last executing test programs: 3m40.060863782s ago: executing program 0 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r3, 0x4000) close(r3) 3m39.117126579s ago: executing program 0 (id=56): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc000000000000000000000000000000cbbe0400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xc8}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@mcast2, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f00000000000000000700", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800120001040000080003000000000008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) 3m39.080220751s ago: executing program 0 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101005, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="190001"]) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 3m38.929593744s ago: executing program 0 (id=62): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x2000000000000178, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendto(0xffffffffffffffff, &(0x7f00000006c0)="8b80985ec4058dd7d4a5dba00490f80d7406e1ae9726234ecaf2ec68b17e52da3ec8cff8e4f6648e8c832612c5dec41ad97eb53044b2476b509dd30bfe322a81df55423ff349fca326845ad0036edbdf7afde0985ecb8da40f135797cd0e1373edef19e9f9bab17d8bd5ed7a640cc196879ea6dad5287191c3fd6dff83865281f7fb32c6b989d27dfc2ff43719f75c13895f052cc66f3026e01df42a64bec292e68fa0e9414ec7d925", 0xa9, 0x50, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r3, 0x0, 0x2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m38.890550917s ago: executing program 0 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000003c0)=0x81) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m37.562826034s ago: executing program 0 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 3m37.559281124s ago: executing program 32 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 3m8.102124404s ago: executing program 3 (id=251): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x4) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r1], 0x38}}, 0x10) 3m8.015731611s ago: executing program 3 (id=254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x2, 0x80805, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000044c0)=""/4049, &(0x7f0000000000)=0xfd1) 3m6.851367335s ago: executing program 3 (id=259): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @remote}, 0x10) listen(r0, 0x3a5) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f00000003c0)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 3m6.240767654s ago: executing program 3 (id=263): setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4dc, &(0x7f0000000f40)="$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") mq_notify(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100, 0x72) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, 0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$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") 3m5.111866286s ago: executing program 3 (id=273): listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000005800000121f", 0x2e}], 0x1}, 0x404c080) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r2) 3m4.19076797s ago: executing program 3 (id=284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0xfffffdca, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 3m4.19062919s ago: executing program 33 (id=284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0xfffffdca, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1m22.462361438s ago: executing program 2 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x940, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) read$FUSE(r3, &(0x7f0000004440)={0x2020}, 0x2020) 1m20.58021382s ago: executing program 2 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m20.131089427s ago: executing program 2 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r4, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054) 1m19.236065619s ago: executing program 2 (id=910): setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4dc, &(0x7f0000000f40)="$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") mq_notify(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100, 0x72) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, 0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@commit={'commit', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@jqfmt_vfsv0}, {@nodelalloc}, {@errors_remount}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x582, &(0x7f00000005c0)="$eJzs3V9rW+UfAPDvSdv9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IEDnpSZe1SZp2qanN5wNne56ckzznyXO+T57nnKQngIF1Mv0nF/FyRHyVRIw1rRuObOXJte1Wn96eSZckarWPf0/iwobXSrL/R7PMSxHx8xcRZ3Kby60sr8wXSqXiYpafqC7cmKgsr5y9tlCYK84Vr09NT59/c3rqnbff6lldX7/857cfPXz//JenVr/58fGx+0lcjKPZurRePSjiTnPmZOHvLDUSFzdsONmDwvaSpN87wI4MZXE+EmkfMBZDWdQD+9/nEVEDBlQi/mFANcYBjbl9j+bB/xlP3lubAG2u//DauZE4VJ8bHVlNnpsZpfPd8R6Un5bx028P7qdLdD4PcXiLPMC23LkbEeeGhzf3f0nW/+3cufrJ4842ljFonz/QTw/T8U9yJ2JT/OfWxz/RYvwz2iJ2d2Lr+M897kExbaXjv3dbjn/Xu67xoSz3v/qYbyS5eq1UPBcR/4+I0zFyMM13up5zfvVRrd265vFfuqTlN8aC2X48Hj74/HNmC9XCi9S52ZO7Ea+0HP8m6+2ftGj/9P243GUZJ4oPXm23buv6767aDxGvtWz/Z1e0ks7XJyfqx8NE46jY7I97J35pV36/65+2/5HO9R9Pmq/XVrZfxveH/iq2W7fT4/9A8kk9fSB77FahWl2cjDiQfDg8uvHxqWfPbeQb26f1P32qdfx3Ov7TydenXdb/3vF7bTfdC+0/27H9D8fz7b/9xKMPPvuuXfndtf8b9dTp7JFu+r9ud/CF3jwAAAAAAADYY3IRcTSSXH49ncvl82vf7zgeR3KlcqV65mp56fps1H8rOx4jucaV7rGm70NMZt+HbeSnNuSnI+JYRHw9dLiez8+US7P9rjwAAAAAAAAAAAAAAAAAAADsEaNtfv+f+nWo33sH7Lr6jQ0OdretG73D/rLlLf97cacnYE/aMv6BfWv78e/MAOwXPv9hcIl/GFziHwZXt/E/MrbLOwL863z+w+AS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBTly9dSpfa6tPbM2l+9uby0nz55tnZYmU+v7A0k58pL97Iz5XLc6Vifqa8sNXrlcrlG5NTsXRrolqsVCcqyytXFspL16tXri0U5opXiiP+2DAAAAAAAAAAAAAAAAAAAABsUllemS+USsVFibaJC7EndqNFolar1dJWfOEKrtnR04f7/SZI7Eqiv/0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT7JwAA///YgzPG") 1m16.229578522s ago: executing program 2 (id=925): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m14.879982681s ago: executing program 2 (id=931): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) 1m14.879821451s ago: executing program 34 (id=931): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) 6.326627629s ago: executing program 7 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000026c0)={0x24, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '\b'}]}, 0x24}}, 0x0) 6.202143869s ago: executing program 7 (id=1259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 4.886796316s ago: executing program 7 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = getpid() socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.910726824s ago: executing program 5 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffff1312, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.499897548s ago: executing program 5 (id=1274): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.493337248s ago: executing program 7 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2200110, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=macromanian,dmask=00000000000000000000000,errors=remount-ro,errors=continue,fmask=00000000000000000122753,uid=', @ANYRESOCT=0x0, @ANYBLOB="2c696f636861727365743d6d6163726f6d616e69616e2c646973636172642c757466382c6572726f72733d636f6e74696e75652c00b24a414a138ea1f090829675858b09596dae40b2fee0"], 0x4, 0x152f, &(0x7f00000079c0)="$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") 3.492817698s ago: executing program 6 (id=1276): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 3.422012984s ago: executing program 1 (id=1279): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) 3.015035287s ago: executing program 6 (id=1280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.996222728s ago: executing program 1 (id=1282): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 2.983548409s ago: executing program 5 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xb, 0x4, 0x2, 0x1, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.874849958s ago: executing program 1 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2.874605708s ago: executing program 6 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x400ddf}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.461756272s ago: executing program 7 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) pwritev2(r4, &(0x7f0000001ec0)=[{&(0x7f0000001900)='\f', 0x1}], 0x1, 0x8, 0xff, 0x0) 2.456964692s ago: executing program 5 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x6, 0x0, @tick, {}, {}, @raw32}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 2.326847582s ago: executing program 6 (id=1288): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x208182) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xfffc, 0x6, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.326613642s ago: executing program 6 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file3\x00') execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 2.038022306s ago: executing program 4 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1d, 0x1, 0x0, 0x4, 0x0, 0x1}, {0xd, 0x2, 0x6, 0xff, 0x5, 0x800}, 0x2, 0xfffffffc, 0x1756}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xfb757fd6f69f56d1}]}}]}, 0x6c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.912909816s ago: executing program 1 (id=1291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x6, 0x9, 0x5, 0xfff, 0x9, 0x7, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.557217144s ago: executing program 4 (id=1292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.513555008s ago: executing program 1 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r6, 0x2, 0x6}, &(0x7f0000000740)=0xc) 1.503276029s ago: executing program 4 (id=1294): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x1, 0xc}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 1.404862997s ago: executing program 5 (id=1295): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) 1.404620527s ago: executing program 4 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 33.821098ms ago: executing program 1 (id=1297): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x43000000) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 33.456768ms ago: executing program 4 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.58853ms ago: executing program 4 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x10, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x401, 0x8, 0x2000}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.02385ms ago: executing program 5 (id=1300): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x8000000003c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000700)=ANY=[], 0x0) 250.341µs ago: executing program 6 (id=1301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 7 (id=1302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000034d000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): batadv: link becomes ready [ 34.599321][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.600686][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.602133][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.611473][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.612861][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.614149][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.615482][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.624631][ T4055] device veth0_macvtap entered promiscuous mode [ 34.628784][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.630292][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.631801][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.633359][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.635776][ T4054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.638294][ T4054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.639794][ T4054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.641223][ T4054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.643522][ T4055] device veth1_macvtap entered promiscuous mode [ 34.667151][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.668663][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.670183][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.671648][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.673169][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.682110][ T4043] device veth0_vlan entered promiscuous mode [ 34.702101][ T359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.703386][ T359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.710674][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.712183][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.713760][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.769661][ T4043] device veth1_vlan entered promiscuous mode [ 34.779220][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.780924][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.782490][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.784121][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.785764][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.789308][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.791431][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.792632][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.794180][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.795676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.800211][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.804280][ T3122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.805585][ T3122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.807999][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.809893][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.811523][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.813455][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.816135][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.026011][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.144751][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.147970][ T4055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.149380][ T4055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.150784][ T4055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.152185][ T4055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.155799][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.158528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.160055][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.161485][ T359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.162778][ T359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.173612][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.175164][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.177152][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.179572][ T4043] device veth0_macvtap entered promiscuous mode [ 35.181973][ T4043] device veth1_macvtap entered promiscuous mode [ 35.210083][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.210358][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.211682][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.213272][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.216055][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.219156][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.220782][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.222327][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.223877][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.225465][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.228234][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.233218][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.236018][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.239026][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.240574][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.242176][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.248486][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.251810][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.253408][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.255156][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.257467][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.259072][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.260609][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.262244][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.263763][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.265850][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.269159][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.275444][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.282521][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.287061][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.316298][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.323000][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.330861][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.340929][ T4043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.351034][ T4043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.373236][ T4043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.374673][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.714346][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.715753][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.717150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.739663][ T4168] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7'. [ 35.805885][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 35.807318][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 35.808399][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 35.809429][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 35.811445][ T4169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.813871][ T4169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.091281][ T4096] Bluetooth: hci4: command 0x041b tx timeout [ 36.149648][ T4181] ptrace attach of "./syz-executor exec"[4047] was attempted by " [ 36.205791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.443539][ T4191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 36.501396][ T4191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 36.510252][ T4191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.248848][ T4203] loop3: detected capacity change from 0 to 8 [ 37.258650][ T4207] device syzkaller0 entered promiscuous mode [ 37.260553][ T4203] squashfs: Unknown parameter '0xffffffffffffffffgp1H%SqXQ^' [ 37.275937][ T4207] tipc: Started in network mode [ 37.280122][ T4207] tipc: Node identity fe9810948b29, cluster identity 4711 [ 37.287473][ T4207] tipc: Enabled bearer , priority 0 [ 37.294817][ T4205] tipc: Resetting bearer [ 37.634255][ T4205] tipc: Disabling bearer [ 37.658855][ T4211] loop2: detected capacity change from 0 to 512 [ 37.696905][ T4211] ======================================================= [ 37.696905][ T4211] WARNING: The mand mount option has been deprecated and [ 37.696905][ T4211] and is ignored by this kernel. Remove the mand [ 37.696905][ T4211] option from the mount to silence this warning. [ 37.696905][ T4211] ======================================================= [ 37.708396][ T4211] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.712098][ T4211] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.713417][ T4211] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.18: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 37.719961][ T4211] EXT4-fs error (device loop2): ext4_quota_enable:6418: comm syz.2.18: Bad quota inode: 3, type: 0 [ 37.721969][ T4211] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.724474][ T4211] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 37.725665][ T4211] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.283067][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 38.285064][ T25] Bluetooth: hci3: command 0x040f tx timeout [ 38.286139][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 38.287490][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 38.289847][ T25] Bluetooth: hci4: command 0x040f tx timeout [ 40.947147][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 40.948296][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 40.949424][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 40.951292][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 40.952282][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 41.546813][ T4262] bpf_jit: unknown atomic op code f1 [ 41.843303][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 41.846636][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31'. [ 41.936282][ T4266] loop2: detected capacity change from 0 to 512 [ 42.024970][ T4266] EXT4-fs (loop2): inline encryption not supported [ 42.026207][ T4266] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 42.916722][ T4266] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.943100][ T4266] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.944178][ T4266] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.33: inode #13: comm syz.2.33: iget: illegal inode # [ 42.950502][ T4284] loop1: detected capacity change from 0 to 64 [ 42.954065][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 42.955163][ T4266] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.33: couldn't read orphan inode 13 (err -117) [ 42.991049][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 42.992154][ T4266] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,bsdgroups,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 43.085597][ T4287] udc-core: couldn't find an available UDC or it's busy [ 43.098946][ T4287] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.104859][ T4284] fuse: Unknown parameter 'ø%I|4 [ 43.104859][ T4284] >KXuro5/+re~r^oK#鮤{Gg%ߚMʦ:VϗIjW(69/dxA! (.e+^+' [ 43.443528][ T4293] netlink: 'syz.2.33': attribute type 32 has an invalid length. [ 44.388677][ T4313] loop0: detected capacity change from 0 to 128 [ 44.441815][ T4313] qnx6: superblock #1 checksum error [ 44.450060][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.452162][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.453380][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.455310][ T4319] device bridge_slave_0 left promiscuous mode [ 44.457514][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.498836][ T4319] device bridge_slave_1 left promiscuous mode [ 44.500155][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.538555][ T4319] bond0: (slave bond_slave_0): Releasing backup interface [ 44.580751][ T4319] bond0: (slave bond_slave_1): Releasing backup interface [ 44.630220][ T4319] team0: Port device team_slave_0 removed [ 44.642215][ T4319] team0: Port device team_slave_1 removed [ 44.643522][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.644836][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.647586][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.737839][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.883582][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a458034b: rx timeout, send abort [ 45.015540][ T4320] team0: Mode changed to "loadbalance" [ 45.023904][ T4331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 45.024620][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 45.025561][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 46.621440][ T4358] Cannot find set identified by id 0 to match [ 46.896621][ T4360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 46.898093][ T4360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 46.906103][ T4362] binder: BINDER_SET_CONTEXT_MGR already set [ 46.908226][ T4362] binder: 4361:4362 ioctl 4018620d 200002c0 returned -16 [ 46.913022][ T4362] binder: tried to use weak ref as strong ref [ 46.922215][ T4362] binder: 4361:4362 Acquire 1 refcount change on invalid ref 0 ret -22 [ 46.927717][ T4362] binder: 4361:4362 got transaction to invalid handle, 1 [ 46.928970][ T4362] binder: 4361:4362 transaction failed 29201/-22, size 0-0 line 2917 [ 46.930639][ T4362] binder: 4361:4362 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.932718][ T4362] binder: 4362 RLIMIT_NICE not set [ 46.933509][ T4362] binder: 4361:4362 ioctl c0306201 20000240 returned -11 [ 46.945090][ T4364] tipc: Started in network mode [ 46.945926][ T4364] tipc: Node identity cab2ad2949bb, cluster identity 4711 [ 46.947562][ T4364] tipc: Enabled bearer , priority 0 [ 46.949685][ T4364] device syzkaller0 entered promiscuous mode [ 46.958832][ T4364] tipc: Resetting bearer [ 46.965911][ T4362] binder: 4361:4362 got reply transaction with no transaction stack [ 46.968905][ T4362] binder: 4361:4362 transaction failed 29201/-71, size 0-0 line 2822 [ 46.970593][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.973632][ T4363] tipc: Resetting bearer [ 46.980841][ T4363] tipc: Disabling bearer [ 47.051022][ T4117] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.076735][ T4377] loop0: detected capacity change from 0 to 1024 [ 47.080443][ T4377] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 47.104740][ T4055] hfsplus: bad catalog entry type [ 47.105701][ T4055] hfsplus: bad catalog entry type [ 47.675831][ T4374] loop2: detected capacity change from 0 to 32768 [ 47.719736][ T4374] XFS (loop2): Mounting V5 Filesystem [ 47.741887][ T4374] XFS (loop2): Ending clean mount [ 48.434242][ T4047] XFS (loop2): Unmounting Filesystem [ 48.515325][ T4402] netlink: 96 bytes leftover after parsing attributes in process `syz.3.70'. [ 48.517005][ T4402] netlink: 80 bytes leftover after parsing attributes in process `syz.3.70'. [ 48.552562][ T4402] macvtap0: refused to change device tx_queue_len [ 48.557917][ T4402] loop3: detected capacity change from 0 to 256 [ 48.590988][ T3122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.620252][ T4402] attempt to access beyond end of device [ 48.620252][ T4402] loop3: rw=2049, want=260, limit=256 [ 48.658364][ T3122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.711914][ T4403] chnl_net:caif_netlink_parms(): no params data found [ 48.784195][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.785568][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.856297][ T4432] process 'syz.3.72' launched './file2' with NULL argv: empty string added [ 49.593676][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.611391][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.243436][ T4410] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.245033][ T4410] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.246675][ T4410] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.248271][ T4410] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.357083][ T4435] netlink: 'syz.2.69': attribute type 9 has an invalid length. [ 50.374750][ T3122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.379072][ T4443] loop4: detected capacity change from 0 to 65 [ 50.448990][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.450236][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.451757][ T4403] device bridge_slave_0 entered promiscuous mode [ 50.454032][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.455170][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.458414][ T4403] device bridge_slave_1 entered promiscuous mode [ 50.469673][ T4443] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 51.447022][ T4421] Bluetooth: hci3: command 0x0409 tx timeout [ 51.601786][ T3122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.618868][ T4460] tipc: Started in network mode [ 51.619714][ T4460] tipc: Node identity 7f000001, cluster identity 4711 [ 51.621240][ T4460] tipc: Enabled bearer , priority 10 [ 51.630548][ T4403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.633088][ T4403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.648631][ T4460] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 51.650632][ T4460] tipc: Enabled bearer , priority 10 [ 51.653366][ T4403] team0: Port device team_slave_0 added [ 51.660778][ T4403] team0: Port device team_slave_1 added [ 51.713757][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.714902][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.723075][ T4403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.725483][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.726842][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.731075][ T4403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.830197][ T4466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 51.838060][ T4467] loop3: detected capacity change from 0 to 128 [ 51.847541][ T4403] device hsr_slave_0 entered promiscuous mode [ 51.886878][ T4403] device hsr_slave_1 entered promiscuous mode [ 51.926789][ T4403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.928052][ T4403] Cannot create hsr debugfs directory [ 51.942965][ T4466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.948802][ T4466] bond0: (slave rose0): Enslaving as an active interface with an up link [ 51.971300][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.109726][ T4403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.890210][ T4104] tipc: Node number set to 2130706433 [ 53.059163][ T4403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.238689][ T4403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.362999][ T4505] loop4: detected capacity change from 0 to 512 [ 53.454666][ T4505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.457012][ T4505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.466582][ T4421] Bluetooth: hci3: command 0x041b tx timeout [ 53.638239][ T4403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.691020][ T3122] tipc: Left network mode [ 53.693196][ T4505] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.89: bad orphan inode 131083 [ 53.695073][ T4505] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 53.842819][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.847458][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.848981][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.852314][ T4403] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.855106][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.856919][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.858435][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.859628][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.861665][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.865278][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.867045][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.868757][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.869866][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.873207][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.879866][ T4524] loop3: detected capacity change from 0 to 256 [ 53.891597][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.893669][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.895827][ T4524] exfat: Deprecated parameter 'namecase' [ 53.902795][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.912989][ T4403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.916150][ T4403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.921659][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.923532][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.923575][ T4524] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 53.926571][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.930884][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.933619][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.938148][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.942022][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.970129][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.079390][ T4540] loop4: detected capacity change from 0 to 256 [ 54.126242][ T4540] FAT-fs (loop4): Directory bread(block 64) failed [ 54.127526][ T4540] FAT-fs (loop4): Directory bread(block 65) failed [ 54.128690][ T4540] FAT-fs (loop4): Directory bread(block 66) failed [ 54.129666][ T4540] FAT-fs (loop4): Directory bread(block 67) failed [ 54.130646][ T4540] FAT-fs (loop4): Directory bread(block 68) failed [ 54.142805][ T4540] FAT-fs (loop4): Directory bread(block 69) failed [ 54.144151][ T4540] FAT-fs (loop4): Directory bread(block 70) failed [ 54.145240][ T4540] FAT-fs (loop4): Directory bread(block 71) failed [ 54.152848][ T4540] FAT-fs (loop4): Directory bread(block 72) failed [ 54.159909][ T4540] FAT-fs (loop4): Directory bread(block 73) failed [ 54.191430][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.192800][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.202954][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.778408][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.780207][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.790080][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.791683][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.793424][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.797429][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.809883][ T4403] device veth0_vlan entered promiscuous mode [ 54.814788][ T4403] device veth1_vlan entered promiscuous mode [ 54.832577][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.834236][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.835780][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.841874][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.849687][ T4403] device veth0_macvtap entered promiscuous mode [ 54.855340][ T4403] device veth1_macvtap entered promiscuous mode [ 54.867513][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.870800][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.875930][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.882127][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.885991][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.892023][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.895275][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.905809][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.907839][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.909529][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.911124][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.950029][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.951908][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.953561][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.955162][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.956946][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.958618][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.960902][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.962577][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.964360][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.967403][ T4403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.968830][ T4403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.970163][ T4403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.986857][ T4403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.079303][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.080612][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.082357][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.604131][ T4421] Bluetooth: hci3: command 0x040f tx timeout [ 55.644405][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.646089][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.899334][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.038710][ T4600] loop4: detected capacity change from 0 to 2048 [ 56.084930][ T4600] hpfs: hpfs_map_sector(): read error [ 56.387170][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e7f356cb: rx timeout, send abort [ 56.555472][ T4622] binder: 4621:4622 tried to acquire reference to desc 0, got 1 instead [ 56.574815][ T3122] device hsr_slave_0 left promiscuous mode [ 56.588376][ T4127] binder: undelivered TRANSACTION_COMPLETE [ 56.651470][ T3122] device hsr_slave_1 left promiscuous mode [ 56.702928][ T4127] binder: undelivered transaction 9, process died. [ 56.734657][ T4628] loop1: detected capacity change from 0 to 8 [ 56.740844][ T4633] loop4: detected capacity change from 0 to 512 [ 56.751456][ T4628] SQUASHFS error: zlib decompression failed, data probably corrupt [ 56.752926][ T4628] SQUASHFS error: Failed to read block 0x9b: -5 [ 56.753959][ T4628] SQUASHFS error: Unable to read metadata cache entry [99] [ 56.755247][ T4628] SQUASHFS error: Unable to read inode 0x127 [ 56.766620][ T3122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.767896][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.770489][ T4633] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.770497][ T3122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.774850][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.777106][ T3122] device bridge_slave_1 left promiscuous mode [ 56.778685][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.784501][ T4633] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 56.787441][ T4633] EXT4-fs (loop4): 1 truncate cleaned up [ 56.788410][ T4633] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 56.820854][ T3122] device bridge_slave_0 left promiscuous mode [ 56.821953][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.860917][ C0] vcan0: j1939_tp_rxtimer: 0x0000000006f6693c: rx timeout, send abort [ 56.863355][ T4628] xt_TCPMSS: Only works on TCP SYN packets [ 56.888551][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e7f356cb: abort rx timeout. Force session deactivation [ 57.362344][ C0] vcan0: j1939_tp_rxtimer: 0x0000000006f6693c: abort rx timeout. Force session deactivation [ 57.476583][ T3122] device veth1_macvtap left promiscuous mode [ 57.477826][ T3122] device veth0_macvtap left promiscuous mode [ 57.478902][ T3122] device veth1_vlan left promiscuous mode [ 57.480096][ T3122] device veth0_vlan left promiscuous mode [ 57.626487][ T1540] Bluetooth: hci3: command 0x0419 tx timeout [ 57.939689][ T3122] team0 (unregistering): Port device team_slave_1 removed [ 57.943955][ T3122] team0 (unregistering): Port device team_slave_0 removed [ 57.948052][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.269400][ T3122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.369213][ T3122] bond0 (unregistering): Released all slaves [ 58.440345][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.78'. [ 58.456506][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.458299][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.131440][ T4672] device ipip0 entered promiscuous mode [ 59.255308][ T4683] loop2: detected capacity change from 0 to 128 [ 59.321996][ T4695] loop3: detected capacity change from 0 to 512 [ 60.208869][ T4695] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.119: bg 0: block 248: padding at end of block bitmap is not set [ 60.223588][ T4695] Quota error (device loop3): write_blk: dquota write failed [ 60.224983][ T4695] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 60.234846][ T4695] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.119: Failed to acquire dquot type 1 [ 60.249294][ T4695] EXT4-fs (loop3): 1 truncate cleaned up [ 60.251694][ T4695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.265386][ T4715] loop4: detected capacity change from 0 to 1024 [ 60.373081][ T4715] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 60.374578][ T4715] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000001" or missing value [ 60.382852][ T4695] tipc: Failed to obtain node identity [ 60.383743][ T4695] tipc: Enabling of bearer rejected, failed to enable media [ 60.396394][ T4715] udc-core: couldn't find an available UDC or it's busy [ 60.399492][ T4715] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.829653][ T359] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6) [ 60.833275][ T359] EXT4-fs error (device loop3): ext4_release_dquot:6243: comm kworker/u4:3: Failed to release dquot type 1 [ 60.855386][ T4734] loop2: detected capacity change from 0 to 64 [ 60.900350][ T4734] hfs: type requires a 4 character value [ 60.904987][ T4734] hfs: unable to parse mount options [ 61.302476][ T4742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 61.687678][ T4771] loop1: detected capacity change from 0 to 1024 [ 62.324473][ T4784] loop2: detected capacity change from 0 to 128 [ 62.637030][ T4784] qnx6: invalid mount options. [ 62.641882][ T4791] loop5: detected capacity change from 0 to 128 [ 62.727579][ T4791] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,bsddf,errors=remount-ro,. Quota mode: none. [ 63.310854][ T4820] loop2: detected capacity change from 0 to 256 [ 63.391820][ T4830] loop4: detected capacity change from 0 to 128 [ 63.408476][ T4825] tipc: Started in network mode [ 63.418593][ T4825] tipc: Node identity 8a23143c2489, cluster identity 4711 [ 63.428464][ T4825] tipc: Enabled bearer , priority 0 [ 63.435572][ T4825] device syzkaller0 entered promiscuous mode [ 63.453282][ T4825] tipc: Resetting bearer [ 63.460974][ T4821] tipc: Resetting bearer [ 63.465439][ T4821] tipc: Disabling bearer [ 63.571322][ T4830] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 64.891283][ T4860] ptrace attach of "./syz-executor exec"[4044] was attempted by ""[4860] [ 64.942775][ T4850] binder: 4849:4850 tried to acquire reference to desc 0, got 1 instead [ 64.956326][ T4088] binder: undelivered transaction 14, process died. [ 64.971887][ T4863] binder: 4862:4863 tried to acquire reference to desc 0, got 1 instead [ 64.974603][ T4863] binder_alloc: 4862: pid 4862 spamming oneway? 