last executing test programs: 1.409360951s ago: executing program 0 (id=347): r0 = io_uring_setup(0x4631, &(0x7f00000003c0)={0x0, 0x2eb74, 0x80, 0x2, 0xb}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) listen(r1, 0x4) close_range(r0, r1, 0x0) 1.383627739s ago: executing program 0 (id=350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="28010000170001000000000000000000640101020000000000000000000000000000000000000000fe80000000000000000000000000003dfc020000000000000000000000000000000000000000000000000000000000010000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000020010000000000000000000000000000000000000201000302"], 0x128}}, 0x2000c800) 1.321804476s ago: executing program 0 (id=353): r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000100)=0x22) 1.280116714s ago: executing program 0 (id=355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x20000000000}, 0x18) r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r2 = dup(r1) preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) 1.22221005s ago: executing program 0 (id=358): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000003280)="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", 0xd82}, {&(0x7f0000000280)="9d", 0x1}, {&(0x7f0000004280)="ba0d", 0x2}], 0x3}}], 0x1, 0x4000800) 1.22175775s ago: executing program 0 (id=359): getpriority(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xe2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r6 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=r6, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r3, 0x311, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x82) syz_usbip_server_init(0x3) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 832.423607ms ago: executing program 1 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 766.214853ms ago: executing program 1 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100000cffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 724.0353ms ago: executing program 1 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 673.917682ms ago: executing program 1 (id=372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c14", @ANYRES64=r1], 0x24}}, 0x4000000) 673.624233ms ago: executing program 2 (id=373): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44810}, 0x4) request_key(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) unshare(0x62040200) 650.312134ms ago: executing program 1 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 554.22035ms ago: executing program 1 (id=376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet(0x2, 0x2, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@initdev, @multicast1}, &(0x7f0000000080)=0xc) io_setup(0x7d, &(0x7f0000000600)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000001200)=[{}, {}, {}], &(0x7f0000000640)={0x0, 0x989680}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 338.164609ms ago: executing program 2 (id=384): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="93b553c33a16dbc796db49f39f253e7c9ab745c10ea0", 0x16}], 0x1, &(0x7f00000003c0)="23755818ef2d04251abbf5be10be3ce683214524f4", 0x15, 0x20000000}, 0x24010011) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0xfffffffffffffdf2) timer_create(0x6, &(0x7f0000000340)={0x0, 0x9, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000004c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000540)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 270.080796ms ago: executing program 4 (id=385): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008100)={0x0, &(0x7f0000008580)=""/122, 0x0, 0x7a, 0x0, 0x3}, 0x28) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) fchmod(0xffffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='xen_cpu_write_ldt_entry\x00', r3, 0x0, 0x2a}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030f0000000d000000000800ae631500010002"], 0x2c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x1}) 265.104573ms ago: executing program 2 (id=387): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000640)="701b353058ff3d", 0x7}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 192.200919ms ago: executing program 2 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setuid(0xee01) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 191.799008ms ago: executing program 4 (id=390): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 191.340243ms ago: executing program 2 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x8) 133.975091ms ago: executing program 3 (id=394): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb17cfe4acd3a98e3e2b000000004ef2b8e4fff8a3be978b94b8a6c2f345d98ef5e8df0695620b81a51badebba", 0x2d}, {&(0x7f00000009c0)="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", 0x580}], 0x2}}], 0x1, 0x40) 133.718947ms ago: executing program 2 (id=395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 133.609492ms ago: executing program 3 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 133.510558ms ago: executing program 3 (id=397): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x57, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0x15000000000000, 0x4, 0x1ff, 0x8002, 0x4, 0x0, 0xd3d}, {0xfffffffffffffffe, 0x7ff, 0x0, 0xfffffffffffffffc}, 0x7fffffff, 0x6e6bb1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x1, 0x0, 0x0, 0x0, 0x2c19}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 130.643003ms ago: executing program 4 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) 107.441916ms ago: executing program 3 (id=399): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 45.017084ms ago: executing program 4 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) 44.503518ms ago: executing program 4 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 44.114565ms ago: executing program 3 (id=402): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,uid=', @ANYRESHEX=0x0, @ANYBLOB="090000003decd0635304f2ccfb02e0eefbbdc76551c06b55a378d8bc30b99a", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,nodots,nodots,nodots,dots,nodots,nodots,nodots,nodots,nodots,nfs,nodots,nodots,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") 30.740162ms ago: executing program 4 (id=403): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'tunl0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000100001000000000000f6f1000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a300000"], 0xc0}}, 0x20050800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x40) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 3 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 31.930950][ T6537] cgroup: Unknown subsys name 'net' [ 32.031107][ T6537] cgroup: Unknown subsys name 'cpuset' [ 32.032917][ T6537] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.189577][ T6537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.391334][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.393186][ T6561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.395206][ T6562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.397305][ T6562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.397921][ T6559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.398392][ T6559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.399074][ T6559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.399961][ T6559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.400870][ T6559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.401149][ T6559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.402183][ T6559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.402339][ T6559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.402456][ T6559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.403060][ T6562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.403250][ T6562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.403443][ T6562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.404511][ T6562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.404700][ T6562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.404927][ T6562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.405142][ T6562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.405943][ T6562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.406571][ T6562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.407959][ T6562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.408450][ T6562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.411219][ T6551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.533566][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 34.611386][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 34.627004][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.627245][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.627312][ T6558] bridge_slave_0: entered allmulticast mode [ 34.627805][ T6558] bridge_slave_0: entered promiscuous mode [ 34.634376][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 34.641829][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.643113][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.644561][ T6558] bridge_slave_1: entered allmulticast mode [ 34.646128][ T6558] bridge_slave_1: entered promiscuous mode [ 34.654552][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 34.668589][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.681404][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 34.691055][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.701123][ T6558] team0: Port device team_slave_0 added [ 34.702437][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.702520][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.702588][ T6548] bridge_slave_0: entered allmulticast mode [ 34.703019][ T6548] bridge_slave_0: entered promiscuous mode [ 34.703778][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.703796][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.703840][ T6548] bridge_slave_1: entered allmulticast mode [ 34.704279][ T6548] bridge_slave_1: entered promiscuous mode [ 34.712490][ T6558] team0: Port device team_slave_1 added [ 34.744522][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.744559][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.744626][ T6554] bridge_slave_0: entered allmulticast mode [ 34.745082][ T6554] bridge_slave_0: entered promiscuous mode [ 34.751626][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.756741][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.757996][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.759772][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.760663][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.760671][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.760680][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.762785][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.762863][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.762930][ T6554] bridge_slave_1: entered allmulticast mode [ 34.763345][ T6554] bridge_slave_1: entered promiscuous mode [ 34.775864][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.793581][ T6548] team0: Port device team_slave_0 added [ 34.794684][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.795928][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.797145][ T6553] bridge_slave_0: entered allmulticast mode [ 34.798590][ T6553] bridge_slave_0: entered promiscuous mode [ 34.800704][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.801906][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.803200][ T6553] bridge_slave_1: entered allmulticast mode [ 34.804626][ T6553] bridge_slave_1: entered promiscuous mode [ 34.806860][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.807752][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.815168][ T6548] team0: Port device team_slave_1 added [ 34.831425][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.832694][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.834118][ T6547] bridge_slave_0: entered allmulticast mode [ 34.835705][ T6547] bridge_slave_0: entered promiscuous mode [ 34.837520][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.838739][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.839850][ T6547] bridge_slave_1: entered allmulticast mode [ 34.840309][ T6547] bridge_slave_1: entered promiscuous mode [ 34.841307][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.841315][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.841326][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.841935][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.841944][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.841956][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.855137][ T6558] hsr_slave_0: entered promiscuous mode [ 34.855477][ T6558] hsr_slave_1: entered promiscuous mode [ 34.860638][ T6554] team0: Port device team_slave_0 added [ 34.861546][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.862004][ T6554] team0: Port device team_slave_1 added [ 34.876959][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.883754][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.883772][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.883784][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.884267][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.884273][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.884284][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.898651][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.911405][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.913568][ T6553] team0: Port device team_slave_0 added [ 34.914326][ T6553] team0: Port device team_slave_1 added [ 34.925083][ T6548] hsr_slave_0: entered promiscuous mode [ 34.925421][ T6548] hsr_slave_1: entered promiscuous mode [ 