495727][ T6185] Zero length message leads to an empty skb [ 79.908129][ T6198] netlink: 168 bytes leftover after parsing attributes in process `syz.0.122'. [ 80.084711][ T6204] loop2: detected capacity change from 0 to 7 [ 80.095656][ T5755] loop2: [ 80.098898][ T5755] loop2: partition table partially beyond EOD, truncated [ 80.110960][ T6204] loop2: [ 80.116437][ T6204] loop2: partition table partially beyond EOD, truncated [ 80.292666][ T6210] loop0: detected capacity change from 0 to 128 [ 80.475291][ T6214] io-wq is not configured for unbound workers [ 80.655953][ T5772] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.885451][ T5772] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.907913][ T5772] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 80.953576][ T5772] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 182, changing to 11 [ 80.983653][ T5772] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59365, setting to 1024 [ 81.007475][ T5772] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.023727][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.039066][ T5772] usb 1-1: Product: syz [ 81.053712][ T5772] usb 1-1: Manufacturer: syz [ 81.067346][ T5772] usb 1-1: SerialNumber: syz [ 81.311519][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.316564][ T6235] loop2: detected capacity change from 0 to 7 [ 81.327541][ T5757] Dev loop2: unable to read RDB block 7 [ 81.333139][ T5757] loop2: AHDI p1 p2 p3 [ 81.342713][ T5757] loop2: partition table partially beyond EOD, truncated [ 81.352102][ T5757] loop2: p1 start 1818582900 is beyond EOD, truncated [ 81.363841][ T5757] loop2: p3 start 335544320 is beyond EOD, truncated [ 81.371632][ T6235] Dev loop2: unable to read RDB block 7 [ 81.383435][ T6235] loop2: AHDI p1 p2 p3 [ 81.389902][ T6235] loop2: partition table partially beyond EOD, truncated [ 81.431630][ T6235] loop2: p1 start 1818582900 is beyond EOD, truncated [ 81.450055][ T6235] loop2: p3 start 335544320 is beyond EOD, truncated [ 81.529186][ T6224] loop1: detected capacity change from 0 to 32768 [ 81.595047][ T6224] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.717887][ T964] cfg80211: failed to load regulatory.db [ 81.918308][ T6224] XFS (loop1): Ending clean mount [ 81.934393][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.156492][ T5772] cdc_ncm 1-1:1.0: bind() failure [ 82.188248][ T5772] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 82.205216][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.217249][ T5772] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 82.238078][ T5772] usbtest: probe of 1-1:1.1 failed with error -71 [ 82.306088][ T5772] usb 1-1: USB disconnect, device number 2 [ 82.481431][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 82.787278][ T6277] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.821651][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 83.200810][ T6290] Bluetooth: MGMT ver 1.22 [ 83.512248][ T6302] loop0: detected capacity change from 0 to 164 [ 83.528579][ T6302] Unable to read rock-ridge attributes [ 83.657408][ T6302] Unable to read rock-ridge attributes [ 83.875635][ T6308] process 'syz.0.167' launched '/dev/fd/8' with NULL argv: empty string added [ 83.985709][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.994084][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.055398][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 84.322618][ T6320] loop2: detected capacity change from 0 to 256 [ 84.403366][ T6320] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 84.681244][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.725138][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.737573][ T6318] loop0: detected capacity change from 0 to 40427 [ 84.768431][ T6318] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 84.801269][ T6318] F2FS-fs (loop0): invalid crc value [ 84.826386][ T6318] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.967630][ T6318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.087518][ T5764] syz-executor: attempt to access beyond end of device [ 85.087518][ T5764] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 85.110401][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 85.122244][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 85.300903][ T6295] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.310054][ T6295] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.320675][ T6295] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.329994][ T6295] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.933849][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.124229][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 86.139311][ T786] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.153415][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.163887][ T786] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 86.191137][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.212203][ T786] usb 2-1: config 0 descriptor?? [ 86.379482][ T6355] Illegal XDP return value 4294967294 on prog (id 40) dev syz_tun, expect packet loss! [ 86.684452][ T786] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 87.279206][ T5846] usb 2-1: USB disconnect, device number 2 [ 87.603678][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.794445][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 87.806443][ T786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 87.819842][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.839142][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.859980][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.880269][ T786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.904502][ T786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.918236][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.932776][ T6394] loop3: detected capacity change from 0 to 64 [ 87.985112][ T6393] team0: Port device bridge1 added [ 88.003655][ T6395] bridge0: port 3(team0) entered blocking state [ 88.021076][ T6395] bridge0: port 3(team0) entered disabled state [ 88.044125][ T6395] team0: entered allmulticast mode [ 88.063727][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.064203][ T6395] team_slave_0: entered allmulticast mode [ 88.103828][ T6395] team_slave_1: entered allmulticast mode [ 88.119436][ T6395] bridge1: entered allmulticast mode [ 88.141854][ T6395] team0: entered promiscuous mode [ 88.148014][ T786] usb 1-1: usb_control_msg returned -32 [ 88.150119][ T6395] team_slave_0: entered promiscuous mode [ 88.164338][ T786] usbtmc 1-1:16.0: can't read capabilities [ 88.172247][ T6395] team_slave_1: entered promiscuous mode [ 88.188809][ T6395] bridge1: entered promiscuous mode [ 88.270540][ T28] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.303625][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.332806][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.353700][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 88.381810][ T28] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 88.401268][ T28] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 88.413622][ T28] usb 3-1: Manufacturer: syz [ 88.418284][ T8] usb 1-1: USB disconnect, device number 3 [ 88.457350][ T28] usb 3-1: config 0 descriptor?? [ 88.893395][ T28] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 88.908838][ T28] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 88.950813][ T28] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 88.960274][ T6406] loop1: detected capacity change from 0 to 256 [ 89.001546][ T6406] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.516162][ T786] usb 3-1: USB disconnect, device number 2 [ 89.762764][ T6426] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 89.863093][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.922294][ T6429] bond1: (slave macvlan0): making interface the new active one [ 89.999743][ T6429] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 90.031327][ T6432] bond1: entered promiscuous mode [ 90.078105][ T6432] macvlan0: entered promiscuous mode [ 90.188620][ T6425] bond1: left promiscuous mode [ 90.197076][ T6425] macvlan0: left promiscuous mode [ 90.220872][ T6437] loop2: detected capacity change from 0 to 16 [ 90.227662][ T6438] loop1: detected capacity change from 0 to 128 [ 90.252284][ T6437] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 90.289259][ T6438] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.345865][ T6438] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.626323][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 90.656854][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 90.658953][ T5765] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 90.699061][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 90.700015][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 90.700478][ T5765] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 90.701631][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 90.702193][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 90.706358][ T5765] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 90.706910][ T5765] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 90.907748][ T6455] loop3: detected capacity change from 0 to 512 [ 90.937220][ T6455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.087596][ T6455] loop3: detected capacity change from 512 to 0 [ 91.088798][ T6458] syz.3.223: attempt to access beyond end of device [ 91.088798][ T6458] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 91.088874][ T6458] syz.3.223: attempt to access beyond end of device [ 91.088874][ T6458] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 91.089127][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089127][ T6458] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 91.089170][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089170][ T6458] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 91.089213][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089213][ T6458] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 91.089265][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089265][ T6458] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 91.089312][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089312][ T6458] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 91.089354][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089354][ T6458] loop3: rw=524288, sector=28, nr_sectors = 2 limit=0 [ 91.089391][ T6458] syz.3.223: attempt to access beyond end of device [ 91.089391][ T6458] loop3: rw=12288, sector=24, nr_sectors = 2 limit=0 [ 91.091561][ T6458] EXT4-fs error (device loop3): ext4_get_inode_loc:4627: inode #15: block 12: comm syz.3.223: unable to read itable block [ 91.091626][ T6458] syz.3.223: attempt to access beyond end of device [ 91.091626][ T6458] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 91.091844][ T6458] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 91.091865][ T6458] EXT4-fs (loop3): I/O error while writing superblock [ 91.104582][ C1] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.641936][ T5766] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 91.657201][ T5766] EXT4-fs error (device loop3): ext4_get_inode_loc:4627: inode #2: block 5: comm syz-executor: unable to read itable block [ 91.673342][ T5766] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 91.681981][ T5766] EXT4-fs (loop3): I/O error while writing superblock [ 91.690129][ T6444] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.710507][ T5766] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: IO failure [ 91.734738][ T5766] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 91.773783][ T5766] EXT4-fs (loop3): I/O error while writing superblock [ 91.792769][ T5766] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #2: comm syz-executor: mark_inode_dirty error [ 91.818727][ T5766] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 91.827703][ T5766] EXT4-fs (loop3): I/O error while writing superblock [ 91.930167][ T49] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4612: inode #15: block 12: comm kworker/u4:3: unable to read itable block [ 91.959408][ T49] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 91.967891][ T49] EXT4-fs (loop3): I/O error while writing superblock [ 91.976168][ T49] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4612: inode #2: block 5: comm kworker/u4:3: unable to read itable block [ 91.989987][ T49] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 91.999620][ T49] EXT4-fs (loop3): I/O error while writing superblock [ 92.008903][ T6233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.032228][ T6233] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 92.052362][ T6233] EXT4-fs (loop3): I/O error while writing superblock [ 