2 buffers allocated for a total size of 5120 [ 64.977660][ T4863] udc-core: couldn't find an available UDC or it's busy [ 64.978847][ T4863] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.981261][ T4104] binder: release 4862:4863 transaction 20 out, still active [ 64.982726][ T4104] binder: undelivered TRANSACTION_COMPLETE [ 64.983770][ T4104] binder: undelivered TRANSACTION_COMPLETE [ 64.984659][ T4104] binder: undelivered TRANSACTION_COMPLETE [ 65.025481][ T4867] netlink: 277 bytes leftover after parsing attributes in process `syz.4.145'. [ 65.068418][ T4870] loop4: detected capacity change from 0 to 1024 [ 65.072393][ T4870] EXT4-fs (loop4): inline encryption not supported [ 65.074288][ T4870] EXT4-fs (loop4): Ignoring removed bh option [ 65.075409][ T4870] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.098589][ T4870] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 65.139754][ T4870] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.148: Allocating blocks 497-513 which overlap fs metadata [ 65.142845][ T4870] EXT4-fs (loop4): Remounting filesystem read-only [ 65.144191][ T4870] EXT4-fs (loop4): pa 00000000f4871109: logic 128, phys. 385, len 8 [ 65.145591][ T4870] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 65.155492][ T4870] EXT4-fs (loop4): Remounting filesystem read-only [ 65.821862][ T4881] sctp: [Deprecated]: syz.4.151 (pid 4881) Use of int in max_burst socket option. [ 65.821862][ T4881] Use struct sctp_assoc_value instead [ 65.920311][ T1540] binder: undelivered transaction 21, process died. [ 65.921580][ T1540] binder: undelivered transaction 19, process died. [ 65.922891][ T1540] binder: send failed reply for transaction 20, target dead [ 65.947121][ T4886] Zero length message leads to an empty skb [ 65.991626][ T4890] netlink: 'syz.3.155': attribute type 21 has an invalid length. [ 65.995872][ T4890] netlink: 156 bytes leftover after parsing attributes in process `syz.3.155'. [ 66.089494][ T4890] netlink: 'syz.3.155': attribute type 21 has an invalid length. [ 66.090787][ T4890] netlink: 6 bytes leftover after parsing attributes in process `syz.3.155'. [ 66.114537][ T4898] netlink: 56 bytes leftover after parsing attributes in process `syz.4.157'. [ 66.116033][ T4898] netlink: 56 bytes leftover after parsing attributes in process `syz.4.157'. [ 66.237604][ T4901] loop1: detected capacity change from 0 to 40427 [ 66.243830][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 66.266796][ T4913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 66.341508][ T4921] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.607825][ T4901] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 66.609259][ T4901] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.614002][ T4901] F2FS-fs (loop1): invalid crc value [ 66.640158][ T4901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.717939][ T4901] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.719242][ T4901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.744687][ T4901] attempt to access beyond end of device [ 66.744687][ T4901] loop1: rw=2049, want=45104, limit=40427 [ 66.749742][ T4901] attempt to access beyond end of device [ 66.749742][ T4901] loop1: rw=2049, want=45144, limit=40427 [ 66.751586][ T4901] attempt to access beyond end of device [ 66.751586][ T4901] loop1: rw=2049, want=45104, limit=40427 [ 68.676063][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.176'. [ 68.780871][ T4973] udc-core: couldn't find an available UDC or it's busy [ 68.782168][ T4973] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.814074][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 68.911398][ T4975] ptrace attach of "./syz-executor exec"[4047] was attempted by "\x09   0  "[4975] [ 69.282305][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.181'. [ 69.784991][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.787992][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.829809][ T3341] cfg80211: failed to load regulatory.db [ 69.942201][ T4994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.430463][ T5025] netlink: 'syz.4.193': attribute type 8 has an invalid length. [ 70.434311][ T5025] bridge0: port 3(syz_tun) entered blocking state [ 70.435637][ T5025] bridge0: port 3(syz_tun) entered disabled state [ 70.436710][ T5017] loop5: detected capacity change from 0 to 2048 [ 70.439295][ T5025] device syz_tun entered promiscuous mode [ 70.483702][ T5017] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.485318][ T5017] NILFS (loop5): mounting unchecked fs [ 70.486207][ T5017] NILFS (loop5): recovery required for readonly filesystem [ 70.494536][ T5017] NILFS (loop5): write access will be enabled during recovery [ 70.527159][ T5017] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 70.570408][ T5031] MPTCP: addr_signal error, add_addr=1, echo=0 [ 70.571455][ T4495] udevd[4495]: incorrect nilfs2 checksum on /dev/loop5 [ 70.582891][ T5017] NILFS (loop5): couldn't remount because the filesystem is in an incomplete recovery state [ 71.662428][ T5056] loop3: detected capacity change from 0 to 256 [ 72.036496][ T5060] loop2: detected capacity change from 0 to 1024 [ 72.077717][ T5064] loop4: detected capacity change from 0 to 256 [ 72.110559][ T5066] loop3: detected capacity change from 0 to 1024 [ 72.287814][ T5069] tipc: Cannot configure node identity twice [ 72.290706][ T5069] tipc: Cannot configure node identity twice [ 72.410672][ T5075] udc-core: couldn't find an available UDC or it's busy [ 72.411860][ T5075] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.439551][ T4088] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.443557][ T4088] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.791811][ T5079] udc-core: couldn't find an available UDC or it's busy [ 72.795983][ T5079] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.823730][ T5086] loop3: detected capacity change from 0 to 764 [ 72.894344][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 73.093276][ T5099] netlink: 'syz.5.219': attribute type 10 has an invalid length. [ 73.575885][ T5099] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.588090][ T5114] udc-core: couldn't find an available UDC or it's busy [ 74.589259][ T5114] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.675022][ T5131] tipc: Started in network mode [ 74.679893][ T5131] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 74.685542][ T5131] tipc: Enabled bearer , priority 18 [ 75.145239][ T5150] binder: 5148:5150 tried to acquire reference to desc 0, got 1 instead [ 75.148575][ T5150] binder: 5148:5150 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.150721][ T5150] binder: 5150 RLIMIT_NICE not set [ 75.151553][ T5150] binder: 5150 RLIMIT_NICE not set [ 75.153293][ T5150] binder: 5150 RLIMIT_NICE not set [ 75.154366][ T5150] binder: 5148:5150 got transaction with invalid data ptr [ 75.155630][ T5150] binder: 5148:5150 transaction failed 29201/-14, size 240-0 line 3406 [ 75.162289][ T5150] binder: send failed reply for transaction 26 to 5148:5150 [ 75.185232][ T3341] binder: undelivered TRANSACTION_ERROR: 29190 [ 75.186563][ T3341] binder: undelivered TRANSACTION_COMPLETE [ 75.187629][ T3341] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.253136][ T5161] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.255132][ T5161] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.266097][ T5161] tipc: Resetting bearer [ 75.267253][ T5161] tipc: Resetting bearer [ 75.284332][ T148] tipc: Resetting bearer [ 75.288025][ T5161] netlink: 'syz.5.232': attribute type 16 has an invalid length. [ 75.289428][ T5161] netlink: 'syz.5.232': attribute type 17 has an invalid length. [ 75.304959][ T5167] loop4: detected capacity change from 0 to 4096 [ 75.346514][ T5161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.348748][ T5167] ntfs3: loop4: ino=5, "/" directory corrupted [ 75.361170][ T5167] ntfs3: loop4: ino=5, "/" directory corrupted [ 75.442553][ T5173] loop2: detected capacity change from 0 to 512 [ 75.535290][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.933628][ T3341] tipc: Node number set to 10005162 [ 75.947433][ T5190] ntfs3: loop4: ino=5, "/" directory corrupted [ 75.957897][ T5190] ntfs3: loop4: ino=5, "/" directory corrupted [ 75.970988][ T5181] loop3: detected capacity change from 0 to 512 [ 76.018470][ T5181] EXT4-fs (loop3): Unrecognized mount option "fsuuid=01l292" or missing value [ 76.568919][ T5197] binder: 5196:5197 tried to acquire reference to desc 0, got 1 instead [ 76.584787][ T5197] binder: 5196:5197 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 76.606499][ T5197] binder: 5197 RLIMIT_NICE not set [ 76.609512][ T4088] binder: release 5196:5197 transaction 32 out, still active [ 76.664783][ T5206] loop2: detected capacity change from 0 to 512 [ 76.676646][ T4088] binder: undelivered TRANSACTION_COMPLETE [ 76.706573][ T4088] binder: send failed reply for transaction 32, target dead [ 76.804161][ T5212] loop4: detected capacity change from 0 to 512 [ 76.822969][ T5206] EXT4-fs (loop2): 1 orphan inode deleted [ 76.823990][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.864938][ T5212] EXT4-fs (loop4): 1 truncate cleaned up [ 76.865922][ T5212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.023259][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 78.063565][ T5325] loop5: detected capacity change from 0 to 8 [ 78.146706][ T5325] SQUASHFS error: xz decompression failed, data probably corrupt [ 78.147977][ T5325] SQUASHFS error: Failed to read block 0x108: -5 [ 78.148933][ T5325] SQUASHFS error: Unable to read metadata cache entry [106] [ 78.150096][ T5325] SQUASHFS error: Unable to read inode 0x11f [ 78.175177][ T5291] tc_dump_action: action bad kind [ 79.780144][ T5373] loop3: detected capacity change from 0 to 512 [ 80.120635][ T5373] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 80.120635][ T5373] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 80.120635][ T5373] [ 80.147630][ T5373] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 80.147630][ T5373] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 80.147630][ T5373] [ 80.150660][ T5373] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.179713][ T5373] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 80.213207][ T5373] EXT4-fs (loop3): 1 truncate cleaned up [ 80.218775][ T5373] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 80.238316][ T5300] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 80.241988][ T5300] EXT4-fs error (device loop3): ext4_release_dquot:6243: comm kworker/u4:17: Failed to release dquot type 1 [ 80.394906][ T5373] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.882245][ T4054] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 80.894314][ T4054] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.357887][ T5445] loop4: detected capacity change from 0 to 512 [ 81.414936][ T5445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.430289][ T5458] udc-core: couldn't find an available UDC or it's busy [ 81.432605][ T5458] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.681301][ T5479] binder: 5477:5479 tried to acquire reference to desc 0, got 1 instead [ 81.683376][ T5479] binder_alloc: 5477: pid 5477 spamming oneway? 2 buffers allocated for a total size of 5120 [ 81.685327][ T5479] binder_alloc: 5477: pid 5477 spamming oneway? 3 buffers allocated for a total size of 5128 [ 81.691070][ T5479] binder: 5477:5479 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 81.699578][ T4429] binder: undelivered TRANSACTION_COMPLETE [ 81.700508][ T4429] binder: undelivered TRANSACTION_COMPLETE [ 81.701461][ T4429] binder: undelivered TRANSACTION_COMPLETE [ 81.712761][ T4429] binder: undelivered transaction 38, process died. [ 81.713876][ T4429] binder: undelivered transaction 39, process died. [ 81.714963][ T4429] binder: undelivered transaction 37, process died. [ 81.726829][ T5481] udc-core: couldn't find an available UDC or it's busy [ 81.727897][ T5481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.262695][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 82.279708][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.280933][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.282360][ T5486] device bridge_slave_0 entered promiscuous mode [ 82.284892][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286315][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.288796][ T5486] device bridge_slave_1 entered promiscuous mode [ 82.303544][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.307189][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.330287][ T5486] team0: Port device team_slave_0 added [ 82.340522][ T5486] team0: Port device team_slave_1 added [ 82.363380][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.367456][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.385262][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.387914][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.390173][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.399976][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.765549][ T5486] device hsr_slave_0 entered promiscuous mode [ 82.877210][ T5486] device hsr_slave_1 entered promiscuous mode [ 82.916502][ T5486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.918476][ T5486] Cannot create hsr debugfs directory [ 83.722840][ T5520] bridge_slave_0: default FDB implementation only supports local addresses [ 83.853014][ T5486] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.865913][ T5535] loop2: detected capacity change from 0 to 512 [ 83.871692][ T5535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.889446][ T5535] EXT4-fs (loop2): 1 truncate cleaned up [ 83.890456][ T5535] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.204740][ T5486] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.211975][ T4421] Bluetooth: hci4: command 0x0409 tx timeout [ 84.238869][ T5531] netlink: 'syz.5.296': attribute type 10 has an invalid length. [ 84.292076][ T5486] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.323337][ T5541] loop5: detected capacity change from 0 to 512 [ 84.339415][ T5541] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 84.340816][ T5486] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.341340][ T5541] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.343560][ T5541] Quota error (device loop5): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 84.345334][ T5541] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.362087][ T5541] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 84.370399][ T5541] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.300: bg 0: block 40: padding at end of block bitmap is not set [ 84.384913][ T5541] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.390525][ T5541] EXT4-fs (loop5): 1 truncate cleaned up [ 84.392642][ T5541] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.495733][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.500423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.501952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.505393][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.513078][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.514681][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.516202][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.517432][ T5298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.519377][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.522969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.524638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.526043][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.527270][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.551472][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.574960][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.592418][ T5486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.594084][ T5486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.610989][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.613139][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.614684][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.618003][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.626722][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.723769][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.739724][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.743043][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.745488][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.747635][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.252816][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.254183][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.259480][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.332016][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.333844][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.342669][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.344274][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.346069][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.351344][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.354070][ T5486] device veth0_vlan entered promiscuous mode [ 86.359910][ T5486] device veth1_vlan entered promiscuous mode [ 86.373649][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.375364][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.377952][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.379447][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.382897][ T5486] device veth0_macvtap entered promiscuous mode [ 86.385673][ T5486] device veth1_macvtap entered promiscuous mode [ 86.399676][ T1540] Bluetooth: hci4: command 0x041b tx timeout [ 86.403032][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.404784][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.406476][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.408144][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.409637][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.411216][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.417045][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.419267][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.420952][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.422523][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.424205][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.425892][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.427964][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.430025][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.431178][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.437993][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.439743][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.443793][ T5588] udc-core: couldn't find an available UDC or it's busy [ 86.445013][ T5588] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.448915][ T5588] udc-core: couldn't find an available UDC or it's busy [ 86.450183][ T5588] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.456473][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.458192][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.459691][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.462723][ T5486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.464112][ T5486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501837][ T5486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.503329][ T5486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.548765][ T5305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.550253][ T5305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.553879][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.892761][ T5305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.894236][ T5305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.897562][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.076039][ T5600] loop4: detected capacity change from 0 to 32768 [ 87.112385][ T5600] XFS (loop4): Mounting V5 Filesystem [ 87.135566][ T5600] XFS (loop4): Ending clean mount [ 87.728923][ T5625] netlink: 'syz.5.317': attribute type 10 has an invalid length. [ 87.748112][ T5625] team0: Device ipvlan1 failed to register rx_handler [ 88.075860][ T5627] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.426761][ T4423] Bluetooth: hci4: command 0x040f tx timeout [ 88.663605][ T5633] loop5: detected capacity change from 0 to 512 [ 88.719887][ T5633] EXT4-fs (loop5): Ignoring removed nobh option [ 88.720979][ T5633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.073789][ T5633] EXT4-fs (loop5): 1 truncate cleaned up [ 89.074816][ T5633] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 89.206364][ T4043] XFS (loop4): Unmounting Filesystem [ 89.297074][ T5651] capability: warning: `syz.1.325' uses deprecated v2 capabilities in a way that may be insecure [ 90.681629][ T5664] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.086000][ T1540] Bluetooth: hci4: command 0x0419 tx timeout [ 91.441466][ T5670] loop2: detected capacity change from 0 to 64 [ 92.439115][ T5683] loop5: detected capacity change from 0 to 2048 [ 92.514935][ T5685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.532832][ T5670] device vlan3 entered promiscuous mode [ 92.534893][ T5670] device bond0 entered promiscuous mode [ 92.535795][ T5670] device bond_slave_0 entered promiscuous mode [ 92.541342][ T5670] device bond_slave_1 entered promiscuous mode [ 92.605153][ T5687] udc-core: couldn't find an available UDC or it's busy [ 92.609097][ T5687] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.684666][ T4037] Alternate GPT is invalid, using primary GPT. [ 92.690522][ T4037] loop5: p1 p2 p3 [ 92.701059][ T5683] Alternate GPT is invalid, using primary GPT. [ 92.702181][ T5683] loop5: p1 p2 p3 [ 92.704011][ T5694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 92.934491][ T5701] netlink: 60 bytes leftover after parsing attributes in process `syz.4.342'. [ 93.314284][ T5703] device vlan0 entered promiscuous mode [ 93.435103][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 93.437466][ T4495] udevd[4495]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 93.448172][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 93.453514][ T5705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.454129][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.343'. [ 93.462566][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 93.462814][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 93.469115][ T4495] udevd[4495]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 94.010989][ T26] audit: type=1326 audit(93.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.014533][ T26] audit: type=1326 audit(93.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.022227][ T26] audit: type=1326 audit(93.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=10 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.025598][ T26] audit: type=1326 audit(93.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.029454][ T26] audit: type=1326 audit(93.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.033269][ T26] audit: type=1326 audit(93.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.039492][ T26] audit: type=1326 audit(93.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.043973][ T26] audit: type=1326 audit(93.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.051074][ T26] audit: type=1326 audit(93.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.055037][ T26] audit: type=1326 audit(93.990:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d49f28 code=0x7ffc0000 [ 94.145212][ T5726] syz.5.349 sent an empty control message without MSG_MORE. [ 94.556173][ T5731] netlink: 'syz.4.351': attribute type 33 has an invalid length. [ 94.557702][ T5731] netlink: 152 bytes leftover after parsing attributes in process `syz.4.351'. [ 94.640452][ T5735] loop6: detected capacity change from 0 to 512 [ 94.643034][ T5735] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 94.649010][ T5735] EXT4-fs (loop6): 1 truncate cleaned up [ 94.649922][ T5735] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 94.664970][ T5735] tipc: Started in network mode [ 94.665980][ T5735] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 94.668317][ T5735] tipc: Enabled bearer , priority 0 [ 94.853701][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 95.437913][ T5760] loop2: detected capacity change from 0 to 256 [ 95.469229][ T5760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 95.743523][ T4104] tipc: Node number set to 11578026 [ 97.201670][ T5792] 9pnet: Could not find request transport: 0xffffffffffffffff [ 97.236810][ T5795] netlink: 'syz.6.371': attribute type 13 has an invalid length. [ 97.729611][ T5806] loop5: detected capacity change from 0 to 128 [ 98.345191][ T5813] loop6: detected capacity change from 0 to 2048 [ 98.367239][ T5816] futex_wake_op: syz.1.377 tries to shift op by 36; fix this program [ 98.447495][ T5813] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.465322][ T5813] overlayfs: failed to set xattr on upper [ 98.466642][ T5813] overlayfs: ...falling back to index=off,metacopy=off. [ 98.468147][ T5813] overlayfs: Failed to create volatile/dirty file. [ 98.534138][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 98.548562][ T5827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.390'. [ 98.555596][ T5827] udc-core: couldn't find an available UDC or it's busy [ 98.584606][ T5827] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.605598][ T5827] xt_hashlimit: max too large, truncated to 1048576 [ 101.814019][ T5881] loop6: detected capacity change from 0 to 512 [ 102.279656][ T5881] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 102.882633][ T5909] udc-core: couldn't find an available UDC or it's busy [ 102.883993][ T5909] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.431046][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.407'. [ 104.086204][ T5930] delete_channel: no stack [ 104.223346][ T5936] syz.5.411 uses obsolete (PF_INET,SOCK_PACKET) [ 107.753104][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 108.422444][ T5996] udc-core: couldn't find an available UDC or it's busy [ 108.423789][ T5996] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.431531][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.6.437'. [ 109.433811][ T6015] overlayfs: failed to clone upperpath [ 109.527002][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 110.512829][ T6045] netlink: 'syz.6.449': attribute type 11 has an invalid length. [ 112.979360][ T6099] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 112.982334][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.067298][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.088066][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.428197][ T4104] wlan1: authenticate with 08:02:11:00:00:00 [ 113.440149][ T4104] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 113.444541][ T5298] wlan1: authenticated [ 113.447097][ T4104] mac80211_hwsim hwsim15 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 113.457244][ T5289] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 113.566779][ T5298] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 113.995715][ T5300] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 114.107609][ T5289] wlan1: association with 08:02:11:00:00:00 timed out [ 114.531585][ T6151] loop5: detected capacity change from 0 to 8 [ 114.560874][ T6151] SQUASHFS error: zlib decompression failed, data probably corrupt [ 114.562169][ T6151] SQUASHFS error: Failed to read block 0x9b: -5 [ 114.563182][ T6151] SQUASHFS error: Unable to read metadata cache entry [99] [ 114.564288][ T6151] SQUASHFS error: Unable to read inode 0x127 [ 115.361996][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.336705][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.376696][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.141777][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 117.143474][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 117.726150][ T6215] loop4: detected capacity change from 0 to 164 [ 117.753745][ T6215] attempt to access beyond end of device [ 117.753745][ T6215] loop4: rw=524288, want=263332, limit=164 [ 117.755735][ T6215] attempt to access beyond end of device [ 117.755735][ T6215] loop4: rw=0, want=263332, limit=164 [ 118.129225][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'. [ 