34.925629][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 34.925671][ T6548] Cannot create hsr debugfs directory [ 34.939843][ T6554] hsr_slave_0: entered promiscuous mode [ 34.941179][ T6554] hsr_slave_1: entered promiscuous mode [ 34.942340][ T6554] debugfs: 'hsr0' already exists in 'hsr' [ 34.943317][ T6554] Cannot create hsr debugfs directory [ 34.949933][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.951103][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.955403][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.960157][ T6547] team0: Port device team_slave_0 added [ 34.963114][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.964257][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.968541][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.979198][ T6547] team0: Port device team_slave_1 added [ 34.992194][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.992215][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.992229][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.006308][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.006328][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.006343][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.027096][ T6553] hsr_slave_0: entered promiscuous mode [ 35.028511][ T6553] hsr_slave_1: entered promiscuous mode [ 35.029966][ T6553] debugfs: 'hsr0' already exists in 'hsr' [ 35.030955][ T6553] Cannot create hsr debugfs directory [ 35.065177][ T6547] hsr_slave_0: entered promiscuous mode [ 35.065514][ T6547] hsr_slave_1: entered promiscuous mode [ 35.065710][ T6547] debugfs: 'hsr0' already exists in 'hsr' [ 35.065720][ T6547] Cannot create hsr debugfs directory [ 35.136871][ T6558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.140312][ T6558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.145874][ T6558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.152407][ T6558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.166320][ T6548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.172266][ T6548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.175223][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.175271][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.175446][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.175480][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.182037][ T6548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.184559][ T6548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.198993][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.199028][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.199103][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.199131][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.218370][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.222947][ T6554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.225979][ T6554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.230625][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.231982][ T6554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.234979][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.237032][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.239454][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.242481][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.256505][ T6554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.266476][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.272522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.272570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.277950][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.286785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.286824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.291204][ T6553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.295250][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.295285][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.295995][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.296013][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.327200][ T6558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.327239][ T6558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.329015][ T6553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.338455][ T6553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.349663][ T6553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.362182][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.371604][ T6547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.373981][ T6547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.382766][ T6547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.392554][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.394418][ T6547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.402193][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.402238][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.413666][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.413707][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.423315][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.440875][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.450234][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.454362][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.490711][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.498636][ T6558] veth0_vlan: entered promiscuous mode [ 35.505016][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.508602][ T6548] veth0_vlan: entered promiscuous mode [ 35.512195][ T6548] veth1_vlan: entered promiscuous mode [ 35.517398][ T6548] veth0_macvtap: entered promiscuous mode [ 35.518339][ T6548] veth1_macvtap: entered promiscuous mode [ 35.524630][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.533766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.533808][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.534285][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.534302][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.535805][ T6558] veth1_vlan: entered promiscuous mode [ 35.544721][ T6558] veth0_macvtap: entered promiscuous mode [ 35.546719][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.549180][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.561255][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.563579][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.563621][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.564071][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.564091][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.575117][ T6558] veth1_macvtap: entered promiscuous mode [ 35.576491][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.576684][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.576700][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.576714][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.602574][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.604475][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.608590][ T6554] veth0_vlan: entered promiscuous mode [ 35.611830][ T6547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.613566][ T6547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.623892][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.628405][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.642730][ T6554] veth1_vlan: entered promiscuous mode [ 35.645662][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.645707][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.645725][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.645736][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.674462][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.674502][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.694385][ T6554] veth0_macvtap: entered promiscuous mode [ 35.704648][ T6554] veth1_macvtap: entered promiscuous mode [ 35.716682][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.716709][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.720611][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.723062][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.726930][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.728315][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.728344][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.728394][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.728420][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.728433][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.733538][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.752530][ T6553] veth0_vlan: entered promiscuous mode [ 35.761131][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.761160][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.765291][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.769559][ T6553] veth1_vlan: entered promiscuous mode [ 35.795839][ T6548] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.798996][ T6553] veth0_macvtap: entered promiscuous mode [ 35.804114][ T6553] veth1_macvtap: entered promiscuous mode [ 35.808679][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.811760][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.826381][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.826411][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.827637][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.827717][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.827869][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.828041][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.853898][ T360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.853928][ T360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.881143][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.881166][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.933387][ T6669] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.955919][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.955948][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.967901][ T6547] veth0_vlan: entered promiscuous mode [ 35.975262][ T6547] veth1_vlan: entered promiscuous mode [ 35.987249][ T6547] veth0_macvtap: entered promiscuous mode [ 35.989970][ T6547] veth1_macvtap: entered promiscuous mode [ 35.994776][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.998252][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.002590][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.002675][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.002726][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.002770][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.050561][ T31] audit: type=1326 audit(36.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.054031][ T31] audit: type=1326 audit(36.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.057332][ T31] audit: type=1326 audit(36.030:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.060985][ T31] audit: type=1326 audit(36.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.064678][ T31] audit: type=1326 audit(36.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.067901][ T31] audit: type=1326 audit(36.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.071488][ T31] audit: type=1326 audit(36.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.074782][ T31] audit: type=1326 audit(36.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.077865][ T31] audit: type=1326 audit(36.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.081152][ T31] audit: type=1326 audit(36.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 36.088740][ T6679] pimreg: entered allmulticast mode [ 36.103814][ T6679] pimreg: left allmulticast mode [ 36.111904][ T6682] loop1: detected capacity change from 0 to 1024 [ 36.115101][ T6682] ======================================================= [ 36.115101][ T6682] WARNING: The mand mount option has been deprecated and [ 36.115101][ T6682] and is ignored by this kernel. Remove the mand [ 36.115101][ T6682] option from the mount to silence this warning. [ 36.115101][ T6682] ======================================================= [ 36.118936][ T6683] loop2: detected capacity change from 0 to 128 [ 36.123111][ T6682] EXT4-fs: Ignoring removed bh option [ 36.126315][ T6682] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1125899906842628)! [ 36.128693][ T6682] EXT4-fs (loop1): group descriptors corrupted! [ 36.145105][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.145135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.148696][ T6683] syz.2.3: attempt to access beyond end of device [ 36.148696][ T6683] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 36.161869][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.161899][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.251380][ T6689] syz.2.3: attempt to access beyond end of device [ 36.251380][ T6689] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 36.259909][ T6689] syz.2.3: attempt to access beyond end of device [ 36.259909][ T6689] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 36.259987][ T6689] syz.2.3: attempt to access beyond end of device [ 36.259987][ T6689] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 36.260037][ T6689] syz.2.3: attempt to access beyond end of device [ 36.260037][ T6689] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 36.260080][ T6689] syz.2.3: attempt to access beyond end of device [ 36.260080][ T6689] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 36.260123][ T6689] syz.2.3: attempt to access beyond end of device [ 36.260123][ T6689] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 36.260162][ T6689] syz.2.3: attempt to access beyond end of device [ 36.260162][ T6689] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 36.260200][ T6689] syz.2.3: attempt to access