last executing test programs: 1m35.033104662s ago: executing program 0 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) 1m33.222501731s ago: executing program 0 (id=261): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) 1m32.313454106s ago: executing program 0 (id=269): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1c5) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0x80}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0xfff5) 1m31.073438758s ago: executing program 0 (id=276): timer_create(0x2, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) 1m30.18451902s ago: executing program 0 (id=280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0x317e, 0x4) 1m29.506318886s ago: executing program 0 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1m29.467942632s ago: executing program 32 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.711425135s ago: executing program 4 (id=588): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x485, 0x4008841, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.633655069s ago: executing program 3 (id=589): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000630a1cff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 5.784127164s ago: executing program 3 (id=595): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 5.712461836s ago: executing program 4 (id=597): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x1}, 0x4800) 5.299685226s ago: executing program 1 (id=598): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='add syz0 ::1\n', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 4.952346255s ago: executing program 1 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) close(r3) 4.673989073s ago: executing program 5 (id=601): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x8000) 4.592815047s ago: executing program 3 (id=602): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@mblk_io_submit}]}, 0x1, 0x509, &(0x7f0000001100)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 4.592554897s ago: executing program 4 (id=603): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000240)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRESDEC], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.583028229s ago: executing program 2 (id=604): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000040)={@multicast2=0xe0000001, @empty, @empty}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@'], 0x48) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3b8, '\x00'/952}, &(0x7f0000000400)=0x3e0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) rt_sigtimedwait(&(0x7f0000000040)={[0x20001356]}, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x8) 4.447668452s ago: executing program 2 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 4.154571862s ago: executing program 5 (id=606): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000630a1cff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 3.69441322s ago: executing program 1 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setpriority(0x0, r0, 0xfff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 3.689944621s ago: executing program 4 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r3, 0x2007ffb) lseek(r3, 0x3, 0x3) 3.567670142s ago: executing program 2 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.068574337s ago: executing program 5 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2.067991207s ago: executing program 3 (id=611): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000000000290000000b"], 0xb8}, 0x3400c8d4) 2.023732675s ago: executing program 1 (id=612): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.533631029s ago: executing program 4 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$setperm(0x5, 0x0, 0x30925) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x4, 0x8}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0x80ea45, 0x800000e, 0x1, 0x63, 0xffffffff, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x5ff, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x7, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x2, 0xae3, 0x6, 0x7, 0xfffffffd, 0x9, 0xffff3f16, 0xa, 0x0, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x3, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x5, 0x0, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x104, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 1.459194932s ago: executing program 2 (id=614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.367656257s ago: executing program 2 (id=615): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x1, 0x7, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.135615827s ago: executing program 5 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.072609888s ago: executing program 1 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 641.254491ms ago: executing program 3 (id=618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 503.732855ms ago: executing program 4 (id=619): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 327.205025ms ago: executing program 2 (id=620): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x9, 0x8, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x9, 0xfff, 0x3, 0x80000000, [{0xfffffffc, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x8}}]}, 0xb0}}, 0x24040084) 261.104546ms ago: executing program 5 (id=621): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 167.640812ms ago: executing program 1 (id=622): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000630a1cff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 17.168718ms ago: executing program 3 (id=623): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) 0s ago: executing program 5 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x61, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): eth1_to_bridge: link becomes ready [ 32.941975][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.943498][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.944753][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.946178][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.947830][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.949494][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.959266][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.961262][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.962747][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.964032][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.965704][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.967512][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.976756][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.978782][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.980466][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.983744][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.985378][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.986970][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.988848][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.990157][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.994919][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.001130][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.002942][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.004681][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.006509][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.008232][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.009985][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.011855][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.013721][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.015455][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.017018][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.018683][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.023481][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.026755][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.028384][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.033506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.035098][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.036672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.038248][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.044817][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.046412][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.047947][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.050146][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.053769][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.057605][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.064034][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.069610][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.071552][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.073038][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.074663][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.077512][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.083788][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.085766][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.087433][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.088612][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.091282][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.102426][ T4338] device veth0_vlan entered promiscuous mode [ 33.104060][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.105702][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.107260][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.108485][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.110074][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.115071][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.123960][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.125571][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.127898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.134041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.142261][ T4338] device veth1_vlan entered promiscuous mode [ 33.153810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.155493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.157218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.159238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.163243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.167373][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.169030][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.183692][ T4338] device veth0_macvtap entered promiscuous mode [ 33.186504][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.188370][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.189947][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.200115][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.205062][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.206406][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.207723][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.209273][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.224771][ T4338] device veth1_macvtap entered promiscuous mode [ 33.228474][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.232199][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.234370][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.235905][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.237579][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.245883][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.247273][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.252736][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.257486][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.258809][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.260080][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.263385][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.281557][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.284885][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.287409][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.289127][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.291376][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.293026][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.307851][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.309359][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.311605][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.313219][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.319058][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.322196][ T4329] device veth0_vlan entered promiscuous mode [ 33.323732][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.325401][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.327156][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.328645][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.334748][ T4329] device veth1_vlan entered promiscuous mode [ 33.340169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.342376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.344037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.372250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.373803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.375383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.376916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.378568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.383143][ T4333] device veth0_vlan entered promiscuous mode [ 33.384852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.386693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.389066][ T4329] device veth0_macvtap entered promiscuous mode [ 33.400234][ T4329] device veth1_macvtap entered promiscuous mode [ 33.402669][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.404270][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.405901][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.407264][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.413466][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.415763][ T4333] device veth1_vlan entered promiscuous mode [ 33.433763][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.435597][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.437941][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.439831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.441651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.443187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.444854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.451118][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.452421][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.455385][ T4333] device veth0_macvtap entered promiscuous mode [ 