118.156592][ T6238] device bond_slave_0 entered promiscuous mode [ 118.157772][ T6238] device bond_slave_1 entered promiscuous mode [ 118.163716][ T6238] device macvlan2 entered promiscuous mode [ 118.165738][ T6238] device bond0 entered promiscuous mode [ 118.172676][ T6238] device wlan1 entered promiscuous mode [ 118.176806][ T6238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.263623][ T6246] netlink: 52 bytes leftover after parsing attributes in process `syz.2.486'. [ 120.636335][ C1] sched: RT throttling activated [ 120.834883][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 120.940790][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.497'. [ 121.167808][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.502748][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.507089][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.799055][ T6312] netlink: 52 bytes leftover after parsing attributes in process `syz.4.504'. [ 124.040889][ T6334] ptrace attach of "./syz-executor exec"[4043] was attempted by " [ 125.370054][ T6351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 125.476594][ T6351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 127.619604][ T6383] ptrace attach of "./syz-executor exec"[5486] was attempted by " [ 128.913006][ T6414] binder: BINDER_SET_CONTEXT_MGR already set [ 129.207792][ T6423] Cannot find set identified by id 0 to match [ 129.334041][ T6414] binder: 6409:6414 ioctl 4018620d 200002c0 returned -16 [ 129.339185][ T6414] binder: 6409:6414 got transaction to invalid handle, 1 [ 129.340478][ T6414] binder: 6409:6414 transaction failed 29201/-22, size 0-0 line 2917 [ 129.342566][ T6414] binder: 6409:6414 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 129.351634][ T6414] binder: 6414 RLIMIT_NICE not set [ 129.352644][ T6414] binder: 6409:6414 ioctl c0306201 20000240 returned -11 [ 129.354258][ T6414] binder: 6409:6414 got reply transaction with no transaction stack [ 129.355618][ T6414] binder: 6409:6414 transaction failed 29201/-71, size 0-0 line 2822 [ 129.357888][ T6414] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.363133][ T1540] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.385278][ T6426] netlink: 96 bytes leftover after parsing attributes in process `syz.4.537'. [ 129.390169][ T6426] netlink: 80 bytes leftover after parsing attributes in process `syz.4.537'. [ 129.393130][ T6426] macvtap0: refused to change device tx_queue_len [ 129.397943][ T6426] loop4: detected capacity change from 0 to 256 [ 129.433949][ T6426] attempt to access beyond end of device [ 129.433949][ T6426] loop4: rw=2049, want=260, limit=256 [ 131.446743][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.448519][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.467975][ T6454] netlink: 'syz.5.543': attribute type 9 has an invalid length. [ 132.739311][ T6476] macvtap0: refused to change device tx_queue_len [ 132.799891][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 132.855903][ T6483] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 132.938207][ T6487] tipc: Started in network mode [ 132.940283][ T6487] tipc: Node identity 7f000001, cluster identity 4711 [ 132.942799][ T6487] tipc: Enabled bearer , priority 10 [ 132.960281][ T6487] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 132.962410][ T6487] tipc: Enabled bearer , priority 10 [ 133.054260][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 134.435434][ T3341] tipc: Node number set to 2130706433 [ 135.421811][ T6521] loop2: detected capacity change from 0 to 512 [ 135.903962][ T6521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.933032][ T6524] loop4: detected capacity change from 0 to 128 [ 135.950545][ T6526] tipc: Enabled bearer , priority 10 [ 135.961181][ T6521] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.564: bad orphan inode 131083 [ 135.964682][ T6521] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 135.998343][ T6526] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.000359][ T6526] tipc: Enabled bearer , priority 10 [ 136.491054][ T6536] loop2: detected capacity change from 0 to 65 [ 136.524736][ T6536] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 136.527872][ T6538] binder: 6537:6538 tried to acquire reference to desc 0, got 1 instead [ 136.536950][ T4088] binder: undelivered TRANSACTION_COMPLETE [ 136.565756][ T3341] binder: undelivered transaction 48, process died. [ 138.643371][ T6573] loop4: detected capacity change from 0 to 8 [ 139.317697][ T6573] SQUASHFS error: zlib decompression failed, data probably corrupt [ 139.319041][ T6573] SQUASHFS error: Failed to read block 0x9b: -5 [ 139.320155][ T6573] SQUASHFS error: Unable to read metadata cache entry [99] [ 139.321268][ T6573] SQUASHFS error: Unable to read inode 0x127 [ 139.829023][ T6573] xt_TCPMSS: Only works on TCP SYN packets [ 140.040709][ T6599] device ipip0 entered promiscuous mode [ 141.413663][ T6623] loop4: detected capacity change from 0 to 128 [ 141.424628][ T6619] tipc: Enabled bearer , priority 10 [ 142.866284][ T6651] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 142.891452][ T6655] loop2: detected capacity change from 0 to 128 [ 142.894547][ T6651] device syzkaller0 entered promiscuous mode [ 143.475645][ T6677] loop5: detected capacity change from 0 to 128 [ 143.698954][ T6677] qnx6: invalid mount options. [ 143.743045][ T6655] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,bsddf,errors=remount-ro,. Quota mode: none. [ 144.333385][ T6692] netlink: 277 bytes leftover after parsing attributes in process `syz.2.618'. [ 145.220832][ T6710] sctp: [Deprecated]: syz.5.625 (pid 6710) Use of int in max_burst socket option. [ 145.220832][ T6710] Use struct sctp_assoc_value instead [ 145.920477][ T6717] netlink: 56 bytes leftover after parsing attributes in process `syz.2.629'. [ 145.964774][ T6717] netlink: 56 bytes leftover after parsing attributes in process `syz.2.629'. [ 146.048276][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 146.056321][ T6728] netlink: 'syz.2.633': attribute type 21 has an invalid length. [ 146.057827][ T6728] netlink: 156 bytes leftover after parsing attributes in process `syz.2.633'. [ 146.080384][ T6728] netlink: 'syz.2.633': attribute type 21 has an invalid length. [ 146.081702][ T6728] netlink: 6 bytes leftover after parsing attributes in process `syz.2.633'. [ 146.095039][ T6732] netlink: 56 bytes leftover after parsing attributes in process `syz.5.645'. [ 146.113484][ T6732] netlink: 56 bytes leftover after parsing attributes in process `syz.5.645'. [ 148.045750][ T6768] loop5: detected capacity change from 0 to 1024 [ 148.104059][ T6768] EXT4-fs (loop5): inline encryption not supported [ 148.105262][ T6768] EXT4-fs (loop5): Ignoring removed bh option [ 148.106218][ T6768] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.587999][ T6768] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 148.645034][ T6768] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.647: Allocating blocks 497-513 which overlap fs metadata [ 148.648921][ T6768] EXT4-fs (loop5): Remounting filesystem read-only [ 148.650330][ T6768] EXT4-fs (loop5): pa 000000002c1a44b4: logic 128, phys. 385, len 8 [ 148.651797][ T6768] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 148.655212][ T6768] EXT4-fs (loop5): Remounting filesystem read-only [ 148.713988][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 149.461315][ T6799] ptrace attach of "./syz-executor exec"[4044] was attempted by "\x09   0  "[6799] [ 150.038203][ T6814] netlink: 'syz.2.664': attribute type 8 has an invalid length. [ 150.054956][ T6814] bridge0: port 3(syz_tun) entered blocking state [ 150.056098][ T6814] bridge0: port 3(syz_tun) entered disabled state [ 150.058234][ T6814] device syz_tun entered promiscuous mode [ 150.059745][ T6814] bridge0: port 3(syz_tun) entered blocking state [ 150.060895][ T6814] bridge0: port 3(syz_tun) entered forwarding state [ 150.128509][ T6824] loop2: detected capacity change from 0 to 2048 [ 150.142030][ T6824] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.143614][ T6824] NILFS (loop2): mounting unchecked fs [ 150.144517][ T6824] NILFS (loop2): recovery required for readonly filesystem [ 150.145829][ T6824] NILFS (loop2): write access will be enabled during recovery [ 150.149314][ T6824] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 150.500673][ T4495] udevd[4495]: incorrect nilfs2 checksum on /dev/loop2 [ 150.526489][ T6824] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 150.576019][ T6834] loop4: detected capacity change from 0 to 256 [ 150.619576][ T6839] loop5: detected capacity change from 0 to 1024 [ 150.695868][ T6842] loop2: detected capacity change from 0 to 256 [ 150.901990][ T6853] loop5: detected capacity change from 0 to 1024 [ 151.479287][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 151.531597][ T6872] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 151.546098][ T6872] device wlan1 entered promiscuous mode [ 151.552292][ T6872] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.222055][ T6894] loop2: detected capacity change from 0 to 256 [ 152.789803][ T6904] binder: 6902:6904 tried to acquire reference to desc 0, got 1 instead [ 152.797176][ T6904] binder: 6902:6904 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.799499][ T6904] binder: 6904 RLIMIT_NICE not set [ 152.803593][ T6904] binder: 6904 RLIMIT_NICE not set [ 152.807194][ T6904] binder: 6904 RLIMIT_NICE not set [ 152.808214][ T6904] binder: 6902:6904 got transaction with invalid data ptr [ 152.811505][ T6904] binder: 6902:6904 transaction failed 29201/-14, size 240-0 line 3406 [ 152.814043][ T6904] binder: send failed reply for transaction 53 to 6902:6904 [ 152.830302][ T4429] binder: undelivered TRANSACTION_ERROR: 29190 [ 152.831472][ T4429] binder: undelivered TRANSACTION_COMPLETE [ 152.834581][ T4429] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.848389][ T6910] loop5: detected capacity change from 0 to 764 [ 152.878462][ T6913] loop2: detected capacity change from 0 to 1024 [ 154.008143][ T6934] tipc: Enabled bearer , priority 18 [ 154.512984][ T6939] udc-core: couldn't find an available UDC or it's busy [ 154.515765][ T6939] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.658747][ T6950] loop5: detected capacity change from 0 to 512 [ 154.666679][ T6950] EXT4-fs (loop5): Unrecognized mount option "fsuuid=01l292" or missing value [ 154.671194][ T6951] tipc: Resetting bearer [ 154.672378][ T6951] tipc: Resetting bearer [ 154.989114][ T6951] tipc: Resetting bearer [ 154.990266][ T6951] tipc: Resetting bearer [ 154.991592][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.993632][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.007497][ T6955] netlink: 'syz.6.715': attribute type 16 has an invalid length. [ 155.008800][ T6955] netlink: 'syz.6.715': attribute type 17 has an invalid length. [ 155.017365][ T6955] tipc: Resetting bearer [ 155.018682][ T6955] tipc: Resetting bearer [ 155.019971][ T6955] tipc: Resetting bearer [ 155.043666][ T6950] loop5: detected capacity change from 0 to 512 [ 155.056615][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.060607][ T5298] tipc: Resetting bearer [ 155.171035][ T6950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.790192][ T6972] udc-core: couldn't find an available UDC or it's busy [ 155.791541][ T6972] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.498900][ T6978] overlayfs: failed to clone upperpath [ 156.651460][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 157.556563][ T6988] loop2: detected capacity change from 0 to 4096 [ 157.714853][ T7002] tc_dump_action: action bad kind [ 158.169059][ T6988] ntfs3: loop2: ino=5, "/" directory corrupted [ 158.170293][ T6988] ntfs3: loop2: ino=5, "/" directory corrupted [ 158.798619][ T3341] Bluetooth: hci1: command 0x0406 tx timeout [ 158.799764][ T3341] Bluetooth: hci2: command 0x0406 tx timeout [ 159.224298][ T7021] ntfs3: loop2: ino=5, "/" directory corrupted [ 159.247629][ T7021] ntfs3: loop2: ino=5, "/" directory corrupted [ 159.326642][ T7049] loop5: detected capacity change from 0 to 512 [ 159.401134][ T7049] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.500045][ T5300] tipc: Resetting bearer [ 159.658286][ T7096] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 159.668197][ T7096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.770894][ T7132] loop2: detected capacity change from 0 to 512 [ 160.878170][ T7132] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.436154][ T7157] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 161.437941][ T7157] bridge0: port 3(syz_tun) entered disabled state [ 161.439134][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.440461][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.445417][ T7157] bridge0: port 3(syz_tun) entered blocking state [ 161.446490][ T7157] bridge0: port 3(syz_tun) entered forwarding state [ 161.447659][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.449087][ T7157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.450291][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.451471][ T7157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.453645][ T7157] device bridge0 entered promiscuous mode [ 161.455208][ T7157] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.303933][ T7180] bridge_slave_0: default FDB implementation only supports local addresses [ 162.421600][ T7192] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 162.424484][ T7192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.826275][ T7199] loop5: detected capacity change from 0 to 512 [ 162.831725][ T7199] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.836233][ T7199] EXT4-fs (loop5): 1 truncate cleaned up [ 162.837580][ T7199] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.476124][ T7234] netlink: 'syz.5.794': attribute type 10 has an invalid length. [ 164.492445][ T7234] device bridge0 entered promiscuous mode [ 164.493792][ T7234] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 