92.611418][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.622044][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.630911][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.639768][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.648275][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.656723][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.940285][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 93.094269][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 93.264546][ T1013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.326439][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.340687][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.348671][ T6474] bridge_slave_0: entered allmulticast mode [ 93.361272][ T6474] bridge_slave_0: entered promiscuous mode [ 93.370261][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.382696][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.390363][ T6474] bridge_slave_1: entered allmulticast mode [ 93.406003][ T6474] bridge_slave_1: entered promiscuous mode [ 93.461008][ T1013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.570841][ T1013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.711141][ T1013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.768479][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.808039][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.880122][ T6474] team0: Port device team_slave_0 added [ 93.902753][ T6474] team0: Port device team_slave_1 added [ 93.930272][ T6502] 0x000000000bbe-0x000000020bc1 : "" [ 93.972398][ T6502] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1f442 [ 94.008246][ T6502] ftl_cs: FTL header corrupt! [ 94.067309][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.084006][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.161718][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.174037][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.181872][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.190391][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.204817][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.211921][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.212110][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.244633][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.252543][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.280052][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.306765][ T6510] smc: net device wlan0 applied user defined pnetid SYZ0 [ 94.528489][ T6474] hsr_slave_0: entered promiscuous mode [ 94.576958][ T6474] hsr_slave_1: entered promiscuous mode [ 94.601296][ T6474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.625014][ T6474] Cannot create hsr debugfs directory [ 94.753904][ T5774] Bluetooth: hci3: command tx timeout [ 94.787896][ T6520] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 94.849751][ T6520] team0: Device vxcan1 is of different type [ 95.380429][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 95.418396][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 95.834577][ T6474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.858371][ T6474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.878055][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 95.903415][ T6474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.090290][ T6474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.146367][ T27] audit: type=1326 audit(1774964979.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.188805][ T27] audit: type=1326 audit(1774964979.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.241047][ T27] audit: type=1326 audit(1774964979.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.284201][ T5774] Bluetooth: hci2: command tx timeout [ 96.318844][ T27] audit: type=1326 audit(1774964979.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.350016][ T27] audit: type=1326 audit(1774964979.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.372511][ T27] audit: type=1326 audit(1774964979.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.394971][ T27] audit: type=1326 audit(1774964979.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.419485][ T27] audit: type=1326 audit(1774964979.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.449203][ T27] audit: type=1326 audit(1774964979.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.531900][ T27] audit: type=1326 audit(1774964979.830:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31b4d9c819 code=0x7ffc0000 [ 96.753195][ T1013] hsr_slave_0: left promiscuous mode [ 96.764480][ T1013] hsr_slave_1: left promiscuous mode [ 96.786177][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.801384][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.833782][ T5774] Bluetooth: hci3: command tx timeout [ 96.872366][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.893691][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.902499][ T1013] bridge_slave_1: left allmulticast mode [ 96.922058][ T1013] bridge_slave_1: left promiscuous mode [ 96.946150][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.036722][ T1013] veth1_macvtap: left promiscuous mode [ 97.042707][ T1013] veth0_macvtap: left promiscuous mode [ 97.053898][ T1013] veth1_vlan: left promiscuous mode [ 97.059471][ T1013] veth0_vlan: left promiscuous mode [ 97.899793][ T6585] netlink: 'syz.2.256': attribute type 2 has an invalid length. [ 97.913748][ T6585] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 97.954195][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 98.022616][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 98.076498][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.141289][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.367605][ T5774] Bluetooth: hci2: command tx timeout [ 98.667146][ T1013] bond0 (unregistering): Released all slaves [ 98.914073][ T5774] Bluetooth: hci3: command tx timeout [ 98.928739][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.953916][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.961291][ T6508] bridge_slave_0: entered allmulticast mode [ 98.969921][ T6508] bridge_slave_0: entered promiscuous mode [ 99.049076][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.075014][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.084641][ T6508] bridge_slave_1: entered allmulticast mode [ 99.104433][ T6508] bridge_slave_1: entered promiscuous mode [ 99.298852][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.362543][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.587827][ T6508] team0: Port device team_slave_0 added [ 99.606825][ T6508] team0: Port device team_slave_1 added [ 