33.457725][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.459641][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.462873][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.464209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.466031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.467618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.469154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.472182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.473766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.475440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.477006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.484020][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.485530][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.487251][ T4328] device veth0_vlan entered promiscuous mode [ 33.488539][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.490055][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.493487][ T4333] device veth1_macvtap entered promiscuous mode [ 33.503654][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.505065][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506494][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.507936][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.519408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.521425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.523081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.526720][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.527287][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.528021][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.529656][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.533567][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.535494][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.537665][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.539341][ T4328] device veth1_vlan entered promiscuous mode [ 33.545434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.546991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.548418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.549986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.553071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.558728][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.560428][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.562738][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.564490][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.566849][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.568984][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.570541][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.572560][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.574194][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.579215][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.580905][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.596649][ T4341] device veth0_vlan entered promiscuous mode [ 33.598293][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.603423][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.607811][ T4341] device veth1_vlan entered promiscuous mode [ 33.609892][ T4328] device veth0_macvtap entered promiscuous mode [ 33.614209][ T4328] device veth1_macvtap entered promiscuous mode [ 33.618963][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.620574][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626011][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.627534][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.654257][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.655730][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.657137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.658976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.663940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.665952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.667565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.669021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.671278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.692666][ T4341] device veth0_macvtap entered promiscuous mode [ 33.695114][ T4341] device veth1_macvtap entered promiscuous mode [ 33.700116][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.705678][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.707278][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.708967][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.710641][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.714287][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.717004][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.719561][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.735398][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.737452][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.739363][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.741485][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.743173][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.745700][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.754316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.756094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.757519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.759221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.761942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.763625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.766703][ T4341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.768115][ T4341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.769560][ T4341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.771789][ T4341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.096856][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.098270][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.108521][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.141907][ T1620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.143310][ T1620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.144675][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.148307][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.150153][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.152458][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.154186][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.155761][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.157477][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.159169][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.163063][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.165827][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.168111][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.169788][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.177615][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.179594][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.182866][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.193946][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.195883][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.197582][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.199652][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.203342][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.205505][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.207350][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.209297][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.215157][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.217521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.217536][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.219406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.220352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.223933][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.226531][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.228175][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.229752][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.231783][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.251684][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.253081][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.254551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.297480][ T4418] loop1: detected capacity change from 0 to 256 [ 34.300029][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.302586][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.304320][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.370848][ T1620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.372620][ T1620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.374248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.431749][ T4423] device syzkaller0 entered promiscuous mode [ 34.771170][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 34.772290][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 34.773314][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 34.774434][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 34.775533][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 35.400173][ T4445] loop2: detected capacity change from 0 to 1024 [ 35.432520][ T4445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.870073][ T4450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.297172][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 36.313113][ T4461] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 36.435417][ T4468] ======================================================= [ 36.435417][ T4468] WARNING: The mand mount option has been deprecated and [ 36.435417][ T4468] and is ignored by this kernel. Remove the mand [ 36.435417][ T4468] option from the mount to silence this warning. [ 36.435417][ T4468] ======================================================= [ 36.442809][ T7] kernel write not supported for file bpf-prog (pid: 7 comm: kworker/0:0) [ 36.820165][ T4485] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 36.828900][ T4345] Bluetooth: hci2: command 0x040f tx timeout [ 36.830064][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 36.831289][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 36.831383][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 37.107015][ T4488] loop0: detected capacity change from 0 to 2048 [ 37.145703][ T4488] EXT4-fs: test_dummy_encryption requires encrypt feature [ 38.075778][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.105359][ T4493] loop2: detected capacity change from 0 to 764 [ 38.377537][ T27] audit: type=1326 audit(38.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.0.30" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x0 [ 38.466490][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 38.577303][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.579648][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.891328][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 38.892637][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 38.892657][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 38.893773][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 38.979993][ T4332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.982045][ T4332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.983634][ T4332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.985412][ T4332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.987076][ T4332] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 38.988479][ T4332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.433221][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.620645][ C0] sched: RT throttling activated [ 40.648052][ T4528] chnl_net:caif_netlink_parms(): no params data found [ 41.054199][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.055473][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.057027][ T4528] device bridge_slave_0 entered promiscuous mode [ 41.059048][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.060283][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.061626][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 41.063772][ T4528] device bridge_slave_1 entered promiscuous mode [ 41.070910][ T4528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.074429][ T4528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.080979][ T4528] team0: Port device team_slave_0 added [ 41.082963][ T4528] team0: Port device team_slave_1 added [ 41.088504][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.093430][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.097735][ T4528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.134832][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.136140][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.155026][ T4528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.255841][ T4574] process 'syz.0.45' launched './file1' with NULL argv: empty string added [ 42.373628][ T4528] device hsr_slave_0 entered promiscuous mode [ 42.440337][ T4528] device hsr_slave_1 entered promiscuous mode [ 42.541659][ T4528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.543750][ T4528] Cannot create hsr debugfs directory [ 43.960451][ T4343] Bluetooth: hci4: command 0x041b tx timeout [ 44.362611][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.378884][ T4609] loop2: detected capacity change from 0 to 4096 [ 44.730459][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.741199][ T4343] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 44.742920][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.747468][ T4332] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 44.749164][ T4332] CPU: 0 PID: 4332 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 44.750524][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.752387][ T4332] Workqueue: hci0 hci_rx_work [ 44.753324][ T4332] Call trace: [ 44.753932][ T4332] dump_backtrace+0x1c4/0x1f0 [ 44.754793][ T4332] show_stack+0x2c/0x3c [ 44.755560][ T4332] __dump_stack+0x30/0x40 [ 44.756347][ T4332] dump_stack_lvl+0xf4/0x15c [ 44.757170][ T4332] dump_stack+0x1c/0x5c [ 44.757925][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 44.758850][ T4332] kobject_add_internal+0x5a8/0xb18 [ 44.759778][ T4332] kobject_add+0x144/0x20c [ 44.760566][ T4332] device_add+0x3dc/0xe4c [ 44.761362][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 44.762270][ T4332] hci_conn_complete_evt+0x7b8/0x10b4 [ 44.763247][ T4332] hci_event_packet+0x698/0xe60 [ 44.764177][ T4332] hci_rx_work+0x310/0xa70 [ 44.764994][ T4332] process_one_work+0x7e4/0x13bc [ 44.765878][ T4332] worker_thread+0x8cc/0xfe8 [ 44.766710][ T4332] kthread+0x254/0x2e0 [ 44.767477][ T4332] ret_from_fork+0x10/0x20 [ 44.769516][ T4332] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 44.771952][ T4332] Bluetooth: hci0: failed to register connection device [ 