167.690111][ T7300] fuse: Bad value for 'fd' [ 169.880320][ T7312] loop5: detected capacity change from 0 to 32768 [ 170.449456][ T7339] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 170.509171][ T7312] XFS (loop5): Mounting V5 Filesystem [ 171.024062][ T7312] XFS (loop5): Ending clean mount [ 171.042577][ T7356] fuse: Bad value for 'fd' [ 171.052970][ T4403] XFS (loop5): Unmounting Filesystem [ 172.360422][ T7376] device vlan3 entered promiscuous mode [ 172.361358][ T7376] device bond0 entered promiscuous mode [ 172.362190][ T7376] device bond_slave_0 entered promiscuous mode [ 172.363148][ T7376] device bond_slave_1 entered promiscuous mode [ 172.669420][ T7393] 9pnet: Could not find request transport: 0xffffffffffffffff [ 172.724593][ T7395] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 173.741439][ T7408] futex_wake_op: syz.6.844 tries to shift op by 36; fix this program [ 173.752931][ T7409] netlink: 'syz.2.841': attribute type 33 has an invalid length. [ 173.763668][ T7409] netlink: 152 bytes leftover after parsing attributes in process `syz.2.841'. [ 173.805648][ T7414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 174.276431][ T4421] Bluetooth: hci3: command 0x0406 tx timeout [ 174.775474][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.779071][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 175.278726][ T7452] netlink: 40 bytes leftover after parsing attributes in process `syz.6.868'. [ 175.299497][ T7456] netlink: 'syz.6.858': attribute type 33 has an invalid length. [ 175.300801][ T7456] netlink: 152 bytes leftover after parsing attributes in process `syz.6.858'. [ 175.302539][ T7456] tipc: Resetting bearer [ 176.649007][ T7471] loop2: detected capacity change from 0 to 128 [ 177.433147][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.866'. [ 177.583118][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 177.943206][ T7509] netlink: 40 bytes leftover after parsing attributes in process `syz.5.885'. [ 178.312034][ T7517] udc-core: couldn't find an available UDC or it's busy [ 178.313418][ T7517] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.319114][ T7517] udc-core: couldn't find an available UDC or it's busy [ 178.320440][ T7517] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.146901][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.884'. [ 183.071113][ T7573] netlink: 'syz.6.888': attribute type 10 has an invalid length. [ 183.103449][ T7573] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.515168][ T7605] fuse: Bad value for 'fd' [ 186.802277][ T7633] loop2: detected capacity change from 0 to 512 [ 186.833250][ T7633] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 186.833250][ T7633] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 186.833250][ T7633] [ 186.850774][ T7633] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 186.850774][ T7633] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 186.850774][ T7633] [ 186.864118][ T7633] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.894240][ T7633] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 186.904365][ T7636] tc_dump_action: action bad kind [ 187.092175][ T7633] EXT4-fs (loop2): 1 truncate cleaned up [ 187.106194][ T7633] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 187.112596][ T5298] __quota_error: 1 callbacks suppressed [ 187.112618][ T5298] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 187.336482][ T5298] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:16: Failed to release dquot type 1 [ 187.989989][ T7650] netlink: 'syz.5.914': attribute type 8 has an invalid length. [ 188.009252][ T7650] bridge0: port 3(syz_tun) entered blocking state [ 188.010991][ T7633] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 188.013565][ T7650] bridge0: port 3(syz_tun) entered disabled state [ 188.015238][ T7650] device syz_tun entered promiscuous mode [ 188.018785][ T7650] bridge0: port 3(syz_tun) entered blocking state [ 188.020066][ T7650] bridge0: port 3(syz_tun) entered forwarding state [ 188.022485][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 189.764553][ T4047] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 190.173422][ T4047] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 190.206037][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.212649][ T7676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.319087][ T7679] tipc: Resetting bearer [ 190.375075][ T7679] netlink: 'syz.1.926': attribute type 16 has an invalid length. [ 190.378500][ T7679] netlink: 'syz.1.926': attribute type 17 has an invalid length. [ 190.456840][ T7679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.515170][ T7682] loop5: detected capacity change from 0 to 256 [ 190.568310][ T4047] bridge0: port 3(syz_tun) entered disabled state [ 190.572239][ T4047] device syz_tun left promiscuous mode [ 190.573183][ T4047] bridge0: port 3(syz_tun) entered disabled state [ 191.017909][ T7685] tc_dump_action: action bad kind [ 191.894307][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 191.934698][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.936183][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.948378][ T7698] device bridge_slave_0 entered promiscuous mode [ 191.952681][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.954993][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.963866][ T7698] device bridge_slave_1 entered promiscuous mode [ 191.983937][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.987479][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.003560][ T7698] team0: Port device team_slave_0 added [ 192.010174][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.016844][ T7728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.022208][ T7698] team0: Port device team_slave_1 added [ 192.034420][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.035671][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.044446][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.046943][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.048129][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.052362][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.138241][ T7698] device hsr_slave_0 entered promiscuous mode [ 192.186596][ T7698] device hsr_slave_1 entered promiscuous mode [ 192.276425][ T7698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.531225][ T7698] Cannot create hsr debugfs directory [ 192.536215][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.538556][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.601485][ T7698] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.638130][ T7698] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.677427][ T7698] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 192.717314][ T7698] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.813523][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.818809][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.820323][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.822548][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.825504][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.827623][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.829034][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.830130][ T5300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.832012][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.838468][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.839997][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.841471][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.842547][ T5298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.845433][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.850109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.862124][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.864667][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.866307][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.869435][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.871174][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.872678][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.875778][ T7698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.878433][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.881827][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.883464][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.885042][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.978252][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.980670][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.982004][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.100002][ T7698] device veth0_vlan entered promiscuous mode [ 193.114836][ T7698] device veth1_vlan entered promiscuous mode [ 193.451114][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.453000][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.456233][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.461074][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.462694][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.544699][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.546743][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.553691][ T7698] device veth0_macvtap entered promiscuous mode [ 193.557028][ T4421] Bluetooth: hci1: command 0x0409 tx timeout [ 193.559655][ T7698] device veth1_macvtap entered promiscuous mode [ 193.569235][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.570953][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.572647][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.574466][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.576044][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.578497][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.580204][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.581910][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.584159][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.585578][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.711492][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.754057][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.766276][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.785004][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.065456][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.089170][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.091068][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.092659][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.094393][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.101725][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.104575][ T7698] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.106009][ T7698] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.110502][ T7698] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.111958][ T7698] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.145914][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.148173][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.170672][ T5293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.172058][ T5293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.173810][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.182198][ T5300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.184075][ T5300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.186567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.445621][ T7781] loop5: detected capacity change from 0 to 512 [ 195.462108][ T7796] tipc: Enabling of bearer rejected, failed to enable media [ 195.565702][ T7796] tipc: Enabling of bearer rejected, failed to enable media [ 195.569713][ T7781] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 195.569713][ T7781] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 195.569713][ T7781] [ 195.572720][ T7781] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 195.572720][ T7781] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 195.572720][ T7781] [ 195.575726][ T7781] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.587612][ T7781] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 195.591370][ T7781] EXT4-fs (loop5): 1 truncate cleaned up [ 195.592400][ T7781] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 195.843124][ T4423] Bluetooth: hci1: command 0x041b tx timeout [ 195.857126][ T7808] overlayfs: failed to resolve './bus': -2 [ 198.862068][ T4422] Bluetooth: hci1: command 0x040f tx timeout [ 198.990930][ T7850] loop5: detected capacity change from 0 to 128 [ 199.952340][ T7869] device syzkaller0 entered promiscuous mode [ 199.961384][ T7869] tipc: Started in network mode [ 199.962348][ T7869] tipc: Node identity 062d5686f449, cluster identity 4711 [ 199.963961][ T7869] tipc: Enabled bearer , priority 0 [ 199.971715][ T7868] tipc: Resetting bearer [ 199.980483][ T7868] tipc: Disabling bearer [ 201.315781][ T4421] Bluetooth: hci1: command 0x0419 tx timeout [ 204.826468][ T4127] Bluetooth: hci4: command 0x0406 tx timeout [ 208.178719][ T7950] ptrace attach of "./syz-executor exec"[5486] was attempted by ""[7950] [ 210.862079][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.877552][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.953700][ T7906] tipc: Resetting bearer [ 211.205092][ T7906] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.206705][ T7906] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.208097][ T7906] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.209478][ T7906] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.617405][ T7996] loop7: detected capacity change from 0 to 512 [ 211.627432][ T7996] EXT4-fs (loop7): Ignoring removed orlov option [ 212.327310][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 212.336317][ T7996] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,nolazytime,orlov,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback. [ 212.391914][ T7996] EXT4-fs error (device loop7): ext4_do_update_inode:5204: inode #2: comm syz.7.1002: corrupted