99.629067][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.706802][ T6596] bond1: entered promiscuous mode [ 99.742212][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.750003][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.776053][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.791728][ T6601] vcan1: entered promiscuous mode [ 99.797881][ T6601] vcan1: entered allmulticast mode [ 99.803932][ T6601] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 99.815664][ T6601] bond1: (slave vcan1): Error -95 calling set_mac_address [ 99.868057][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.885305][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.940116][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.099605][ T6508] hsr_slave_0: entered promiscuous mode [ 100.118167][ T6508] hsr_slave_1: entered promiscuous mode [ 100.164420][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.199946][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.207140][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.221590][ T6609] bio_check_eod: 37 callbacks suppressed [ 100.221605][ T6609] syz.2.259: attempt to access beyond end of device [ 100.221605][ T6609] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 100.241391][ T6609] FAT-fs (loop5): unable to read boot sector [ 100.332076][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.339357][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.450530][ T5774] Bluetooth: hci2: command tx timeout [ 100.994075][ T5774] Bluetooth: hci3: command tx timeout [ 101.030090][ T6508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.064671][ T6508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.080479][ T6508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.118650][ T6508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.267479][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.736119][ T5774] Bluetooth: hci2: command tx timeout [ 102.899783][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.943495][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.973286][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.981265][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.028564][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.035768][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.116348][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 103.123024][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 103.190644][ T8] libceph: connect (1)[c::]:6789 error -101 [ 103.201888][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 103.241157][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 103.266773][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 103.343567][ T6474] veth0_vlan: entered promiscuous mode [ 103.400780][ T6474] veth1_vlan: entered promiscuous mode [ 103.485944][ T8] libceph: connect (1)[c::]:6789 error -101 [ 103.492038][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 103.497572][ T6474] veth0_macvtap: entered promiscuous mode [ 103.498429][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 103.518428][ T6474] veth1_macvtap: entered promiscuous mode [ 103.540199][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 103.551796][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.579736][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.590297][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 103.604007][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 103.622327][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.638037][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.651566][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.680118][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.693147][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.710319][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.721614][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.738155][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.762591][ T6474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.778250][ T6474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.789485][ T6474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.814957][ T6474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.862884][ T6659] ceph: No mds server is up or the cluster is laggy [ 103.863078][ T6669] ceph: No mds server is up or the cluster is laggy [ 103.872651][ T6664] ceph: No mds server is up or the cluster is laggy [ 103.937375][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.269741][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 104.298293][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.325955][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.405374][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.413345][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.693291][ T6508] veth0_vlan: entered promiscuous mode [ 104.767551][ T6508] veth1_vlan: entered promiscuous mode [ 104.786111][ T6704] capability: warning: `syz.0.272' uses 32-bit capabilities (legacy support in use) [ 104.977875][ T6508] veth0_macvtap: entered promiscuous mode [ 105.025386][ T6508] veth1_macvtap: entered promiscuous mode [ 105.089624][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.133964][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.163943][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.194005][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.226571][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.263787][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.285178][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.321833][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.351918][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.390822][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.432312][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.463848][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.483664][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.512886][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.562187][ T6508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.583731][ T6508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.592480][ T6508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.623648][ T6508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.638914][ T6695] loop2: detected capacity change from 0 to 40427 [ 105.693118][ T6695] F2FS-fs (loop2): invalid crc value [ 105.733155][ T6695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.914373][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.941521][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.957015][ T6695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.038706][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.058521][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.251612][ T5767] syz-executor: attempt to access beyond end of device [ 106.251612][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.279000][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 106.279014][ T27] audit: type=1326 audit(1774964989.570:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.4.277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cd99c819 code=0x0 [ 106.329540][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 107.709440][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 108.904648][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 109.676930][ T6831] loop2: detected capacity change from 0 to 512 [ 109.793502][ T6831] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.299: corrupted xattr block 95: invalid header [ 109.896173][ T6837] binder: 6836:6837 ioctl c0306201 0 returned -14 [ 109.929747][ T6831] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 109.997820][ T6831] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.299: bg 0: block 7: invalid block bitmap [ 110.091772][ T6831] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 110.159977][ T6831] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2969: inode #11: comm syz.2.299: corrupted xattr block 95: invalid header [ 110.213730][ T6831] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -117) [ 110.228219][ T6831] EXT4-fs (loop2): 1 orphan inode deleted [ 110.247147][ T6831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.522283][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.191366][ T6875] capability: warning: `syz.5.312' uses deprecated v2 capabilities in a way that may be insecure [ 111.995726][ T6891] loop0: detected capacity change from 0 to 128 [ 112.180110][ T6893] block device autoloading is deprecated and will be removed. [ 112.258684][ T5764] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 112.268809][ T5764] FAT-fs (loop0): Filesystem has been set read-only [ 112.357329][ T6896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.318'. [ 113.141345][ T6916] bridge0: port 3(syz_tun) entered blocking state [ 113.150060][ T6916] bridge0: port 3(syz_tun) entered disabled state [ 113.173933][ T6916] syz_tun: entered allmulticast mode [ 113.180503][ T6916] syz_tun: entered promiscuous mode [ 113.192703][ T6920] tipc: Failed to remove unknown binding: 66,0,0/0:905581982/905581984 [ 113.206859][ T6920] tipc: Failed to remove unknown binding: 66,0,0/0:905581982/905581983 [ 113.212983][ T6916] bridge0: port 3(syz_tun) entered blocking state [ 113.222162][ T6916] bridge0: port 3(syz_tun) entered forwarding state [ 113.237154][ T6922] bridge0: port 3(syz_tun) entered learning state [ 113.625024][ T6935] netlink: 'syz.2.332': attribute type 13 has an invalid length. [ 113.972357][ T6941] kvm: pic: non byte write [ 113.988550][ T6946] lo: Caught tx_queue_len zero misconfig [ 114.127012][ T5846] IPVS: starting estimator thread 0... [ 114.223834][ T6952] IPVS: using max 20 ests per chain, 48000 per kthread [ 115.658203][ T27] audit: type=1800 audit(1774964998.960:17): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.352" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 115.990923][ T7004] vivid-000: ================= START STATUS ================= [ 116.002570][ T7004] vivid-000: Radio HW Seek Mode: Bounded [ 116.011586][ T7004] vivid-000: Radio Programmable HW Seek: false [ 116.023170][ T7004] vivid-000: RDS Rx I/O Mode: Block I/O [ 116.042247][ T7004] vivid-000: Generate RBDS Instead of RDS: false [ 116.051427][ T7004] vivid-000: RDS Reception: true [ 116.069397][ T7004] vivid-000: RDS Program Type: 0 inactive [ 116.086328][ T7004] vivid-000: RDS PS Name: inactive [ 116.100978][ T7004] vivid-000: RDS Radio Text: inactive [ 116.107032][ T7004] vivid-000: RDS Traffic Announcement: false inactive [ 116.119658][ T7004] vivid-000: RDS Traffic Program: false inactive [ 116.126535][ T7004] vivid-000: RDS Music: false inactive [ 116.140612][ T7004] vivid-000: ================== END STATUS ================== [ 117.023698][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.233672][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 117.240903][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.252592][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.266429][ T8] usb 5-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 117.277994][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.288713][ T8] usb 5-1: Product: syz [ 117.317611][ T8] usb 5-1: Manufacturer: syz [ 117.332868][ T8] usb 5-1: SerialNumber: syz [ 117.354043][ T8] usb 5-1: config 0 descriptor?? [ 117.761944][ T5805] usb 5-1: USB disconnect, device number 2 [ 118.533911][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.541649][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.780941][ T7073] binder: BINDER_SET_CONTEXT_MGR already set [ 118.796986][ T7073] binder: 7072:7073 ioctl 4018620d 200000004a80 returned -16 [ 119.200913][ T7062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.254922][ T7062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.276539][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.291135][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.300056][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.314549][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.323100][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.332500][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.342157][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.350906][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.363082][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.378679][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.388030][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.401474][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.411052][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.422330][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.432124][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.447150][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.457326][ T23] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 119.508187][ T23] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 119.613063][ T7087] fido_id[7087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.855430][ T7062] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.868994][ T7062] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.879982][ T7062] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.893396][ T7062] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.055019][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 120.118842][ T7093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.187044][ T7095] macsec1: entered promiscuous mode [ 120.209414][ T7095] bond2: entered promiscuous mode [ 120.245967][ T7095] bond2: left promiscuous mode [ 120.330684][ T7097] loop4: detected capacity change from 0 to 32768 [ 120.381179][ T7097] (syz.4.384,7097,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.420155][ T7097] (syz.4.384,7097,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.525567][ T7100] loop2: detected capacity change from 0 to 32768 [ 120.534110][ T7097] JBD2: Ignoring recovery information on journal [ 120.643432][ T7100] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.679869][ T7097] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 120.902153][ T7100] XFS (loop2): Ending clean mount [ 120.929474][ T7100] XFS (loop2): Quotacheck needed: Please wait. [ 121.025834][ T7100] XFS (loop2): Quotacheck: Done. [ 121.156927][ T6474] ocfs2: Unmounting device (7,4) on (node local) [ 121.209381][ T27] audit: type=1800 audit(1774965004.510:18): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.385" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 121.298113][ T27] audit: type=1800 audit(1774965004.570:19): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.385" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 122.039921][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.798900][ T7158] syz_tun: entered allmulticast mode [ 122.915570][ T7157] syz_tun: left allmulticast mode [ 123.335468][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.395'. [ 124.691293][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.729174][ T7203] team0: Port device bond0 added [ 124.759839][ T7204] netlink: 'syz.4.402': attribute type 16 has an invalid length. [ 124.783783][ T7204] netlink: 'syz.4.402': attribute type 17 has an invalid length. [ 124.912368][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.947988][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.000105][ T7211] loop2: detected capacity change from 0 to 512 [ 125.049488][ T7211] EXT4-fs: Ignoring removed nobh option [ 125.099988][ T7211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.168247][ T7211] EXT4-fs (loop2): 1 truncate cleaned up [ 125.181843][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.274226][ T7203] syz.4.402 (7203) used greatest stack depth: 19240 bytes left [ 125.480745][ T27] audit: type=1800 audit(1774965008.780:20): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.403" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 125.669092][ T7229] netlink: 'syz.5.407': attribute type 4 has an invalid length. [ 125.822292][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.548536][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 126.600168][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 126.955197][ T7268] loop4: detected capacity change from 0 to 16 [ 127.008556][ T7268] erofs: (device loop4): mounted with root inode @ nid 36. [ 127.069189][ T7268] syz.4.419: attempt to access beyond end of device [ 127.069189][ T7268] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 127.138282][ T7274] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 127.230187][ T7274] erofs: (device loop4): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 127.260139][ T7274] syz.4.419: attempt to access beyond end of device [ 127.260139][ T7274] loop4: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 127.302885][ T7274] syz.4.419: attempt to access beyond end of device [ 127.302885][ T7274] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 127.345587][ T7274] syz.4.419: attempt to access beyond end of device [ 127.345587][ T7274] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 127.381631][ T7274] syz.4.419: attempt to access beyond end of device [ 127.381631][ T7274] loop4: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 127.634716][ T6474] BUG: Bad page state in process syz-executor pfn:792e4 [ 127.642299][ T6474] page:ffffea0001e4b900 refcount:0 mapcount:0 mapping:ffff888076f58d20 index:0x2 pfn:0x792e4 [ 127.652605][ T6474] aops:z_erofs_cache_aops ino:0 [ 127.657507][ T6474] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 127.665249][ T6474] page_type: 0xffffffff() [ 127.669597][ T6474] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff888076f58d20 [ 127.678182][ T6474] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 127.686801][ T6474] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 127.694098][ T6474] page_owner tracks the page as allocated [ 127.700151][ T6474] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7268, tgid 7267 (syz.4.419), ts 127068963915, free_ts 127031813835 [ 127.722206][ T6474] post_alloc_hook+0x1c1/0x200 [ 127.726998][ T6474] get_page_from_freelist+0x1951/0x19e0 [ 127.732534][ T6474] __alloc_pages+0x1f0/0x460 [ 127.737542][ T6474] z_erofs_do_read_page+0x2181/0x36b0 [ 127.742906][ T6474] z_erofs_pcluster_readmore+0x2cf/0x450 [ 127.748625][ T6474] z_erofs_read_folio+0x237/0x5c0 [ 127.753673][ T6474] filemap_read_folio+0x172/0x760 [ 127.758694][ T6474] do_read_cache_folio+0x468/0x7d0 [ 127.763827][ T6474] erofs_bread+0x16f/0x630 [ 127.768257][ T6474] erofs_namei+0x2ae/0xf50 [ 127.772654][ T6474] erofs_lookup+0x135/0x310 [ 127.777232][ T6474] path_openat+0x10e4/0x3230 [ 127.781813][ T6474] do_filp_open+0x1f5/0x430 [ 127.786318][ T6474] do_sys_openat2+0x134/0x1d0 [ 127.790979][ T6474] __x64_sys_open+0x11f/0x140 [ 127.796104][ T6474] do_syscall_64+0x55/0xa0 [ 127.800519][ T6474] page last free stack trace: [ 127.805207][ T6474] free_unref_page_prepare+0x7b2/0x8c0 [ 127.810661][ T6474] free_unref_page_list+0xbe/0x860 [ 127.815793][ T6474] release_pages+0x1f7a/0x2200 [ 127.820539][ T6474] tlb_flush_mmu+0x379/0x510 [ 127.825194][ T6474] tlb_finish_mmu+0xf9/0x220 [ 127.829806][ T6474] exit_mmap+0x428/0xb90 [ 127.834114][ T6474] __mmput+0x118/0x3c0 [ 127.838196][ T6474] exit_mm+0x1f2/0x2c0 [ 127.843061][ T6474] do_exit+0x8dd/0x2460 [ 127.847413][ T6474] do_group_exit+0x21b/0x2d0 [ 127.852018][ T6474] get_signal+0x12fc/0x13f0 [ 127.856555][ T6474] arch_do_signal_or_restart+0xc2/0x800 [ 127.862109][ T6474] exit_to_user_mode_loop+0x70/0x110 [ 127.867448][ T6474] exit_to_user_mode_prepare+0xee/0x180 [ 127.873007][ T6474] syscall_exit_to_user_mode+0x1a/0x50 [ 127.878690][ T6474] do_syscall_64+0x61/0xa0 [ 127.883106][ T6474] Modules linked in: [ 127.887076][ T6474] CPU: 1 PID: 6474 Comm: syz-executor Not tainted syzkaller #0 [ 127.894623][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.904670][ T6474] Call Trace: [ 127.907942][ T6474] [ 127.910863][ T6474] dump_stack_lvl+0x18c/0x250 [ 127.915537][ T6474] ? show_regs_print_info+0x20/0x20 [ 127.920729][ T6474] ? swiotlb_print_info+0x70/0x70 [ 127.925754][ T6474] bad_page+0x14b/0x170 [ 127.929900][ T6474] free_unref_page_prepare+0x85f/0x8c0 [ 127.935352][ T6474] free_unref_page+0x32/0x2e0 [ 127.940022][ T6474] ? __folio_put+0xef/0x210 [ 127.944521][ T6474] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 127.950937][ T6474] erofs_shrink_workstation+0x11f/0x290 [ 127.956480][ T6474] ? erofs_shrinker_unregister+0x170/0x170 [ 127.962364][ T6474] ? io_schedule+0xd0/0xd0 [ 127.966864][ T6474] ? kobject_put+0x428/0x460 [ 127.971446][ T6474] erofs_shrinker_unregister+0x5d/0x170 [ 127.976987][ T6474] erofs_put_super+0x4e/0x150 [ 127.981659][ T6474] ? erofs_free_inode+0xb0/0xb0 [ 127.986502][ T6474] generic_shutdown_super+0x134/0x2b0 [ 127.991872][ T6474] kill_block_super+0x44/0x90 [ 127.996543][ T6474] erofs_kill_sb+0x4c/0x140 [ 128.001036][ T6474] deactivate_locked_super+0x97/0x100 [ 128.006400][ T6474] cleanup_mnt+0x43b/0x4d0 [ 128.010811][ T6474] task_work_run+0x1d4/0x260 [ 128.015397][ T6474] ? task_work_cancel+0x220/0x220 [ 128.020416][ T6474] ? exit_to_user_mode_loop+0x3b/0x110 [ 128.025870][ T6474] exit_to_user_mode_loop+0xe6/0x110 [ 128.031146][ T6474] exit_to_user_mode_prepare+0xee/0x180 [ 128.036684][ T6474] syscall_exit_to_user_mode+0x1a/0x50 [ 128.042136][ T6474] do_syscall_64+0x61/0xa0 [ 128.046549][ T6474] ? clear_bhb_loop+0x40/0x90 [ 128.051216][ T6474] ? clear_bhb_loop+0x40/0x90 [ 128.055886][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.061768][ T6474] RIP: 0033:0x7fe2cd99da57 [ 128.066186][ T6474] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 128.085780][ T6474] RSP: 002b:00007ffd317a89d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.094184][ T6474] RAX: 0000000000000000 RBX: 00007fe2cda32048 RCX: 00007fe2cd99da57 [ 128.102142][ T6474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd317a8a90 [ 128.110100][ T6474] RBP: 00007ffd317a8a90 R08: 00007ffd317a9a90 R09: 00000000ffffffff [ 128.118060][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd317a9b20 [ 128.126019][ T6474] R13: 00007fe2cda32048 R14: 000000000001f20d R15: 00007ffd317a9b60 [ 128.133990][ T6474] [ 128.138093][ T6474] Disabling lock debugging due to kernel taint [ 128.144332][ T6474] BUG: Bad page state in process syz-executor pfn:53c6a [ 128.151695][ T6474] page:ffffea00014f1a80 refcount:0 mapcount:0 mapping:ffff888076f58d20 index:0x3 pfn:0x53c6a [ 128.161885][ T6474] aops:z_erofs_cache_aops ino:0 [ 128.166744][ T6474] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 128.174457][ T6474] page_type: 0xffffffff() [ 128.178761][ T6474] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff888076f58d20 [ 128.187329][ T6474] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 128.195908][ T6474] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 128.203165][ T6474] page_owner tracks the page as allocated [ 128.208872][ T6474] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7268, tgid 7267 (syz.4.419), ts 127068973029, free_ts 127031802338 [ 128.230832][ T6474] post_alloc_hook+0x1c1/0x200 [ 128.235602][ T6474] get_page_from_freelist+0x1951/0x19e0 [ 128.241126][ T6474] __alloc_pages+0x1f0/0x460 [ 128.245712][ T6474] z_erofs_do_read_page+0x2181/0x36b0 [ 128.251448][ T6474] z_erofs_pcluster_readmore+0x2cf/0x450 [ 128.257121][ T6474] z_erofs_read_folio+0x237/0x5c0 [ 128.262127][ T6474] filemap_read_folio+0x172/0x760 [ 128.267146][ T6474] do_read_cache_folio+0x468/0x7d0 [ 128.272232][ T6474] erofs_bread+0x16f/0x630 [ 128.276644][ T6474] erofs_namei+0x2ae/0xf50 [ 128.281034][ T6474] erofs_lookup+0x135/0x310 [ 128.285528][ T6474] path_openat+0x10e4/0x3230 [ 128.290093][ T6474] do_filp_open+0x1f5/0x430 [ 128.294588][ T6474] do_sys_openat2+0x134/0x1d0 [ 128.299244][ T6474] __x64_sys_open+0x11f/0x140 [ 128.303912][ T6474] do_syscall_64+0x55/0xa0 [ 128.308307][ T6474] page last free stack trace: [ 128.312954][ T6474] free_unref_page_prepare+0x7b2/0x8c0 [ 128.318412][ T6474] free_unref_page_list+0xbe/0x860 [ 128.323516][ T6474] release_pages+0x1f7a/0x2200 [ 128.328287][ T6474] tlb_flush_mmu+0x379/0x510 [ 128.332855][ T6474] tlb_finish_mmu+0xf9/0x220 [ 128.337449][ T6474] exit_mmap+0x428/0xb90 [ 128.341670][ T6474] __mmput+0x118/0x3c0 [ 128.345731][ T6474] exit_mm+0x1f2/0x2c0 [ 128.349779][ T6474] do_exit+0x8dd/0x2460 [ 128.354341][ T6474] do_group_exit+0x21b/0x2d0 [ 128.358916][ T6474] get_signal+0x12fc/0x13f0 [ 128.363392][ T6474] arch_do_signal_or_restart+0xc2/0x800 [ 128.368974][ T6474] exit_to_user_mode_loop+0x70/0x110 [ 128.374262][ T6474] exit_to_user_mode_prepare+0xee/0x180 [ 128.379786][ T6474] syscall_exit_to_user_mode+0x1a/0x50 [ 128.385233][ T6474] do_syscall_64+0x61/0xa0 [ 128.389631][ T6474] Modules linked in: [ 128.393498][ T6474] CPU: 1 PID: 6474 Comm: syz-executor Tainted: G B syzkaller #0 [ 128.402497][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.412527][ T6474] Call Trace: [ 128.415788][ T6474] [ 128.418700][ T6474] dump_stack_lvl+0x18c/0x250 [ 128.423356][ T6474] ? show_regs_print_info+0x20/0x20 [ 128.428543][ T6474] ? swiotlb_print_info+0x70/0x70 [ 128.433558][ T6474] bad_page+0x14b/0x170 [ 128.437709][ T6474] free_unref_page_prepare+0x85f/0x8c0 [ 128.443154][ T6474] free_unref_page+0x32/0x2e0 [ 128.447809][ T6474] ? __folio_put+0xef/0x210 [ 128.452289][ T6474] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 128.453620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 128.458679][ T6474] erofs_shrink_workstation+0x11f/0x290 [ 128.472333][ T6474] ? erofs_shrinker_unregister+0x170/0x170 [ 128.478115][ T6474] ? io_schedule+0xd0/0xd0 [ 128.482511][ T6474] ? kobject_put+0x428/0x460 [ 128.487079][ T6474] erofs_shrinker_unregister+0x5d/0x170 [ 128.492599][ T6474] erofs_put_super+0x4e/0x150 [ 128.497256][ T6474] ? erofs_free_inode+0xb0/0xb0 [ 128.502082][ T6474] generic_shutdown_super+0x134/0x2b0 [ 128.507432][ T6474] kill_block_super+0x44/0x90 [ 128.512083][ T6474] erofs_kill_sb+0x4c/0x140 [ 128.516562][ T6474] deactivate_locked_super+0x97/0x100 [ 128.521908][ T6474] cleanup_mnt+0x43b/0x4d0 [ 128.526306][ T6474] task_work_run+0x1d4/0x260 [ 128.530875][ T6474] ? task_work_cancel+0x220/0x220 [ 128.535879][ T6474] ? exit_to_user_mode_loop+0x3b/0x110 [ 128.541317][ T6474] exit_to_user_mode_loop+0xe6/0x110 [ 128.546593][ T6474] exit_to_user_mode_prepare+0xee/0x180 [ 128.552136][ T6474] syscall_exit_to_user_mode+0x1a/0x50 [ 128.557591][ T6474] do_syscall_64+0x61/0xa0 [ 128.561994][ T6474] ? clear_bhb_loop+0x40/0x90 [ 128.566653][ T6474] ? clear_bhb_loop+0x40/0x90 [ 128.571314][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.577184][ T6474] RIP: 0033:0x7fe2cd99da57 [ 128.581574][ T6474] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 128.601169][ T6474] RSP: 002b:00007ffd317a89d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.609564][ T6474] RAX: 0000000000000000 RBX: 00007fe2cda32048 RCX: 00007fe2cd99da57 [ 128.617518][ T6474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd317a8a90 [ 128.625468][ T6474] RBP: 00007ffd317a8a90 R08: 00007ffd317a9a90 R09: 00000000ffffffff [ 128.633416][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd317a9b20 [ 128.641363][ T6474] R13: 00007fe2cda32048 R14: 000000000001f20d R15: 00007ffd317a9b60 [ 128.649318][ T6474] [ 128.652575][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 128.659994][ T6474] BUG: Bad page state in process syz-executor pfn:2c4b9 [ 128.667065][ T6474] page:ffffea0000b12e40 refcount:0 mapcount:0 mapping:ffff888076f58d20 index:0x4 pfn:0x2c4b9 [ 128.677212][ T6474] aops:z_erofs_cache_aops ino:0 [ 128.682043][ T6474] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 128.689750][ T6474] page_type: 0xffffffff() [ 128.694079][ T6474] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff888076f58d20 [ 128.702636][ T6474] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 128.711224][ T6474] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 128.718500][ T6474] page_owner tracks the page as allocated [ 128.724201][ T6474] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7268, tgid 7267 (syz.4.419), ts 127068981692, free_ts 127031790950 [ 128.746068][ T6474] post_alloc_hook+0x1c1/0x200 [ 128.750820][ T6474] get_page_from_freelist+0x1951/0x19e0 [ 128.756356][ T6474] __alloc_pages+0x1f0/0x460 [ 128.761284][ T6474] z_erofs_do_read_page+0x2181/0x36b0 [ 128.766693][ T6474] z_erofs_pcluster_readmore+0x2cf/0x450 [ 128.772304][ T6474] z_erofs_read_folio+0x237/0x5c0 [ 128.777325][ T6474] filemap_read_folio+0x172/0x760 [ 128.782326][ T6474] do_read_cache_folio+0x468/0x7d0 [ 128.787428][ T6474] erofs_bread+0x16f/0x630 [ 128.791820][ T6474] erofs_namei+0x2ae/0xf50 [ 128.796222][ T6474] erofs_lookup+0x135/0x310 [ 128.800699][ T6474] path_openat+0x10e4/0x3230 [ 128.805279][ T6474] do_filp_open+0x1f5/0x430 [ 128.809755][ T6474] do_sys_openat2+0x134/0x1d0 [ 128.814435][ T6474] __x64_sys_open+0x11f/0x140 [ 128.819092][ T6474] do_syscall_64+0x55/0xa0 [ 128.823486][ T6474] page last free stack trace: [ 128.828154][ T6474] free_unref_page_prepare+0x7b2/0x8c0 [ 128.833629][ T6474] free_unref_page_list+0xbe/0x860 [ 128.838729][ T6474] release_pages+0x1f7a/0x2200 [ 128.843467][ T6474] tlb_flush_mmu+0x379/0x510 [ 128.848061][ T6474] tlb_finish_mmu+0xf9/0x220 [ 128.852630][ T6474] exit_mmap+0x428/0xb90 [ 128.856875][ T6474] __mmput+0x118/0x3c0 [ 128.860919][ T6474] exit_mm+0x1f2/0x2c0 [ 128.865339][ T6474] do_exit+0x8dd/0x2460 [ 128.869480][ T6474] do_group_exit+0x21b/0x2d0 [ 128.874108][ T6474] get_signal+0x12fc/0x13f0 [ 128.878589][ T6474] arch_do_signal_or_restart+0xc2/0x800 [ 128.884129][ T6474] exit_to_user_mode_loop+0x70/0x110 [ 128.889395][ T6474] exit_to_user_mode_prepare+0xee/0x180 [ 128.894951][ T6474] syscall_exit_to_user_mode+0x1a/0x50 [ 128.900389][ T6474] do_syscall_64+0x61/0xa0 [ 128.904803][ T6474] Modules linked in: [ 128.908672][ T6474] CPU: 1 PID: 6474 Comm: syz-executor Tainted: G B syzkaller #0 [ 128.917667][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.927704][ T6474] Call Trace: [ 128.930965][ T6474] [ 128.933876][ T6474] dump_stack_lvl+0x18c/0x250 [ 128.938539][ T6474] ? show_regs_print_info+0x20/0x20 [ 128.943717][ T6474] ? swiotlb_print_info+0x70/0x70 [ 128.948722][ T6474] bad_page+0x14b/0x170 [ 128.952855][ T6474] free_unref_page_prepare+0x85f/0x8c0 [ 128.958299][ T6474] free_unref_page+0x32/0x2e0 [ 128.962956][ T6474] ? __folio_put+0xef/0x210 [ 128.967442][ T6474] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 128.973843][ T6474] erofs_shrink_workstation+0x11f/0x290 [ 128.979370][ T6474] ? erofs_shrinker_unregister+0x170/0x170 [ 128.985155][ T6474] ? io_schedule+0xd0/0xd0 [ 128.989552][ T6474] ? kobject_put+0x428/0x460 [ 128.994122][ T6474] erofs_shrinker_unregister+0x5d/0x170 [ 128.999646][ T6474] erofs_put_super+0x4e/0x150 [ 129.004306][ T6474] ? erofs_free_inode+0xb0/0xb0 [ 129.009139][ T6474] generic_shutdown_super+0x134/0x2b0 [ 129.014490][ T6474] kill_block_super+0x44/0x90 [ 129.019143][ T6474] erofs_kill_sb+0x4c/0x140 [ 129.023629][ T6474] deactivate_locked_super+0x97/0x100 [ 129.028978][ T6474] cleanup_mnt+0x43b/0x4d0 [ 129.033374][ T6474] task_work_run+0x1d4/0x260 [ 129.037949][ T6474] ? task_work_cancel+0x220/0x220 [ 129.043041][ T6474] ? exit_to_user_mode_loop+0x3b/0x110 [ 129.048485][ T6474] exit_to_user_mode_loop+0xe6/0x110 [ 129.053751][ T6474] exit_to_user_mode_prepare+0xee/0x180 [ 129.059279][ T6474] syscall_exit_to_user_mode+0x1a/0x50 [ 129.064719][ T6474] do_syscall_64+0x61/0xa0 [ 129.069119][ T6474] ? clear_bhb_loop+0x40/0x90 [ 129.073786][ T6474] ? clear_bhb_loop+0x40/0x90 [ 129.078464][ T6474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.084341][ T6474] RIP: 0033:0x7fe2cd99da57 [ 129.088738][ T6474] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 129.108329][ T6474] RSP: 002b:00007ffd317a89d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.116719][ T6474] RAX: 0000000000000000 RBX: 00007fe2cda32048 RCX: 00007fe2cd99da57 [ 129.124671][ T6474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd317a8a90 [ 129.132620][ T6474] RBP: 00007ffd317a8a90 R08: 00007ffd317a9a90 R09: 00000000ffffffff [ 129.140569][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd317a9b20 [ 129.148519][ T6474] R13: 00007fe2cda32048 R14: 000000000001f20d R15: 00007ffd317a9b60 [ 129.156474][ T6474] [ 132.918415][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930415][ T1287] ieee802154 phy1 wpan1: encryption failed: -22