44.797740][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.802445][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.872259][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.239232][ T4634] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 45.363983][ T4649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.365604][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.394117][ T4652] loop0: detected capacity change from 0 to 512 [ 45.395666][ T4652] ext4: Unknown parameter 'fsname' [ 45.433281][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.522223][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 46.010958][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 46.036245][ T4528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.063361][ T4528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.202725][ T4528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.494887][ T4528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.870743][ T4343] Bluetooth: hci0: command 0x0409 tx timeout [ 47.236982][ T4528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.242936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.245016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.248691][ T4528] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.253312][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.255047][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.256701][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.258009][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.259748][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.264413][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.266707][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.268604][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.270076][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.272271][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.640861][ T4723] zram0: detected capacity change from 0 to 8 [ 47.794134][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.800914][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.802906][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.804483][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.808423][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.810466][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.814266][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.816400][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.819678][ T4731] device syzkaller0 entered promiscuous mode [ 47.825550][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.827118][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.829979][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.017466][ T11] device hsr_slave_0 left promiscuous mode [ 48.090758][ T4343] Bluetooth: hci4: command 0x0419 tx timeout [ 48.117178][ T11] device hsr_slave_1 left promiscuous mode [ 48.409490][ T4749] loop4: detected capacity change from 0 to 512 [ 48.443427][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.472716][ T4749] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 48.474927][ T4749] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 48.476810][ T4749] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 48.496756][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.504561][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.507045][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.508934][ T11] device bridge_slave_1 left promiscuous mode [ 48.512445][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.516672][ T4749] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.518148][ T4749] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 48.519617][ T4749] EXT4-fs (loop4): failed to initialize system zone (-117) [ 48.521576][ T4749] EXT4-fs (loop4): mount failed [ 48.542696][ T11] device bridge_slave_0 left promiscuous mode [ 48.544230][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.671310][ T11] device veth1_macvtap left promiscuous mode [ 48.672818][ T11] device veth0_macvtap left promiscuous mode [ 48.674018][ T11] device veth1_vlan left promiscuous mode [ 48.675193][ T11] device veth0_vlan left promiscuous mode [ 48.890760][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 49.164484][ T4759] loop4: detected capacity change from 0 to 736 [ 50.970732][ T4343] Bluetooth: hci0: command 0x040f tx timeout [ 51.543357][ T11] team0 (unregistering): Port device team_slave_1 removed [ 51.702364][ T11] team0 (unregistering): Port device team_slave_0 removed [ 51.863606][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.101461][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.572016][ T11] bond0 (unregistering): Released all slaves [ 53.880432][ T4735] device bond_slave_0 entered promiscuous mode [ 53.881777][ T4735] device bond_slave_1 entered promiscuous mode [ 53.883470][ T4735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.933092][ T4735] bond1: (slave macvlan2): making interface the new active one [ 53.971491][ T4735] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 54.039624][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.042885][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.045471][ T4528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.068024][ T4528] device veth0_vlan entered promiscuous mode [ 54.085364][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.091904][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.094548][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.096154][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.100095][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.102521][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.124794][ T4528] device veth1_vlan entered promiscuous mode [ 54.525144][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.527218][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.530577][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.532914][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.536618][ T4528] device veth0_macvtap entered promiscuous mode [ 54.540319][ T4528] device veth1_macvtap entered promiscuous mode [ 54.542690][ T4785] device lo entered promiscuous mode [ 54.568091][ T4785] device tunl0 entered promiscuous mode [ 54.577188][ T4785] device gre0 entered promiscuous mode [ 54.600028][ T4785] device gretap0 entered promiscuous mode [ 54.609042][ T4785] device erspan0 entered promiscuous mode [ 54.617164][ T4785] device ip_vti0 entered promiscuous mode [ 54.623715][ T4785] device ip6_vti0 entered promiscuous mode [ 54.631576][ T4785] device sit0 entered promiscuous mode [ 54.645245][ T4785] device ip6tnl0 entered promiscuous mode [ 54.653167][ T4785] device ip6gre0 entered promiscuous mode [ 54.661279][ T4785] device syz_tun entered promiscuous mode [ 54.669533][ T4785] device ip6gretap0 entered promiscuous mode [ 54.679198][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.681089][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.683106][ T4785] device bridge0 entered promiscuous mode [ 54.691536][ T4785] device vcan0 entered promiscuous mode [ 54.695746][ T4785] device bond0 entered promiscuous mode [ 54.696814][ T4785] device bond_slave_0 entered promiscuous mode [ 54.698143][ T4785] device bond_slave_1 entered promiscuous mode [ 54.707289][ T4785] device team0 entered promiscuous mode [ 54.708472][ T4785] device team_slave_0 entered promiscuous mode [ 54.709686][ T4785] device team_slave_1 entered promiscuous mode [ 54.718071][ T4785] device dummy0 entered promiscuous mode [ 54.726819][ T4785] device nlmon0 entered promiscuous mode [ 54.731427][ T4785] device caif0 entered promiscuous mode [ 54.734758][ T4785] device batadv0 entered promiscuous mode [ 54.743044][ T4785] device vxcan0 entered promiscuous mode [ 54.746767][ T4785] device vxcan1 entered promiscuous mode [ 54.750538][ T4785] device veth0 entered promiscuous mode [ 54.758877][ T4785] device veth1 entered promiscuous mode [ 54.830885][ T4785] device wg0 entered promiscuous mode [ 54.902350][ T4785] device wg1 entered promiscuous mode [ 55.038195][ T4785] device wg2 entered promiscuous mode [ 55.046798][ T4785] device veth0_to_bridge entered promiscuous mode [ 55.059981][ T4785] device veth1_to_bridge entered promiscuous mode [ 55.076988][ T4785] device veth0_to_bond entered promiscuous mode [ 55.086909][ T4785] device veth1_to_bond entered promiscuous mode [ 55.096892][ T4785] device veth0_to_team entered promiscuous mode [ 56.363643][ T4785] device veth1_to_team entered promiscuous mode [ 56.387232][ T4785] device veth0_to_batadv entered promiscuous mode [ 56.390150][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.400283][ T4785] device batadv_slave_0 entered promiscuous mode [ 56.408938][ T4785] device veth1_to_batadv entered promiscuous mode [ 56.412267][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.418468][ T4785] device batadv_slave_1 entered promiscuous mode [ 56.429658][ T4785] device xfrm0 entered promiscuous mode [ 56.441067][ T4785] device veth0_to_hsr entered promiscuous mode [ 56.456523][ T4785] device veth1_to_hsr entered promiscuous mode [ 56.470771][ T4785] device hsr0 entered promiscuous mode [ 56.482318][ T4785] device veth1_virt_wifi entered promiscuous mode [ 56.490811][ T4785] device veth0_virt_wifi entered promiscuous mode [ 56.493256][ T4785] device virt_wifi0 entered promiscuous mode [ 56.515722][ T4785] device vlan0 entered promiscuous mode [ 56.516780][ T4785] device vlan1 entered promiscuous mode [ 56.550717][ T4785] device macvlan0 entered promiscuous mode [ 56.591088][ T4785] device macvlan1 entered promiscuous mode [ 56.600165][ T4785] device ipvlan0 entered promiscuous mode [ 56.602511][ T4785] device ipvlan1 entered promiscuous mode [ 56.660869][ T4785] device macvtap0 entered promiscuous mode [ 56.668803][ T4785] device macsec0 entered promiscuous mode [ 56.710849][ T4785] device geneve0 entered promiscuous mode [ 56.720101][ T4785] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.721873][ T4785] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.723424][ T4785] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.724993][ T4785] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.760913][ T4785] device geneve1 entered promiscuous mode [ 56.768803][ T4785] device netdevsim0 entered promiscuous mode [ 56.774664][ T4785] device netdevsim1 entered promiscuous mode [ 56.782502][ T4785] device netdevsim2 entered promiscuous mode [ 56.787863][ T4785] device netdevsim3 entered promiscuous mode [ 56.881870][ T4785] device wlan0 entered promiscuous mode [ 56.970910][ T4785] device wlan1 entered promiscuous mode [ 56.976466][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.978405][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.982612][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.986993][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.989025][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.991302][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.994287][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.000400][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.002292][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.003843][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.005494][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.012704][ T4826] tipc: Enabling of bearer rejected, failed to enable media [ 57.014809][ T4835] Set syz1 is full, maxelem 1029 reached [ 57.018126][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.019956][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.023858][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.025678][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.027351][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.029066][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.035045][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.036889][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.038524][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.048200][ T4528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.049787][ T4528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.061972][ T4528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.063472][ T4528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.117843][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.119301][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.130095][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.135672][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.137668][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.139369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.498330][ T4846] device syzkaller0 entered promiscuous mode [ 58.754607][ T4879] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 59.690876][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 59.703989][ T4897] syz.4.120 sent an empty control message without MSG_MORE. [ 60.242621][ T4901] Zero length message leads to an empty skb [ 60.303643][ T4915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.126'. [ 60.327044][ T4915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.126'. [ 60.410757][ T27] audit: type=1326 audit(60.360:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.127" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93379368 code=0x0 [ 60.654125][ T4928] loop2: detected capacity change from 0 to 256 [ 60.669201][ T4928] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.678301][ T4920] loop1: detected capacity change from 0 to 131072 [ 60.678945][ T4928] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 60.691461][ T4928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 60.696114][ T4928] exFAT-fs (loop2): failed to load alloc-bitmap [ 60.697272][ T4928] exFAT-fs (loop2): failed to recognize exfat type [ 60.850386][ T4920] F2FS-fs (loop1): Test dummy encryption mode enabled [ 60.853229][ T4933] wireguard: wg0: Could not create IPv6 socket [ 60.859044][ T4920] F2FS-fs (loop1): invalid crc value [ 60.863235][ T4920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.871626][ T4928] loop2: detected capacity change from 0 to 40427 [ 60.878398][ T4928] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 60.880313][ T4920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.894198][ T4935] loop0: detected capacity change from 0 to 512 [ 60.992484][ T4935] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.995623][ T4935] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.132: corrupted inode contents [ 61.000280][ T4935] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 61.012660][ T4935] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.132: corrupted inode contents [ 61.017128][ T4935] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.132: mark_inode_dirty error [ 61.019428][ T4935] EXT4-fs (loop0): 1 orphan inode deleted [ 