inode contents [ 212.402797][ T7996] EXT4-fs (loop7): Remounting filesystem read-only [ 212.407547][ T7996] EXT4-fs error (device loop7): ext4_dirty_inode:6040: inode #2: comm syz.7.1002: mark_inode_dirty error [ 212.412981][ T7996] EXT4-fs (loop7): Remounting filesystem read-only [ 212.415864][ T7996] EXT4-fs error (device loop7): ext4_do_update_inode:5204: inode #2: comm syz.7.1002: corrupted inode contents [ 212.432960][ T7996] EXT4-fs (loop7): Remounting filesystem read-only [ 212.516548][ T9] EXT4-fs error (device loop7): __ext4_get_inode_loc:4321: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 212.520204][ T9] EXT4-fs (loop7): Remounting filesystem read-only [ 212.855131][ T7698] EXT4-fs error (device loop7): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 212.868467][ T7698] EXT4-fs (loop7): Remounting filesystem read-only [ 212.869990][ T7698] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 212.872138][ T7698] EXT4-fs (loop7): Remounting filesystem read-only [ 212.873342][ T7698] EXT4-fs error (device loop7): ext4_quota_off:6513: inode #3: comm syz-executor: mark_inode_dirty error [ 212.875488][ T7698] EXT4-fs (loop7): Remounting filesystem read-only [ 212.941567][ T8022] loop7: detected capacity change from 0 to 1024 [ 212.944953][ T8022] EXT4-fs (loop7): Ignoring removed orlov option [ 212.946109][ T8022] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 212.963157][ T8022] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 213.071128][ T8030] loop7: detected capacity change from 0 to 128 [ 213.932127][ T8030] 9pnet: Could not find request transport: f [ 214.649497][ T8030] attempt to access beyond end of device [ 214.649497][ T8030] loop7: rw=2049, want=1041, limit=128 [ 214.653284][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 215.888327][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1030'. [ 215.904984][ T8084] loop5: detected capacity change from 0 to 1024 [ 215.932138][ T8084] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.942172][ T8084] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1030: bg 0: block 260: invalid block bitmap [ 215.952038][ T8084] smc: net device bond0 applied user defined pnetid SYZ0 [ 215.953912][ T8084] smc: net device bond0 erased user defined pnetid SYZ0 [ 215.962420][ T8093] batman_adv: batadv0: Adding interface: dummy0 [ 215.963428][ T8093] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.333010][ T8093] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 218.509482][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 220.929465][ T8150] batman_adv: batadv0: Adding interface: dummy0 [ 220.930481][ T8150] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.955927][ T8150] batman_adv: batadv0: Interface activated: dummy0 [ 221.066623][ T8150] batadv0: mtu less than device minimum [ 221.070324][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.074480][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.078514][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.082528][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.086383][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.090294][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.094119][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.098020][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.101877][ T8150] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.711520][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 222.719269][ T8174] loop5: detected capacity change from 0 to 1024 [ 222.739339][ T8174] EXT4-fs (loop5): inline encryption not supported [ 222.740439][ T8174] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.829641][ T8174] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 223.853563][ T8174] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.1059: Allocating blocks 385-513 which overlap fs metadata [ 223.862181][ T8174] EXT4-fs (loop5): pa 00000000eb3523e9: logic 16, phys. 129, len 24 [ 223.863539][ T8174] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 225.108638][ T8227] batman_adv: batadv0: Adding interface: dummy0 [ 225.110033][ T8227] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.114031][ T8227] batman_adv: batadv0: Interface activated: dummy0 [ 225.716013][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 226.165999][ T8255] loop7: detected capacity change from 0 to 64 [ 226.179274][ T8255] BFS-fs: bfs_fill_super(): Last block not available on loop7: 229438 [ 226.187210][ T8255] autofs4:pid:8255:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 226.189449][ T8255] autofs4:pid:8255:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 227.532393][ T8255] loop7: detected capacity change from 0 to 32768 [ 228.344786][ T8255] XFS (loop7): Mounting V5 Filesystem [ 228.402393][ T8255] XFS (loop7): Starting recovery (logdev: internal) [ 228.419403][ T8255] XFS (loop7): Ending recovery (logdev: internal) [ 228.455537][ T7698] XFS (loop7): Unmounting Filesystem [ 231.189519][ T8344] loop5: detected capacity change from 0 to 512 [ 231.721980][ T8344] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.748670][ T8344] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #4: comm syz.5.1103: corrupted inode contents [ 231.756584][ T8344] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #4: comm syz.5.1103: mark_inode_dirty error [ 232.117175][ T8344] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #4: comm syz.5.1103: corrupted inode contents [ 232.120522][ T8344] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #4: comm syz.5.1103: mark_inode_dirty error [ 232.129338][ T8344] Quota error (device loop5): write_blk: dquota write failed [ 232.130711][ T8344] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 232.133444][ T8344] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 232.142720][ T8344] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.1103: Failed to acquire dquot type 1 [ 232.543643][ T8376] netlink: 'syz.1.1112': attribute type 10 has an invalid length. [ 232.546095][ T8376] device wlan1 entered promiscuous mode [ 232.548558][ T8376] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 232.596549][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 234.148769][ T8397] net_ratelimit: 30 callbacks suppressed [ 234.148780][ T8397] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 235.079536][ T8423] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 235.488858][ T8428] overlayfs: failed to clone upperpath [ 236.133277][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1137'. [ 236.863275][ T8450] netlink: 'syz.6.1137': attribute type 1 has an invalid length. [ 236.865734][ T8450] netlink: 'syz.6.1137': attribute type 2 has an invalid length. [ 236.875297][ T8460] loop7: detected capacity change from 0 to 164 [ 238.040995][ T8460] Invalid ELF header magic: != ELF [ 238.105091][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 238.125782][ T8473] device syz_tun entered promiscuous mode [ 238.177674][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 239.023624][ T8491] loop7: detected capacity change from 0 to 128 [ 239.042023][ T8491] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.609521][ T8561] tipc: Enabled bearer , priority 10 [ 243.602542][ T8573] loop4: detected capacity change from 0 to 7 [ 243.615506][ T8573] Dev loop4: unable to read RDB block 7 [ 243.621070][ T8573] loop4: AHDI p1 p2 [ 243.621694][ T8573] loop4: partition table partially beyond EOD, truncated [ 243.622977][ T8573] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 243.658899][ T8568] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1175'. [ 243.678926][ T1540] tipc: Node number set to 1974538388 [ 245.090012][ T8599] netlink: 'syz.6.1181': attribute type 4 has an invalid length. [ 245.201213][ T8602] binder: 8600:8602 tried to acquire reference to desc 0, got 1 instead [ 245.302665][ T8606] netlink: 'syz.5.1183': attribute type 2 has an invalid length. [ 246.015267][ T8608] binder: 8600:8608 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.021513][ T8609] binder: 8600:8609 got reply transaction with no transaction stack [ 246.022898][ T8609] binder: 8600:8609 transaction failed 29201/-71, size 0-0 line 2822 [ 246.024122][ T8608] binder: 8608 RLIMIT_NICE not set [ 246.024909][ T8608] binder: 8608 RLIMIT_NICE not set [ 246.039513][ T4127] binder: release 8600:8602 transaction 59 out, still active [ 246.040765][ T4127] binder: release 8600:8608 transaction 59 in, still active [ 246.041960][ T4127] binder: send failed reply for transaction 59, target dead [ 246.043217][ T4127] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.687205][ T8644] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1192'. [ 250.409689][ T8671] netlink: 'syz.1.1203': attribute type 4 has an invalid length. [ 251.430901][ T8695] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 252.745764][ T8725] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 253.369647][ T8739] loop7: detected capacity change from 0 to 256 [ 253.548856][ T8739] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 253.948856][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.953085][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.154689][ T8767] loop7: detected capacity change from 0 to 512 [ 254.523621][ T8772] tipc: Enabled bearer , priority 0 [ 254.635746][ T8767] EXT4-fs warning (device loop7): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 254.642210][ T8767] EXT4-fs (loop7): mount failed [ 258.622109][ T8841] tipc: Enabling of bearer rejected, already enabled [ 258.650541][ T8845] tipc: Enabling of bearer rejected, already enabled [ 258.741927][ T8847] loop7: detected capacity change from 0 to 2048 [ 258.816355][ T8847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.992665][ T8898] tipc: Enabling of bearer rejected, failed to enable media [ 262.134382][ T8909] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 262.138266][ T8909] device syzkaller0 entered promiscuous mode [ 262.247461][ T8910] overlayfs: failed to clone lowerpath [ 262.531920][ T8916] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 262.557369][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 262.999844][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 263.083923][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1280'. [ 263.095679][ T8936] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 263.098122][ T8936] device syzkaller0 entered promiscuous mode [ 263.117406][ T8941] tipc: Enabling of bearer rejected, failed to enable media [ 263.976659][ T8960] tipc: Enabling of bearer rejected, already enabled [ 263.979164][ T8960] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 264.457721][ T8967] tipc: Enabling of bearer rejected, already enabled [ 264.467420][ T8964] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 264.491240][ T8957] syz.5.1287 (8957): drop_caches: 2 [ 265.338942][ T8978] sctp: [Deprecated]: syz.1.1293 (pid 8978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.338942][ T8978] Use struct sctp_sack_info instead [ 265.628930][ T8985] tipc: Enabling of bearer rejected, already enabled [ 266.010577][ T8991] tipc: Enabling of bearer rejected, already enabled [ 266.020439][ T8996] tipc: Enabling of bearer rejected, failed to enable media [ 266.037225][ T8992] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 266.038759][ T8992] Mem abort info: [ 266.039332][ T8992] ESR = 0x0000000086000006 [ 266.040074][ T8992] EC = 0x21: IABT (current EL), IL = 32 bits [ 266.040988][ T8992] SET = 0, FnV = 0 [ 266.041601][ T8992] EA = 0, S1PTW = 0 [ 266.042186][ T8992] FSC = 0x06: level 2 translation fault [ 266.043035][ T8992] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010e406000 [ 266.044144][ T8992] [0000000000000000] pgd=08000001378dc003, p4d=08000001378dc003, pud=080000011291f003, pmd=0000000000000000 [ 266.046024][ T8992] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 266.047122][ T8992] Modules linked in: [ 266.047741][ T8992] CPU: 0 PID: 8992 Comm: syz.5.1300 Not tainted 5.15.189-syzkaller #0 [ 266.048955][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 266.050456][ T8992] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 266.051643][ T8992] pc : 0x0 [ 266.052085][ T8992] lr : bond_xdp_xmit+0x254/0x404 [ 266.052891][ T8992] sp : ffff800021fb73a0 [ 266.053557][ T8992] x29: ffff800021fb7460 x28: 0000000000000000 x27: ffff800021fb73c8 [ 266.054825][ T8992] x26: dfff800000000000 x25: ffff800012ddb978 x24: ffff0000d6058000 [ 266.056029][ T8992] x23: fffffbffeff07670 x22: ffff0000db214000 x21: fffffbffeff07670 [ 266.057271][ T8992] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000200 [ 266.058540][ T8992] x17: 0000000000000002 x16: ffff8000082bf708 x15: 0000000000000001 [ 266.059817][ T8992] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000080000 [ 266.061018][ T8992] x11: 00000000000007b5 x10: ffff80002c1eb000 x9 : ffff800021fb7400 [ 266.062381][ T8992] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 266.063615][ T8992] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 266.064900][ T8992] x2 : ffff800021fb7420 x1 : 0000000000000001 x0 : ffff0000d6058000 [ 266.066135][ T8992] Call trace: [ 266.066657][ T8992] 0x0 [ 266.067099][ T8992] bq_xmit_all+0xc44/0x1020 [ 266.067865][ T8992] __dev_flush+0xc4/0x18c [ 266.068582][ T8992] xdp_do_flush+0x14/0x28 [ 266.069345][ T8992] tun_get_user+0x2434/0x31c4 [ 266.070151][ T8992] tun_chr_write_iter+0xfc/0x20c [ 266.070970][ T8992] vfs_write+0x7c8/0xa2c [ 266.071674][ T8992] ksys_write+0x120/0x210 [ 266.072372][ T8992] __arm64_sys_write+0x7c/0x90 [ 266.073161][ T8992] invoke_syscall+0x98/0x2b8 [ 266.073932][ T8992] el0_svc_common+0x138/0x258 [ 266.074699][ T8992] do_el0_svc+0x58/0x14c [ 266.075353][ T8992] el0_svc+0x78/0x1e0 [ 266.075977][ T8992] el0t_64_sync_handler+0xcc/0xe4 [ 266.076763][ T8992] el0t_64_sync+0x1a0/0x1a4 [ 266.852022][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 268.603651][ T9020] tipc: Enabling of bearer rejected, failed to enable media