61.024778][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.732102][ T4949] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 61.992854][ T4332] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 61.995479][ T4332] Bluetooth: hci1: Injecting HCI hardware error event [ 61.997889][ T4343] Bluetooth: hci1: hardware error 0x00 [ 62.207462][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 62.263589][ T4954] device vlan2 entered promiscuous mode [ 62.265178][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 63.141138][ T4534] wlan1: Trigger new scan to find an IBSS to join [ 63.205629][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 63.217821][ T4332] Bluetooth: Frame is too long (len 12, expected len 8) [ 63.228567][ T4958] device syzkaller0 entered promiscuous mode [ 63.242851][ T4969] loop0: detected capacity change from 0 to 256 [ 63.257049][ T4969] exfat: Bad value for 'fmask' [ 63.272087][ T4332] Bluetooth: Frame is too long (len 12, expected len 8) [ 63.304889][ T4973] loop3: detected capacity change from 0 to 8 [ 63.704248][ T3706] Bluetooth: bad checksum in packet [ 63.719713][ T4991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 63.723179][ T4991] device ip6gre1 entered promiscuous mode [ 63.801499][ T4997] netlink: 'syz.2.144': attribute type 6 has an invalid length. [ 63.802997][ T4997] netlink: 72 bytes leftover after parsing attributes in process `syz.2.144'. [ 63.986593][ T5003] loop2: detected capacity change from 0 to 32768 [ 64.018724][ T5003] XFS (loop2): Mounting V5 Filesystem [ 64.043925][ T5003] XFS (loop2): Ending clean mount [ 64.047956][ T5003] XFS (loop2): Quotacheck needed: Please wait. [ 64.049671][ T5013] loop0: detected capacity change from 0 to 1024 [ 64.067489][ T4332] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 64.075971][ T5003] XFS (loop2): Quotacheck: Done. [ 64.499730][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501325][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.505747][ T4332] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 64.567413][ T5018] Bluetooth: MGMT ver 1.22 [ 64.570620][ T5019] loop4: detected capacity change from 0 to 128 [ 64.582796][ T5019] FAT-fs (loop4): bogus number of reserved sectors [ 64.584239][ T5019] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 64.586096][ T5019] FAT-fs (loop4): Can't find a valid FAT filesystem [ 64.636548][ T4929] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.680983][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 19 > 18 [ 64.682834][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 65.572651][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 65.607829][ T4343] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 65.846386][ T4338] XFS (loop2): Unmounting Filesystem [ 65.867484][ T5031] netlink: 550 bytes leftover after parsing attributes in process `syz.1.152'. [ 66.365307][ T5043] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 66.383914][ T5043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.385982][ T5043] bond1: (slave bond2): making interface the new active one [ 66.387395][ T5043] bond1: (slave bond2): Enslaving as an active interface with an up link [ 66.403959][ T5043] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 66.442303][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 66.449647][ T5043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.470001][ T5049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 66.474164][ T5047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'. [ 66.506162][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.160'. [ 66.514692][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.160'. [ 66.539276][ T5053] capability: warning: `syz.3.160' uses deprecated v2 capabilities in a way that may be insecure [ 66.563828][ T5062] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 66.591471][ T5062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.616987][ T5068] netlink: 'syz.0.166': attribute type 12 has an invalid length. [ 66.618620][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 66.620276][ T5068] bond0: option primary_reselect: invalid value (113) [ 66.631898][ T5062] bond2: (slave geneve2): making interface the new active one [ 66.635832][ T5062] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 66.639726][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 66.649360][ T5070] device syzkaller0 entered promiscuous mode [ 66.651005][ T4332] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 66.651400][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.665036][ T5070] 0: reclassify loop, rule prio 0, protocol 800 [ 67.098219][ T4396] wlan1: Trigger new scan to find an IBSS to join [ 67.392155][ T5055] ceph: No mds server is up or the cluster is laggy [ 67.473582][ T5084] loop4: detected capacity change from 0 to 2048 [ 67.578656][ T5086] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.032597][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.037938][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.039297][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.041611][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.044817][ T5112] device bridge_slave_0 left promiscuous mode [ 69.046463][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.063740][ T5116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.181'. [ 69.092081][ T5112] device bridge_slave_1 left promiscuous mode [ 69.093443][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.157267][ T5112] bond0: (slave bond_slave_0): Releasing backup interface [ 69.475165][ T5123] loop0: detected capacity change from 0 to 32768 [ 70.005739][ T5121] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 70.007033][ T5121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.009333][ T5121] vhci_hcd vhci_hcd.0: Device attached [ 70.020333][ T5122] vhci_hcd: connection closed [ 70.023705][ T4396] vhci_hcd: stop threads [ 70.025973][ T4396] vhci_hcd: release socket [ 70.026957][ T4396] vhci_hcd: disconnect device [ 70.451582][ T14] cfg80211: failed to load regulatory.db [ 70.585154][ T5112] bond0: (slave bond_slave_1): Releasing backup interface [ 70.665429][ T5112] team0: Port device team_slave_0 removed [ 70.697798][ T5112] team0: Port device team_slave_1 removed [ 70.704174][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.710374][ T5112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.720905][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.724772][ T5112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.741751][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.921149][ T5141] device syzkaller0 entered promiscuous mode [ 70.937936][ T5141] tipc: Started in network mode [ 70.938869][ T5141] tipc: Node identity 8e71a7dfb86f, cluster identity 4711 [ 70.940444][ T5141] tipc: Enabled bearer , priority 0 [ 70.957179][ T5140] tipc: Resetting bearer [ 71.051750][ T5140] tipc: Disabling bearer [ 71.104166][ T5148] netlink: 'syz.0.189': attribute type 39 has an invalid length. [ 73.067354][ T4332] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 73.069058][ T4332] CPU: 1 PID: 4332 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 73.070281][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.072050][ T4332] Workqueue: hci0 hci_rx_work [ 73.072972][ T4332] Call trace: [ 73.073611][ T4332] dump_backtrace+0x1c4/0x1f0 [ 73.074510][ T4332] show_stack+0x2c/0x3c [ 73.075296][ T4332] __dump_stack+0x30/0x40 [ 73.076122][ T4332] dump_stack_lvl+0xf4/0x15c [ 73.076955][ T4332] dump_stack+0x1c/0x5c [ 73.077722][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 73.078679][ T4332] kobject_add_internal+0x5a8/0xb18 [ 73.079669][ T4332] kobject_add+0x144/0x20c [ 73.080524][ T4332] device_add+0x3dc/0xe4c [ 73.081354][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 73.082233][ T4332] le_conn_complete_evt+0xd08/0x12c8 [ 73.083224][ T4332] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 73.084375][ T4332] hci_le_meta_evt+0x2c0/0x4a8 [ 73.085319][ T4332] hci_event_packet+0x64c/0xe60 [ 73.086287][ T4332] hci_rx_work+0x310/0xa70 [ 73.087116][ T4332] process_one_work+0x7e4/0x13bc [ 73.088015][ T4332] worker_thread+0x8cc/0xfe8 [ 73.088892][ T4332] kthread+0x254/0x2e0 [ 73.089673][ T4332] ret_from_fork+0x10/0x20 [ 73.091140][ T4332] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 73.093421][ T4332] Bluetooth: hci0: failed to register connection device [ 73.681892][ T5206] Trying to write to read-only block-device nullb0 [ 73.685411][ T5205] netlink: 156 bytes leftover after parsing attributes in process `syz.1.205'. [ 73.740446][ T5209] Trying to write to read-only block-device nullb0 [ 73.741921][ T5209] Trying to write to read-only block-device nullb0 [ 73.743492][ T5209] Trying to write to read-only block-device nullb0 [ 73.744856][ T5209] Trying to write to read-only block-device nullb0 [ 73.746336][ T5209] Trying to write to read-only block-device nullb0 [ 73.747654][ T5209] Trying to write to read-only block-device nullb0 [ 73.749387][ T5209] Trying to write to read-only block-device nullb0 [ 73.750829][ T5209] Trying to write to read-only block-device nullb0 [ 73.752199][ T5209] Trying to write to read-only block-device nullb0 [ 73.764747][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 73.776396][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 73.908590][ T5216] loop4: detected capacity change from 0 to 256 [ 73.909692][ T5214] loop1: detected capacity change from 0 to 8 [ 73.913327][ T5216] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.915551][ T5216] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 73.947931][ T5216] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.951496][ T5216] exFAT-fs (loop4): failed to load alloc-bitmap [ 73.952685][ T5216] exFAT-fs (loop4): failed to recognize exfat type [ 74.104874][ T5216] loop4: detected capacity change from 0 to 40427 [ 74.259910][ T5216] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 74.323809][ T5225] loop1: detected capacity change from 0 to 1024 [ 74.334741][ T5229] loop3: detected capacity change from 0 to 128 [ 74.340240][ T5229] FAT-fs (loop3): bogus number of reserved sectors [ 74.342445][ T5229] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 74.347158][ T5229] FAT-fs (loop3): Can't find a valid FAT filesystem [ 74.362149][ T5221] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.366251][ T5218] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.431362][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 19 > 18 [ 74.435076][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 75.702243][ T5238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 76.330744][ T4332] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.332590][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.536598][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 76.821180][ T5247] netlink: 'syz.3.216': attribute type 6 has an invalid length. [ 76.824903][ T5247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.216'. [ 76.857622][ T5266] netlink: 550 bytes leftover after parsing attributes in process `syz.3.222'. [ 76.920367][ T5272] loop4: detected capacity change from 0 to 8 [ 77.452605][ T5276] loop3: detected capacity change from 0 to 32768 [ 78.009905][ T5274] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 78.011134][ T5274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.012704][ T5274] vhci_hcd vhci_hcd.0: Device attached [ 78.018880][ T5275] vhci_hcd: connection closed [ 78.091119][ T1620] vhci_hcd: stop threads [ 78.092815][ T1620] vhci_hcd: release socket [ 78.093788][ T1620] vhci_hcd: disconnect device [ 78.352518][ T5282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.227'. [ 78.411522][ T4343] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 78.413156][ T4343] Bluetooth: hci2: Injecting HCI hardware error event [ 78.415542][ T4332] Bluetooth: hci2: hardware error 0x00 [ 79.411304][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 19 > 18 [ 79.762577][ T5310] netlink: 550 bytes leftover after parsing attributes in process `syz.2.235'. [ 79.799719][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.803035][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.804842][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.810061][ T5312] device bridge_slave_0 left promiscuous mode [ 79.814223][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.851780][ T5312] device bridge_slave_1 left promiscuous mode [ 79.853224][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.872755][ T5312] bond0: (slave bond_slave_0): Releasing backup interface [ 79.911046][ T5312] device bond_slave_0 left promiscuous mode [ 79.915846][ T5312] bond0: (slave bond_slave_1): Releasing backup interface [ 79.951756][ T5312] device bond_slave_1 left promiscuous mode [ 79.966906][ T5312] team0: Port device team_slave_0 removed [ 79.975228][ T5312] team0: Port device team_slave_1 removed [ 79.976776][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.978309][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.980113][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.981796][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.987348][ T5312] bond1: (slave macvlan2): Releasing active interface [ 80.064971][ T5312] bond2: (slave geneve2): Releasing active interface [ 80.117910][ T5320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 80.232610][ T5326] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 80.253153][ T5326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.255055][ T5326] bond1: (slave bond2): making interface the new active one [ 80.256672][ T5326] bond1: (slave bond2): Enslaving as an active interface with an up link [ 80.374230][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 80.771396][ T5333] loop2: detected capacity change from 0 to 32768 [ 80.893537][ T4332] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 80.971247][ T4343] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.022208][ T4343] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.207195][ T5332] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 81.208444][ T5332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.209937][ T5332] vhci_hcd vhci_hcd.0: Device attached [ 81.213026][ T5334] vhci_hcd: connection closed [ 81.216942][ T5335] vhci_hcd: stop threads [ 81.218696][ T5335] vhci_hcd: release socket [ 81.219482][ T5335] vhci_hcd: disconnect device [ 81.704433][ T5326] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 81.732858][ T5326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 81.739853][ T5326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.827763][ T5344] netlink: 68 bytes leftover after parsing attributes in process `syz.4.243'. [ 82.579585][ T5338] ceph: No mds server is up or the cluster is laggy [ 82.582633][ T113] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PAYLOAD) [ 82.768965][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.621103][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 84.253281][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 84.275761][ T5390] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 84.287337][ T5390] bond3 (unregistering): (slave erspan0): Releasing backup interface [ 84.622623][ T5390] bond3 (unregistering): Released all slaves [ 84.776314][ T5408] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 84.777573][ T5408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.779100][ T5408] vhci_hcd vhci_hcd.0: Device attached [ 85.034183][ T5408] loop1: detected capacity change from 0 to 32768 [ 85.420873][ T4378] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 85.541457][ T5409] vhci_hcd: connection reset by peer [ 85.545027][ T5335] vhci_hcd: stop threads [ 85.545869][ T5335] vhci_hcd: release socket [ 85.547611][ T5335] vhci_hcd: disconnect device [ 86.123955][ T5420] loop4: detected capacity change from 0 to 256 [ 86.996540][ T5436] loop3: detected capacity change from 0 to 256 [ 87.199311][ T5436] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 87.201311][ T5436] exFAT-fs (loop3): invalid boot region [ 87.202338][ T5436] exFAT-fs (loop3): failed to recognize exfat type [ 87.997830][ T5452] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 88.009580][ T5452] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.014430][ T5452] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.016036][ T5452] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.017676][ T5452] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.021436][ T5452] bond3: (slave geneve2): making interface the new active one [ 88.023877][ T5452] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 88.028578][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 88.035033][ T5452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.442981][ T5463] loop0: detected capacity change from 0 to 8 [ 88.825652][ T5465] tipc: Started in network mode [ 88.826715][ T5465] tipc: Node identity 5e46c618156c, cluster identity 4711 [ 88.830214][ T5465] tipc: Enabled bearer , priority 0 [ 88.832342][ T5465] device syzkaller0 entered promiscuous mode [ 88.849389][ T5467] Bluetooth: ISO socket layer initialized [ 89.003009][ T5465] tipc: Resetting bearer [ 89.008996][ T4333] SQUASHFS error: Unable to read directory block [629:1f] [ 89.012081][ T4333] SQUASHFS error: Unable to read directory block [629:1f] [ 89.021421][ T5464] tipc: Resetting bearer [ 89.353543][ T5464] tipc: Disabling bearer [ 89.355699][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 89.823946][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.826050][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.827766][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.829306][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.831334][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.832741][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.875567][ T5487] loop4: detected capacity change from 0 to 1764 [ 89.912605][ T4490] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.917807][ T5485] device syzkaller0 entered promiscuous mode [ 89.921933][ T5485] tipc: Started in network mode [ 89.922982][ T5485] tipc: Node identity e267d394ff73, cluster identity 4711 [ 89.924692][ T5485] tipc: Enabled bearer , priority 0 [ 89.927339][ T5218] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.947258][ T5483] tipc: Resetting bearer [ 89.974189][ T5482] usb usb9: usbfs: process 5482 (syz.4.284) did not claim interface 0 before use [ 89.978908][ T5482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.980627][ T5482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.041807][ T5483] tipc: Disabling bearer [ 90.083582][ T4490] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.222255][ T4490] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.226450][ T5480] chnl_net:caif_netlink_parms(): no params data found [ 90.571722][ T4378] vhci_hcd: vhci_device speed not set [ 90.578560][ T4490] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.594646][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.598111][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.602890][ T5480] device bridge_slave_0 entered promiscuous mode [ 90.605388][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.606833][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.608557][ T5480] device bridge_slave_1 entered promiscuous mode [ 90.618953][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.622682][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.636626][ T5480] team0: Port device team_slave_0 added [ 90.639752][ T5480] team0: Port device team_slave_1 added [ 90.646720][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.648307][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.655939][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.659013][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.660443][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.665855][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.725196][ T5480] device hsr_slave_0 entered promiscuous mode [ 90.736013][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.738665][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.761780][ T5480] device hsr_slave_1 entered promiscuous mode [ 90.906075][ T5480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.907918][ T5480] Cannot create hsr debugfs directory [ 91.213619][ T5480] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.251825][ T5480] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.773623][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 92.944967][ T5543] loop4: detected capacity change from 0 to 256 [ 93.110460][ T5480] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.142401][ T5480] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.244134][ T5548] bridge0: port 1(syz_tun) entered blocking state [ 94.245491][ T5548] bridge0: port 1(syz_tun) entered disabled state [ 94.247759][ T5548] device syz_tun entered promiscuous mode [ 94.251113][ T5548] bridge0: port 1(syz_tun) entered blocking state [ 94.252443][ T5548] bridge0: port 1(syz_tun) entered forwarding state [ 94.646481][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.683149][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.685583][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.689584][ T5480] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.693657][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.695436][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.697174][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.698507][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.700068][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.705424][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.707223][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.709543][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.710813][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.714113][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.717568][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.722437][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.724880][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.726648][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.806524][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.808608][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.810847][ T4343] Bluetooth: hci1: command 0x041b tx timeout [ 94.819547][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.821517][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.826015][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.827980][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.831445][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.929971][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.932003][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.938451][ T5480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.548634][ T5612] loop4: detected capacity change from 0 to 32768 [ 95.743046][ T4490] bond1: (slave gretap1): Releasing backup interface [ 95.822605][ T5610] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 95.823944][ T5610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.825670][ T5610] vhci_hcd vhci_hcd.0: Device attached [ 95.943518][ T5613] vhci_hcd: connection closed [ 95.964124][ T1620] vhci_hcd: stop threads [ 95.965872][ T1620] vhci_hcd: release socket [ 95.966806][ T1620] vhci_hcd: disconnect device [ 96.419161][ T5615] loop2: detected capacity change from 0 to 256 [ 96.891008][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 96.924852][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.926862][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.466279][ T5626] loop4: detected capacity change from 0 to 32768 [ 97.486908][ T5626] XFS (loop4): Mounting V5 Filesystem [ 97.508363][ T5626] XFS (loop4): Ending clean mount [ 97.514394][ T5626] XFS (loop4): Quotacheck needed: Please wait. [ 97.805299][ T5626] XFS (loop4): Quotacheck: Done. [ 97.862035][ T5646] loop1: detected capacity change from 0 to 8 [ 97.877137][ T5646] unable to read fragment index table [ 98.363069][ T5651] loop1: detected capacity change from 0 to 1024 [ 98.366358][ T5651] EXT4-fs: Ignoring removed bh option [ 98.407723][ T4332] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 98.587371][ T5651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.727035][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 98.813876][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.815680][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.817345][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.818910][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.821416][ T5480] device veth0_vlan entered promiscuous mode [ 98.830818][ T5480] device veth1_vlan entered promiscuous mode [ 98.840548][ T5480] device veth0_macvtap entered promiscuous mode [ 98.843287][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.845164][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.847567][ T5480] device veth1_macvtap entered promiscuous mode [ 98.851380][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.853391][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.857385][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.861555][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.865170][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.877304][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.890691][ T4328] XFS (loop4): Unmounting Filesystem [ 98.892916][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.898055][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.908244][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.910413][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.913256][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.926693][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.980996][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 98.992730][ T4490] device hsr_slave_0 left promiscuous mode [ 99.402691][ T5690] loop2: detected capacity change from 0 to 1024 [ 99.415473][ T5690] hfsplus: invalid length 32517 has been corrected to 255 [ 99.421195][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.429691][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.437726][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.442408][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.445985][ T4490] device bridge_slave_1 left promiscuous mode [ 99.450417][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.483261][ T4490] device bridge_slave_0 left promiscuous mode [ 99.485622][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.611118][ T4490] device veth1_macvtap left promiscuous mode [ 99.615491][ T4490] device veth0_macvtap left promiscuous mode [ 99.617223][ T4490] device veth1_vlan left promiscuous mode [ 99.618344][ T4490] device veth0_vlan left promiscuous mode [ 100.321233][ T4490] bond1 (unregistering): (slave bond2): Releasing backup interface [ 100.362111][ T4490] bond2 (unregistering): Released all slaves [ 101.082218][ T4490] bond1 (unregistering): Released all slaves [ 103.153387][ T4490] team0 (unregistering): Port device team_slave_1 removed [ 103.331797][ T4490] team0 (unregistering): Port device team_slave_0 removed [ 103.522624][ T4490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.741610][ T4490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.171012][ T4491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 105.162650][ T4490] bond0 (unregistering): Released all slaves [ 105.462931][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.464840][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.466602][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.468264][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.488843][ T5480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.493941][ T5480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.495712][ T5480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.503420][ T5480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.538084][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.539411][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.550011][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.561081][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.562419][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.563769][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.651819][ T5712] futex_wake_op: syz.1.329 tries to shift op by 144; fix this program [ 106.446022][ T5727] loop5: detected capacity change from 0 to 32768 [ 107.057213][ T5725] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 107.058440][ T5725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.059871][ T5725] vhci_hcd vhci_hcd.0: Device attached [ 107.062808][ T5726] vhci_hcd: connection closed [ 107.064995][ T5728] vhci_hcd: stop threads [ 107.066534][ T5728] vhci_hcd: release socket [ 107.067373][ T5728] vhci_hcd: disconnect device [ 107.402258][ T5734] loop2: detected capacity change from 0 to 128 [ 107.409718][ T5734] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 107.879122][ T4491] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.884904][ T5759] loop5: detected capacity change from 0 to 256 [ 108.910842][ T5759] netlink: 168 bytes leftover after parsing attributes in process `syz.5.322'. [ 109.586044][ T5779] loop5: detected capacity change from 0 to 2048 [ 109.997390][ T5779] loop5: p1 < > p4 [ 109.997390][ T5779] p4: [ 110.000500][ T5779] loop5: p4 size 722688 extends beyond EOD, truncated [ 111.039228][ T5806] loop3: detected capacity change from 0 to 1024 [ 111.082212][ T5810] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 111.082700][ T5806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.089616][ T5810] loop2: detected capacity change from 0 to 8 [ 111.100055][ T5810] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 111.576388][ T5831] loop1: detected capacity change from 0 to 2048 [ 111.583390][ T5831] UDF-fs: bad mount option "01777777777777777777777ÿÿÿÿ" or missing value [ 111.644745][ T27] audit: type=1400 audit(111.630:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=5833 comm="syz.4.342" [ 111.662925][ T5697] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.070719][ T4528] EXT4-fs (loop3): unmounting filesystem. [ 112.073348][ T5845] loop4: detected capacity change from 0 to 128 [ 112.143502][ T5845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.209025][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 113.324520][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 113.340004][ T5878] usb usb8: usbfs: process 5878 (syz.3.350) did not claim interface 0 before use [ 113.437798][ T5885] netlink: 156 bytes leftover after parsing attributes in process `syz.5.351'. [ 114.628998][ T5899] loop1: detected capacity change from 0 to 1024 [ 115.009043][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 115.116730][ T5903] netlink: 'syz.3.357': attribute type 2 has an invalid length. [ 115.133327][ T5899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.143924][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.359'. [ 115.569033][ T5815] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 115.737792][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 116.576504][ T5935] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 118.506341][ T5968] loop4: detected capacity change from 0 to 1024 [ 118.685616][ T5975] loop2: detected capacity change from 0 to 128 [ 119.469364][ T5975] affs: No valid root block on device loop2 [ 119.501921][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.564423][ T5985] binder: 5984:5985 tried to acquire reference to desc 0, got 1 instead [ 119.582092][ T5985] binder: 5984:5985 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 119.584296][ T5985] binder: 5985 RLIMIT_NICE not set [ 119.585327][ T5985] binder: 5985 RLIMIT_NICE not set [ 119.587273][ T5985] binder: 5984:5985 new transaction not allowed when there is a transaction on thread todo [ 119.589402][ T5985] binder: 5984:5985 transaction call to 5984:0 failed 13/29201/-71, size 0-0 line 3103 [ 119.598087][ T4487] binder: release 5984:5985 transaction 5 out, still active [ 119.599817][ T4487] binder: send failed reply for transaction 12 to 5984:5985 [ 119.602151][ T5697] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.605683][ T4487] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.607157][ T4487] binder: release 5984:5985 transaction 5 in, still active [ 119.608514][ T4487] binder: send failed reply for transaction 5, target dead [ 119.609947][ T4487] binder: undelivered TRANSACTION_COMPLETE [ 119.622132][ T4487] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.058927][ T5992] device lo entered promiscuous mode [ 120.096322][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 120.618166][ T6003] loop2: detected capacity change from 0 to 32768 [ 121.229484][ T6006] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 121.230629][ T6006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.232313][ T6006] vhci_hcd vhci_hcd.0: Device attached [ 121.266206][ T6007] vhci_hcd: connection closed [ 121.267121][ T4491] vhci_hcd: stop threads [ 121.268890][ T4491] vhci_hcd: release socket [ 121.269741][ T4491] vhci_hcd: disconnect device [ 122.177783][ T5992] device tunl0 entered promiscuous mode [ 122.185942][ T5992] device gre0 entered promiscuous mode [ 122.238727][ T5992] device gretap0 entered promiscuous mode [ 122.265761][ T5992] device erspan0 entered promiscuous mode [ 122.280028][ T6017] Set syz1 is full, maxelem 1029 reached [ 122.283006][ T5992] device ip_vti0 entered promiscuous mode [ 122.292018][ T5992] device ip6_vti0 entered promiscuous mode [ 122.300295][ T5992] device sit0 entered promiscuous mode [ 122.616507][ T5992] device ip6tnl0 entered promiscuous mode [ 122.696712][ T5992] device ip6gre0 entered promiscuous mode [ 122.706557][ T5992] device syz_tun entered promiscuous mode [ 122.714812][ T5992] device ip6gretap0 entered promiscuous mode [ 122.723300][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.724761][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.726750][ T5992] device bridge0 entered promiscuous mode [ 123.613809][ T5992] device vcan0 entered promiscuous mode [ 123.623496][ T5992] device bond0 entered promiscuous mode [ 123.626923][ T5992] device bond_slave_0 entered promiscuous mode [ 123.629318][ T5992] device bond_slave_1 entered promiscuous mode [ 123.645999][ T5992] device team0 entered promiscuous mode [ 123.720594][ T5992] device team_slave_0 entered promiscuous mode [ 123.722684][ T5992] device team_slave_1 entered promiscuous mode [ 123.735985][ T5992] device dummy0 entered promiscuous mode [ 123.745608][ T5992] device nlmon0 entered promiscuous mode [ 123.749970][ T5992] device caif0 entered promiscuous mode [ 123.756216][ T5992] device batadv0 entered promiscuous mode [ 124.165490][ T5992] device veth0 entered promiscuous mode [ 124.174606][ T5992] device veth1 entered promiscuous mode [ 124.298023][ T5992] device wg0 entered promiscuous mode [ 124.462731][ T5992] device wg1 entered promiscuous mode [ 124.680857][ T5992] device wg2 entered promiscuous mode [ 124.686829][ T5992] device veth0_to_bridge entered promiscuous mode [ 124.697214][ T5992] device veth1_to_bridge entered promiscuous mode [ 124.710546][ T5992] device veth0_to_bond entered promiscuous mode [ 124.715249][ T5992] device veth1_to_bond entered promiscuous mode [ 124.726227][ T5992] device veth0_to_team entered promiscuous mode [ 124.741469][ T5992] device veth1_to_team entered promiscuous mode [ 124.768555][ T5992] device veth0_to_batadv entered promiscuous mode [ 124.771469][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.778654][ T5992] device batadv_slave_0 entered promiscuous mode [ 124.788748][ T5992] device veth1_to_batadv entered promiscuous mode [ 124.793955][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.801258][ T5992] device batadv_slave_1 entered promiscuous mode [ 124.809713][ T5992] device xfrm0 entered promiscuous mode [ 124.817759][ T5992] device veth0_to_hsr entered promiscuous mode [ 124.830958][ T5992] device veth1_to_hsr entered promiscuous mode [ 124.845502][ T5992] device hsr0 entered promiscuous mode [ 124.854090][ T5992] device veth1_virt_wifi entered promiscuous mode [ 124.862231][ T5992] device veth0_virt_wifi entered promiscuous mode [ 124.864826][ T5992] device virt_wifi0 entered promiscuous mode [ 124.888248][ T5992] device vlan0 entered promiscuous mode [ 124.889506][ T5992] device vlan1 entered promiscuous mode [ 124.930757][ T5992] device macvlan0 entered promiscuous mode [ 124.990798][ T5992] device macvlan1 entered promiscuous mode [ 124.993472][ T5992] device ipvlan0 entered promiscuous mode [ 124.994710][ T5992] device ipvlan1 entered promiscuous mode [ 125.073463][ T5992] device macvtap0 entered promiscuous mode [ 125.082495][ T5992] device macsec0 entered promiscuous mode [ 125.151301][ T5992] device geneve0 entered promiscuous mode [ 125.439374][ T5992] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.440976][ T5992] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.442435][ T5992] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.443921][ T5992] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.490928][ T5992] device geneve1 entered promiscuous mode [ 125.502361][ T5992] device netdevsim0 entered promiscuous mode [ 125.508276][ T5992] device netdevsim1 entered promiscuous mode [ 125.514368][ T5992] device netdevsim2 entered promiscuous mode [ 125.520301][ T5992] device netdevsim3 entered promiscuous mode [ 125.561288][ T5992] device wlan0 entered promiscuous mode [ 125.650948][ T5992] device wlan1 entered promiscuous mode [ 125.658486][ T5992] device bridge1 entered promiscuous mode [ 125.661351][ T5992] device sit1 entered promiscuous mode [ 125.665754][ T5992] device syztnl0 entered promiscuous mode [ 125.667765][ T6005] netlink: 67 bytes leftover after parsing attributes in process `syz.1.380'. [ 125.931264][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932591][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.043663][ T6079] loop5: detected capacity change from 0 to 1024 [ 126.074727][ T6079] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 126.273300][ T6089] device lo entered promiscuous mode [ 126.321182][ T6089] device tunl0 entered promiscuous mode [ 126.330285][ T6089] device gre0 entered promiscuous mode [ 126.366379][ T6089] device gretap0 entered promiscuous mode [ 126.369244][ T6089] device erspan0 entered promiscuous mode [ 126.378010][ T6089] device ip_vti0 entered promiscuous mode [ 126.388015][ T6089] device ip6_vti0 entered promiscuous mode [ 126.396069][ T6089] device sit0 entered promiscuous mode [ 126.699381][ T6089] device ip6tnl0 entered promiscuous mode [ 126.708414][ T6089] device ip6gre0 entered promiscuous mode [ 126.717633][ T6089] device syz_tun entered promiscuous mode [ 126.728155][ T6089] device ip6gretap0 entered promiscuous mode [ 126.739347][ T6089] device bridge0 entered promiscuous mode [ 126.747732][ T6089] device vcan0 entered promiscuous mode [ 126.751672][ T6089] device bond0 entered promiscuous mode [ 126.760031][ T6089] device team0 entered promiscuous mode [ 126.768338][ T6089] device dummy0 entered promiscuous mode [ 126.776957][ T6089] device nlmon0 entered promiscuous mode [ 126.782533][ T6089] device caif0 entered promiscuous mode [ 126.785091][ T6089] device batadv0 entered promiscuous mode [ 126.826733][ T6089] device vxcan0 entered promiscuous mode [ 126.842882][ T6089] device vxcan1 entered promiscuous mode [ 127.718929][ T6105] loop2: detected capacity change from 0 to 32768 [ 128.345664][ T6103] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 128.346873][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.348258][ T6103] vhci_hcd vhci_hcd.0: Device attached [ 128.351871][ T6104] vhci_hcd: connection closed [ 128.354159][ T39] vhci_hcd: stop threads [ 128.355796][ T39] vhci_hcd: release socket [ 128.356692][ T39] vhci_hcd: disconnect device [ 128.612178][ T6089] device veth0 entered promiscuous mode [ 128.618677][ T5480] EXT4-fs (loop5): unmounting filesystem. [ 128.627072][ T6089] device veth1 entered promiscuous mode [ 129.111306][ T6089] device wg0 entered promiscuous mode [ 129.261132][ T6089] device wg1 entered promiscuous mode [ 129.512502][ T6089] device wg2 entered promiscuous mode [ 129.518704][ T6089] device veth0_to_bridge entered promiscuous mode [ 129.538801][ T6089] device bridge_slave_0 entered promiscuous mode [ 129.545220][ T6089] device veth1_to_bridge entered promiscuous mode [ 129.556123][ T6089] device bridge_slave_1 entered promiscuous mode [ 129.569265][ T6089] device veth0_to_bond entered promiscuous mode [ 129.575273][ T6089] device bond_slave_0 entered promiscuous mode [ 129.584559][ T6089] device veth1_to_bond entered promiscuous mode [ 129.587296][ T6089] device bond_slave_1 entered promiscuous mode [ 129.596794][ T6089] device veth0_to_team entered promiscuous mode [ 129.599281][ T6089] device team_slave_0 entered promiscuous mode [ 129.606810][ T6089] device veth1_to_team entered promiscuous mode [ 129.609251][ T6089] device team_slave_1 entered promiscuous mode [ 129.624707][ T6089] device veth0_to_batadv entered promiscuous mode [ 129.647758][ T6089] device batadv_slave_0 entered promiscuous mode [ 129.657299][ T6089] device veth1_to_batadv entered promiscuous mode [ 129.667908][ T6089] device batadv_slave_1 entered promiscuous mode [ 129.676457][ T6089] device xfrm0 entered promiscuous mode [ 129.684909][ T6089] device veth0_to_hsr entered promiscuous mode [ 130.590896][ T6089] device veth1_to_hsr entered promiscuous mode [ 130.610065][ T6089] device hsr0 entered promiscuous mode [ 130.620924][ T6089] device veth1_virt_wifi entered promiscuous mode [ 130.628703][ T6089] device veth0_virt_wifi entered promiscuous mode [ 130.631387][ T6089] device virt_wifi0 entered promiscuous mode [ 130.651075][ T6089] device vlan0 entered promiscuous mode [ 130.652357][ T6089] device vlan1 entered promiscuous mode [ 130.696421][ T6138] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 130.805486][ T6089] device macvlan0 entered promiscuous mode [ 130.860745][ T6089] device macvlan1 entered promiscuous mode [ 130.863125][ T6089] device ipvlan0 entered promiscuous mode [ 130.864355][ T6089] device ipvlan1 entered promiscuous mode [ 130.920860][ T6089] device macvtap0 entered promiscuous mode [ 130.928981][ T6089] device macsec0 entered promiscuous mode [ 130.980779][ T6089] device geneve0 entered promiscuous mode [ 130.988772][ T6089] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.990340][ T6089] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.992280][ T6089] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.993967][ T6089] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.040795][ T6089] device geneve1 entered promiscuous mode [ 131.047715][ T6089] device netdevsim0 entered promiscuous mode [ 131.055411][ T6089] device netdevsim1 entered promiscuous mode [ 131.063467][ T6089] device netdevsim2 entered promiscuous mode [ 131.068928][ T6089] device netdevsim3 entered promiscuous mode [ 131.251008][ T6089] device wlan0 entered promiscuous mode [ 131.363099][ T6089] device wlan1 entered promiscuous mode [ 131.369729][ T6089] device bond1 entered promiscuous mode [ 131.370885][ T6089] device bond2 entered promiscuous mode [ 131.379021][ T6089] device gretap1 entered promiscuous mode [ 131.382758][ T6089] device ip6gretap1 entered promiscuous mode [ 131.389816][ T6089] device bond3 entered promiscuous mode [ 131.391150][ T6089] device geneve2 entered promiscuous mode [ 131.397664][ T6089] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.399241][ T6089] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.400809][ T6089] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.402383][ T6089] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.441506][ T6089] device sit1 entered promiscuous mode [ 131.508751][ T6145] device syzkaller0 entered promiscuous mode [ 132.014892][ T6179] loop5: detected capacity change from 0 to 1024 [ 132.479033][ T6179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 133.278521][ T6199] loop3: detected capacity change from 0 to 32768 [ 133.815421][ T6197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 133.816625][ T6197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.818075][ T6197] vhci_hcd vhci_hcd.0: Device attached [ 133.827474][ T6198] vhci_hcd: connection closed [ 133.829864][ T5335] vhci_hcd: stop threads [ 133.835836][ T5335] vhci_hcd: release socket [ 133.836750][ T5335] vhci_hcd: disconnect device [ 134.127699][ T5480] EXT4-fs (loop5): unmounting filesystem. [ 134.318363][ T6212] netlink: 'syz.5.415': attribute type 2 has an invalid length. [ 135.148479][ T6230] device syzkaller0 entered promiscuous mode [ 136.333110][ T6243] loop2: detected capacity change from 0 to 65 [ 136.343756][ T4439] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 136.353558][ T6243] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 136.506916][ T6080] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.517925][ T6240] device syzkaller0 entered promiscuous mode [ 136.543360][ T6241] device lo entered promiscuous mode [ 136.591337][ T6241] device tunl0 entered promiscuous mode [ 136.598860][ T6241] device gre0 entered promiscuous mode [ 136.672716][ T6241] device gretap0 entered promiscuous mode [ 136.680435][ T6241] device erspan0 entered promiscuous mode [ 136.689942][ T6241] device ip_vti0 entered promiscuous mode [ 136.695691][ T6241] device ip6_vti0 entered promiscuous mode [ 136.704871][ T6241] device sit0 entered promiscuous mode [ 136.719987][ T6241] device ip6tnl0 entered promiscuous mode [ 136.727995][ T6241] device ip6gre0 entered promiscuous mode [ 136.736234][ T6241] device syz_tun entered promiscuous mode [ 136.744498][ T6241] device ip6gretap0 entered promiscuous mode [ 136.753318][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.754834][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.756397][ T6241] device bridge0 entered promiscuous mode [ 136.764244][ T6241] device vcan0 entered promiscuous mode [ 136.768014][ T6241] device bond0 entered promiscuous mode [ 136.768994][ T6241] device bond_slave_0 entered promiscuous mode [ 136.770193][ T6241] device bond_slave_1 entered promiscuous mode [ 136.778433][ T6241] device team0 entered promiscuous mode [ 136.779638][ T6241] device team_slave_0 entered promiscuous mode [ 136.781064][ T6241] device team_slave_1 entered promiscuous mode [ 136.788007][ T6241] device dummy0 entered promiscuous mode [ 136.795907][ T6241] device nlmon0 entered promiscuous mode [ 136.797928][ T6241] device caif0 entered promiscuous mode [ 136.805017][ T6241] device batadv0 entered promiscuous mode [ 136.812780][ T6241] device veth0 entered promiscuous mode [ 136.820403][ T6241] device veth1 entered promiscuous mode [ 136.900896][ T6241] device wg0 entered promiscuous mode [ 137.000815][ T6241] device wg1 entered promiscuous mode [ 137.080815][ T6241] device wg2 entered promiscuous mode [ 137.087099][ T6241] device veth0_to_bridge entered promiscuous mode [ 137.094953][ T6241] device veth1_to_bridge entered promiscuous mode [ 137.109071][ T6241] device veth0_to_bond entered promiscuous mode [ 137.119843][ T6241] device veth1_to_bond entered promiscuous mode [ 137.130871][ T6241] device veth0_to_team entered promiscuous mode [ 137.143950][ T6241] device veth1_to_team entered promiscuous mode [ 137.156711][ T6241] device veth0_to_batadv entered promiscuous mode [ 137.159275][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.166588][ T6241] device batadv_slave_0 entered promiscuous mode [ 137.174432][ T6241] device veth1_to_batadv entered promiscuous mode [ 137.176822][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.183743][ T6241] device batadv_slave_1 entered promiscuous mode [ 137.191719][ T6241] device xfrm0 entered promiscuous mode [ 137.199532][ T6241] device veth0_to_hsr entered promiscuous mode [ 137.212394][ T6241] device veth1_to_hsr entered promiscuous mode [ 137.225281][ T6241] device hsr0 entered promiscuous mode [ 137.233118][ T6241] device veth1_virt_wifi entered promiscuous mode [ 137.241589][ T6241] device veth0_virt_wifi entered promiscuous mode [ 137.245742][ T6241] device virt_wifi0 entered promiscuous mode [ 137.270310][ T6241] device vlan0 entered promiscuous mode [ 137.271739][ T6241] device vlan1 entered promiscuous mode [ 137.310937][ T6241] device macvlan0 entered promiscuous mode [ 137.371850][ T6241] device macvlan1 entered promiscuous mode [ 137.374234][ T6241] device ipvlan0 entered promiscuous mode [ 137.375524][ T6241] device ipvlan1 entered promiscuous mode [ 137.420789][ T6241] device macvtap0 entered promiscuous mode [ 137.428585][ T6241] device macsec0 entered promiscuous mode [ 137.480732][ T6241] device geneve0 entered promiscuous mode [ 137.488213][ T6241] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.489733][ T6241] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.491399][ T6241] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.492904][ T6241] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.540915][ T6241] device geneve1 entered promiscuous mode [ 137.548584][ T6241] device netdevsim0 entered promiscuous mode [ 137.554127][ T6241] device netdevsim1 entered promiscuous mode [ 137.559520][ T6241] device netdevsim2 entered promiscuous mode [ 137.564855][ T6241] device netdevsim3 entered promiscuous mode [ 137.641000][ T6241] device wlan0 entered promiscuous mode [ 137.731818][ T6241] device wlan1 entered promiscuous mode [ 137.812335][ T6277] loop2: detected capacity change from 0 to 1024 [ 138.396553][ T6277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.920846][ T6299] loop4: detected capacity change from 0 to 256 [ 138.922477][ T6299] exfat: Deprecated parameter 'utf8' [ 138.923378][ T6299] exfat: Deprecated parameter 'utf8' [ 139.023127][ T6299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 139.031961][ T6301] loop1: detected capacity change from 0 to 128 [ 139.055260][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 139.070436][ T6301] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.095654][ T6303] loop5: detected capacity change from 0 to 512 [ 139.126852][ T6303] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.430: bg 0: block 5: invalid block bitmap [ 139.167148][ T6303] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 139.196138][ T6303] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.430: invalid indirect mapped block 393216 (level 0) [ 139.199258][ T6303] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.430: invalid indirect mapped block 3 (level 2) [ 139.235547][ T6303] EXT4-fs (loop5): 1 orphan inode deleted [ 139.235794][ T4329] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 139.240990][ T4329] FAT-fs (loop1): Filesystem has been set read-only [ 139.249486][ T4329] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.255628][ T6303] EXT4-fs (loop5): 1 truncate cleaned up [ 139.293666][ T6303] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 139.421589][ T6338] binder: 6334:6338 tried to acquire reference to desc 0, got 1 instead [ 139.423924][ T6338] binder: 6334:6338 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.427947][ T6338] binder: 6338 RLIMIT_NICE not set [ 139.428905][ T6338] binder: 6338 RLIMIT_NICE not set [ 139.430295][ T6338] binder: 6338 RLIMIT_NICE not set [ 139.433582][ T6338] binder_alloc: 6334: binder_alloc_buf, no vma [ 139.435542][ T6338] binder: cannot allocate buffer: vma cleared, target dead or dying [ 139.435580][ T6338] binder: 6334:6338 transaction reply to 6334:6338 failed 19/29189/-3, size 0-0 line 3247 [ 139.439740][ T6338] binder: send failed reply for transaction 18 to 6334:6338 [ 140.441628][ T4832] binder: undelivered TRANSACTION_COMPLETE [ 140.442739][ T4832] binder: undelivered TRANSACTION_ERROR: 29189 [ 140.444632][ T4832] binder: undelivered TRANSACTION_ERROR: 29190 [ 141.850866][ T6357] netlink: 'syz.2.439': attribute type 14 has an invalid length. [ 141.852460][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 141.854008][ T6357] bond0: option xmit_hash_policy: invalid value (113) [ 141.890200][ T5480] EXT4-fs (loop5): unmounting filesystem. [ 141.913806][ T6368] loop1: detected capacity change from 0 to 512 [ 141.945818][ T6368] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.947275][ T6368] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.440: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 141.975674][ T6368] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.440: ea_inode dec ref err=-117 [ 141.977982][ T6368] EXT4-fs (loop1): 1 orphan inode deleted [ 141.978986][ T6368] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.058034][ T6368] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 142.271989][ T6397] loop2: detected capacity change from 0 to 1024 [ 142.317644][ T6397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.152890][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 143.196039][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 143.907862][ T6444] loop2: detected capacity change from 0 to 32768 [ 144.209727][ T6442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 144.210978][ T6442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.212611][ T6442] vhci_hcd vhci_hcd.0: Device attached [ 144.576291][ T4414] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 144.577965][ T6443] vhci_hcd: connection closed [ 144.578239][ T6445] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 144.581550][ T4491] vhci_hcd: stop threads [ 144.582547][ T4491] vhci_hcd: release socket [ 144.583922][ T4491] vhci_hcd: disconnect device [ 145.053154][ T6447] tipc: Enabled bearer , priority 0 [ 145.054871][ T6447] device syzkaller0 entered promiscuous mode [ 145.115526][ T6453] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 145.187412][ T6452] device syzkaller0 entered promiscuous mode [ 145.214357][ T6447] tipc: Resetting bearer [ 145.231172][ T6446] tipc: Resetting bearer [ 145.701159][ T6446] tipc: Disabling bearer [ 145.807499][ T6476] loop4: detected capacity change from 0 to 1024 [ 145.834867][ T6476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.679768][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 146.728112][ T6498] loop4: detected capacity change from 0 to 512 [ 146.737797][ T6498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 146.739356][ T6498] System zones: 1-12 [ 146.741539][ T6498] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.462: missing EA_INODE flag [ 146.745296][ T6498] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.462: error while reading EA inode 12 err=-117 [ 146.748028][ T6498] EXT4-fs (loop4): 1 orphan inode deleted [ 146.749181][ T6498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.093598][ T6506] loop3: detected capacity change from 0 to 512 [ 148.930614][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 149.468812][ T6531] nvmet_tcp: enabling port 1 (127.0.0.1:442) [ 149.862635][ T4414] vhci_hcd: vhci_device speed not set [ 150.025144][ T6547] random: crng reseeded on system resumption [ 150.154598][ T6552] loop3: detected capacity change from 0 to 164 [ 150.228340][ T6554] loop3: detected capacity change from 0 to 256 [ 150.265939][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 150.517019][ T6570] loop5: detected capacity change from 0 to 512 [ 150.524816][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.531255][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.531809][ T6570] EXT4-fs (loop5): 1 truncate cleaned up [ 150.533918][ T6570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.976522][ T6590] loop3: detected capacity change from 0 to 256 [ 152.372281][ T5480] EXT4-fs (loop5): unmounting filesystem. [ 152.423586][ T6597] device syzkaller0 entered promiscuous mode [ 152.534514][ T6600] device syzkaller0 entered promiscuous mode [ 153.691727][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 153.693293][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 154.674486][ T6630] device syzkaller0 entered promiscuous mode [ 155.404797][ T6640] loop2: detected capacity change from 0 to 32768 [ 155.998963][ T6638] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 156.000151][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.001494][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 156.003196][ T6639] vhci_hcd: connection closed [ 156.007966][ T4489] vhci_hcd: stop threads [ 156.009691][ T4489] vhci_hcd: release socket [ 156.010529][ T4489] vhci_hcd: disconnect device [ 156.078047][ T6650] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.079832][ T6650] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.081475][ T6650] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.082888][ T6650] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.093799][ T6650] device vxlan0 entered promiscuous mode [ 156.095185][ T6650] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 156.108367][ T6654] bridge0: port 3(vlan2) entered blocking state [ 156.109826][ T6654] bridge0: port 3(vlan2) entered disabled state [ 156.120178][ T6654] device vlan2 entered promiscuous mode [ 156.122232][ T6654] bridge0: mtu less than device minimum [ 156.131112][ T6656] device syzkaller0 entered promiscuous mode [ 157.688816][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 157.703647][ T6680] device syzkaller0 entered promiscuous mode [ 157.807514][ T6679] bridge3: port 1(erspan0) entered blocking state [ 157.808768][ T6679] bridge3: port 1(erspan0) entered disabled state [ 157.810406][ T6679] device erspan0 entered promiscuous mode [ 157.813952][ T6679] bridge3: port 1(erspan0) entered blocking state [ 157.815096][ T6679] bridge3: port 1(erspan0) entered forwarding state [ 158.225237][ T6679] device erspan0 left promiscuous mode [ 158.227367][ T6679] bridge3: port 1(erspan0) entered disabled state [ 158.264990][ T6679] device syz_tun left promiscuous mode [ 158.267447][ T6679] bridge0: port 1(syz_tun) entered disabled state [ 158.336912][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.339415][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.340896][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.349733][ T6697] netlink: 'syz.5.519': attribute type 10 has an invalid length. [ 158.351120][ T6697] device bridge0 left promiscuous mode [ 158.361342][ T6697] device bridge0 entered promiscuous mode [ 158.362539][ T6697] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 158.382669][ T6700] loop2: detected capacity change from 0 to 512 [ 158.386741][ T6698] loop1: detected capacity change from 0 to 16 [ 158.392716][ T6698] erofs: (device loop1): mounted with root inode @ nid 36. [ 158.402374][ T6700] EXT2-fs (loop2): (no)acl options not supported [ 158.407296][ T6700] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 158.941052][ T6706] loop5: detected capacity change from 0 to 32768 [ 159.175804][ T6704] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 159.177008][ T6704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.178565][ T6704] vhci_hcd vhci_hcd.0: Device attached [ 159.367381][ T6705] vhci_hcd: connection closed [ 159.373870][ T4490] vhci_hcd: stop threads [ 159.375507][ T4490] vhci_hcd: release socket [ 159.376483][ T4490] vhci_hcd: disconnect device [ 159.440879][ T4832] vhci_hcd: vhci_device speed not set [ 159.614949][ T6709] tipc: Started in network mode [ 159.615915][ T6709] tipc: Node identity 661de0e5e1dd, cluster identity 4711 [ 159.617464][ T6709] tipc: Enabled bearer , priority 0 [ 159.618984][ T6709] device syzkaller0 entered promiscuous mode [ 159.970281][ T6716] futex_wake_op: syz.4.527 tries to shift op by 144; fix this program [ 160.062575][ T6713] tipc: Resetting bearer [ 160.074166][ T6708] tipc: Resetting bearer [ 160.289210][ T6726] __vm_enough_memory: pid: 6726, comm: syz.1.529, no enough memory for the allocation [ 160.331527][ T6708] tipc: Disabling bearer [ 160.703396][ T6735] device syzkaller0 entered promiscuous mode [ 163.241841][ T6786] mmap: syz.3.546 (6786) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.307673][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.545'. [ 163.329960][ T6785] device ip_vti0 left promiscuous mode [ 163.337450][ T6785] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 163.339876][ T6785] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 163.348979][ T6785] bond1 (unregistering): Released all slaves [ 163.482276][ T6789] loop4: detected capacity change from 0 to 2048 [ 163.503440][ T6789] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 163.532924][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.167510][ T6795] bridge0: port 4(wlan1) entered blocking state [ 164.169856][ T6795] bridge0: port 4(wlan1) entered disabled state [ 164.177890][ T6795] bridge0: mtu less than device minimum [ 165.992546][ T6818] loop2: detected capacity change from 0 to 512 [ 166.035100][ T6818] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 166.037566][ T6818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.055933][ T6818] EXT4-fs (loop2): 1 truncate cleaned up [ 166.056984][ T6818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.788874][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 167.797795][ T6795] bridge0: port 4(wlan1) entered disabled state [ 168.093320][ T6795] bridge0: mtu less than device minimum [ 168.100507][ T6830] tipc: Enabled bearer , priority 0 [ 168.114819][ T6846] device syzkaller0 entered promiscuous mode [ 168.117530][ T6831] device syzkaller0 entered promiscuous mode [ 168.124366][ T6816] tipc: Resetting bearer [ 168.127508][ T6814] tipc: Resetting bearer [ 168.161840][ T6814] tipc: Disabling bearer [ 168.180780][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 168.267771][ T6851] loop3: detected capacity change from 0 to 512 [ 168.276460][ T6851] EXT4-fs: Ignoring removed oldalloc option [ 168.295004][ T6851] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 168.308346][ T6851] EXT4-fs (loop3): 1 truncate cleaned up [ 168.309703][ T6851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.484229][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 168.490322][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 168.492480][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 168.494461][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 168.496538][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 168.498394][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 168.500342][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 168.502409][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 168.504503][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 168.506884][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 168.508766][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 168.510719][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 168.512732][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 168.516703][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 168.518616][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 168.520489][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 168.522587][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 168.745571][ T6860] loop4: detected capacity change from 0 to 128 [ 168.788018][ T6860] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.896765][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.565'. [ 168.920610][ T6860] overlayfs: failed to resolve './file0': -2 [ 169.000266][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 169.149671][ T4528] EXT4-fs (loop3): unmounting filesystem. [ 169.389453][ T6869] loop4: detected capacity change from 0 to 131072 [ 169.451230][ T6869] F2FS-fs (loop4): Test dummy encryption mode enabled [ 169.454038][ T6869] F2FS-fs (loop4): invalid crc value [ 169.610726][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 169.693407][ T6869] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.708186][ T6886] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 169.714351][ T6869] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.814352][ T6886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.816764][ T6886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.818751][ T6886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.823630][ T6886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.827649][ T6886] bond1: (slave geneve2): making interface the new active one [ 170.118915][ T6886] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 170.191761][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 170.194050][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.755960][ T6938] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 171.768010][ T6938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.134783][ T6938] bond4: (slave gretap2): making interface the new active one [ 172.419566][ T6938] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 172.427856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 172.641871][ T6955] binder: 6954:6955 tried to acquire reference to desc 0, got 1 instead [ 172.644347][ T6955] binder: 6954:6955 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 172.646577][ T6955] binder: 6955 RLIMIT_NICE not set [ 172.647478][ T6955] binder: 6955 RLIMIT_NICE not set [ 172.651025][ T6955] binder: release 6954:6955 transaction 31 out, still active [ 172.652535][ T6955] binder: release 6954:6955 transaction 24 in, still active [ 172.653847][ T6955] binder: undelivered TRANSACTION_COMPLETE [ 172.941475][ T6955] binder: 6954:6955 got reply transaction with bad transaction stack, transaction 24 has target 0:0 [ 172.943345][ T6955] binder: 6954:6955 transaction reply to 0:0 failed 32/29201/-71, size 0-0 line 2978 [ 172.971639][ T4832] binder: release 6954:6955 transaction 24 out, still active [ 172.973149][ T4832] binder: undelivered TRANSACTION_COMPLETE [ 172.974197][ T4832] binder: send failed reply for transaction 31, target dead [ 172.975430][ T4832] binder: send failed reply for transaction 24, target dead [ 172.976657][ T4832] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.491909][ T6966] loop3: detected capacity change from 0 to 8192 [ 173.499219][ T6970] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 173.502551][ T6970] tipc: Enabled bearer , priority 10 [ 173.941542][ T6966] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.946107][ T6966] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 174.060785][ T6966] REISERFS (device loop3): using ordered data mode [ 174.136217][ T6966] reiserfs: using flush barriers [ 174.152430][ T6966] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.155614][ T6966] REISERFS (device loop3): checking transaction log (loop3) [ 174.161121][ T6966] REISERFS (device loop3): Using r5 hash to sort names [ 174.163468][ T6966] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 174.598979][ T4832] tipc: Node number set to 1261094424 [ 175.091123][ T7009] loop3: detected capacity change from 0 to 512 [ 175.105706][ T7009] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.133586][ T7009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.802288][ T7023] loop4: detected capacity change from 0 to 128 [ 177.056423][ T4528] EXT4-fs (loop3): unmounting filesystem. [ 177.749196][ T7045] binder: 7044:7045 tried to acquire reference to desc 0, got 1 instead [ 177.753217][ T7045] binder: 7044:7045 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 177.755856][ T7045] binder: 7045 RLIMIT_NICE not set [ 177.756723][ T7045] binder: 7045 RLIMIT_NICE not set [ 177.758027][ T7045] binder: release 7044:7045 transaction 44 out, still active [ 177.759468][ T7045] binder: release 7044:7045 transaction 37 in, still active [ 177.761267][ T7045] binder: undelivered TRANSACTION_COMPLETE [ 177.762627][ T7045] binder: 7045 RLIMIT_NICE not set [ 177.763737][ T7045] binder: 7045 RLIMIT_NICE not set [ 177.764687][ T7045] binder: 7045:7044 reply target not found [ 177.765810][ T7045] binder: 7044:7045 transaction reply to 0:0 failed 45/29189/0, size 0-0 line 2992 [ 177.767599][ T7045] binder: send failed reply for transaction 44, target dead [ 177.768941][ T7045] binder: send failed reply for transaction 37 to 7044:7045 [ 177.777484][ T4832] binder: undelivered TRANSACTION_ERROR: 29190 [ 177.778571][ T4832] binder: undelivered TRANSACTION_ERROR: 29189 [ 178.079553][ T7057] device syzkaller0 entered promiscuous mode [ 178.082560][ T7057] 0: reclassify loop, rule prio 0, protocol 800 [ 178.899957][ T7063] xt_CT: No such helper "netbios-ns" [ 178.948922][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 178.953949][ T7073] loop5: detected capacity change from 0 to 164 [ 178.955632][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 179.237334][ T7083] netlink: 53 bytes leftover after parsing attributes in process `syz.5.624'. [ 179.239801][ T7083] ================================================================== [ 179.241374][ T7083] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x210/0x214 [ 179.243162][ T7083] Read of size 2 at addr ffff0000ef98edfb by task syz.5.624/7083 [ 179.244869][ T7083] [ 179.245372][ T7083] CPU: 1 PID: 7083 Comm: syz.5.624 Not tainted syzkaller #0 [ 179.246912][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 179.248813][ T7083] Call trace: [ 179.249429][ T7083] dump_backtrace+0x1c4/0x1f0 [ 179.250321][ T7083] show_stack+0x2c/0x3c [ 179.251107][ T7083] __dump_stack+0x30/0x40 [ 179.251932][ T7083] dump_stack_lvl+0xf4/0x15c [ 179.252800][ T7083] print_address_description+0x88/0x218 [ 179.254010][ T7083] print_report+0x50/0x68 [ 179.254955][ T7083] kasan_report+0xa8/0xfc [ 179.255857][ T7083] __asan_report_load2_noabort+0x2c/0x38 [ 179.257010][ T7083] ieee80211_monitor_select_queue+0x210/0x214 [ 179.258183][ T7083] netdev_core_pick_tx+0x130/0x320 [ 179.259178][ T7083] __dev_queue_xmit+0x730/0x3154 [ 179.260257][ T7083] dev_queue_xmit+0x24/0x34 [ 179.261117][ T7083] packet_sendmsg+0x2de8/0x3d64 [ 179.262032][ T7083] ____sys_sendmsg+0x588/0x90c [ 179.262957][ T7083] __sys_sendmsg+0x288/0x374 [ 179.263813][ T7083] __arm64_sys_sendmsg+0x80/0x94 [ 179.264766][ T7083] invoke_syscall+0x98/0x290 [ 179.265670][ T7083] el0_svc_common+0x13c/0x258 [ 179.266575][ T7083] do_el0_svc+0x5c/0x134 [ 179.267379][ T7083] el0_svc+0x58/0x128 [ 179.268168][ T7083] el0t_64_sync_handler+0x84/0xf0 [ 179.269121][ T7083] el0t_64_sync+0x18c/0x190 [ 179.269923][ T7083] [ 179.270353][ T7083] Allocated by task 7062: [ 179.271111][ T7083] kasan_set_track+0x4c/0x80 [ 179.272050][ T7083] kasan_save_alloc_info+0x24/0x30 [ 179.273058][ T7083] __kasan_kmalloc+0xa0/0xb8 [ 179.273993][ T7083] __kmalloc_node+0xdc/0x184 [ 179.274917][ T7083] kvmalloc_node+0x88/0x1d4 [ 179.275751][ T7083] bpf_check+0x178/0xdfc0 [ 179.276540][ T7083] bpf_prog_load+0xe2c/0x12c0 [ 179.277402][ T7083] __sys_bpf+0x494/0x660 [ 179.278186][ T7083] __arm64_sys_bpf+0x80/0x98 [ 179.279078][ T7083] invoke_syscall+0x98/0x290 [ 179.279919][ T7083] el0_svc_common+0x13c/0x258 [ 179.280802][ T7083] do_el0_svc+0x5c/0x134 [ 179.281619][ T7083] el0_svc+0x58/0x128 [ 179.282345][ T7083] el0t_64_sync_handler+0x84/0xf0 [ 179.283261][ T7083] el0t_64_sync+0x18c/0x190 [ 179.284084][ T7083] [ 179.284531][ T7083] Freed by task 7062: [ 179.285265][ T7083] kasan_set_track+0x4c/0x80 [ 179.286090][ T7083] kasan_save_free_info+0x38/0x5c [ 179.286981][ T7083] ____kasan_slab_free+0x148/0x1b0 [ 179.287895][ T7083] __kasan_slab_free+0x18/0x28 [ 179.288784][ T7083] slab_free_freelist_hook+0x16c/0x1e8 [ 179.289750][ T7083] __kmem_cache_free+0xbc/0x21c [ 179.290601][ T7083] kfree+0xd0/0x1a8 [ 179.291311][ T7083] kvfree+0x40/0x50 [ 179.292026][ T7083] bpf_check+0x8bec/0xdfc0 [ 179.292843][ T7083] bpf_prog_load+0xe2c/0x12c0 [ 179.293680][ T7083] __sys_bpf+0x494/0x660 [ 179.294462][ T7083] __arm64_sys_bpf+0x80/0x98 [ 179.295332][ T7083] invoke_syscall+0x98/0x290 [ 179.296162][ T7083] el0_svc_common+0x13c/0x258 [ 179.297032][ T7083] do_el0_svc+0x5c/0x134 [ 179.297814][ T7083] el0_svc+0x58/0x128 [ 179.298505][ T7083] el0t_64_sync_handler+0x84/0xf0 [ 179.299406][ T7083] el0t_64_sync+0x18c/0x190 [ 179.300201][ T7083] [ 179.300619][ T7083] The buggy address belongs to the object at ffff0000ef98c000 [ 179.300619][ T7083] which belongs to the cache kmalloc-8k of size 8192 [ 179.303225][ T7083] The buggy address is located 3579 bytes to the right of [ 179.303225][ T7083] 8192-byte region [ffff0000ef98c000, ffff0000ef98e000) [ 179.305709][ T7083] [ 179.306131][ T7083] The buggy address belongs to the physical page: [ 179.307257][ T7083] page:00000000cc0b9ef1 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f988 [ 179.309064][ T7083] head:00000000cc0b9ef1 order:3 compound_mapcount:0 compound_pincount:0 [ 179.310646][ T7083] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 179.312172][ T7083] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002c00 [ 179.313804][ T7083] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 179.315357][ T7083] page dumped because: kasan: bad access detected [ 179.316515][ T7083] [ 179.316939][ T7083] Memory state around the buggy address: [ 179.317961][ T7083] ffff0000ef98ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.319418][ T7083] ffff0000ef98ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.320911][ T7083] >ffff0000ef98ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.322447][ T7083] ^ [ 179.323931][ T7083] ffff0000ef98ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.325416][ T7083] ffff0000ef98ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.326910][ T7083] ================================================================== [ 179.328480][ T7083] Disabling lock debugging due to kernel taint [ 187.371055][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372207][ T2065] ieee802154 phy1 wpan1: encryption failed: -22