beyond end of device [ 36.260200][ T6689] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 36.260705][ T6689] syz.2.3: attempt to access beyond end of device [ 36.260705][ T6689] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 36.298455][ T6680] Buffer I/O error on dev loop2, logical block 161, async page read [ 36.298520][ T6680] Buffer I/O error on dev loop2, logical block 162, async page read [ 36.298563][ T6680] Buffer I/O error on dev loop2, logical block 163, async page read [ 36.298591][ T6680] Buffer I/O error on dev loop2, logical block 164, async page read [ 36.298619][ T6680] Buffer I/O error on dev loop2, logical block 165, async page read [ 36.298642][ T6680] Buffer I/O error on dev loop2, logical block 166, async page read [ 36.298666][ T6680] Buffer I/O error on dev loop2, logical block 167, async page read [ 36.298689][ T6680] Buffer I/O error on dev loop2, logical block 168, async page read [ 36.298797][ T6680] Buffer I/O error on dev loop2, logical block 161, async page read [ 36.298824][ T6680] Buffer I/O error on dev loop2, logical block 162, async page read [ 36.363422][ T6703] atomic_op 0000000097777807 conn xmit_atomic 0000000000000000 [ 36.490632][ T6563] Bluetooth: hci1: command tx timeout [ 36.490754][ T6563] Bluetooth: hci0: command tx timeout [ 36.490818][ T6563] Bluetooth: hci2: command tx timeout [ 36.490869][ T6563] Bluetooth: hci3: command tx timeout [ 36.490920][ T6563] Bluetooth: hci4: command tx timeout [ 36.532169][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 36.543655][ T6723] loop0: detected capacity change from 0 to 128 [ 36.567996][ T6723] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.595511][ T6548] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.696620][ T6737] loop0: detected capacity change from 0 to 128 [ 36.765724][ T6741] loop4: detected capacity change from 0 to 1024 [ 36.768934][ T6741] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.769316][ T6741] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.773561][ T6741] JBD2: no valid journal superblock found [ 36.774767][ T6741] EXT4-fs (loop4): Could not load journal inode [ 36.903221][ T6751] loop4: detected capacity change from 0 to 512 [ 36.905701][ T6751] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.907655][ T6751] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 37.660156][ T6763] process 'syz.2.41' launched '/dev/fd/4' with NULL argv: empty string added [ 37.760935][ T6769] loop4: detected capacity change from 0 to 512 [ 37.763549][ T6769] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.770738][ T6769] EXT4-fs (loop4): invalid journal inode [ 37.770904][ T6769] EXT4-fs (loop4): can't get journal size [ 37.781231][ T6769] EXT4-fs (loop4): 1 truncate cleaned up [ 37.784867][ T6769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.787851][ T6774] loop2: detected capacity change from 0 to 512 [ 37.793047][ T6774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.798337][ T6774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 37.801048][ T6774] System zones: 1-12 [ 37.804527][ T6774] EXT4-fs (loop2): 1 truncate cleaned up [ 37.805944][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.815452][ T6776] netlink: 536 bytes leftover after parsing attributes in process `syz.0.47'. [ 37.817398][ T6776] netlink: 104 bytes leftover after parsing attributes in process `syz.0.47'. [ 37.838319][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 37.845850][ T6547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.888400][ T6781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.905886][ T6783] loop0: detected capacity change from 0 to 2048 [ 37.931531][ T6539] loop0: p1 < > p4 [ 37.932831][ T6539] loop0: p4 size 8388608 extends beyond EOD, truncated [ 37.937616][ T6783] loop0: p1 < > p4 [ 37.938678][ T6783] loop0: p4 size 8388608 extends beyond EOD, truncated [ 37.961002][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 37.961281][ T6539] udevd[6539]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.977502][ T6539] udevd[6539]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.981077][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 37.984949][ T6787] loop0: detected capacity change from 0 to 1024 [ 37.985535][ T6787] EXT4-fs: inline encryption not supported [ 37.985549][ T6787] EXT4-fs: Ignoring removed orlov option [ 37.988972][ T6787] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 38.006067][ T6787] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 38.006116][ T6787] System zones: 0-1, 3-12 [ 38.006711][ T6787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.030392][ T6548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.067199][ T6793] mmap: syz.0.54 (6793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.146562][ T6797] loop0: detected capacity change from 0 to 4096 [ 38.148385][ T6797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.160672][ T6797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.201538][ T6548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.365632][ T6813] Zero length message leads to an empty skb [ 38.445274][ T6821] netlink: 3 bytes leftover after parsing attributes in process `syz.1.64'. [ 38.445411][ T6821] 0ªX¹¦À: renamed from caif0 [ 38.490631][ T6821] 0ªX¹¦À: entered allmulticast mode [ 38.490707][ T6821] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 38.579727][ T6563] Bluetooth: hci3: command tx timeout [ 38.579764][ T6563] Bluetooth: hci2: command tx timeout [ 38.579797][ T6563] Bluetooth: hci0: command tx timeout [ 38.579815][ T6563] Bluetooth: hci1: command tx timeout [ 38.580631][ T53] Bluetooth: hci4: command tx timeout [ 38.922824][ T6831] loop3: detected capacity change from 0 to 256 [ 38.925191][ T6831] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.955734][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 39.008868][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.74'. [ 39.019368][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 39.023155][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.045504][ T6842] loop3: detected capacity change from 0 to 512 [ 39.053650][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.065437][ T6842] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.75: corrupted xattr block 33: bad e_name length [ 39.066791][ T6842] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.75: corrupted xattr block 33: bad e_name length [ 39.067137][ T6842] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.75: corrupted xattr block 33: bad e_name length [ 39.068057][ T6842] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.75: corrupted inode contents [ 39.072594][ T6842] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.75: mark_inode_dirty error [ 39.073154][ T6842] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.75: corrupted inode contents [ 39.073258][ T6842] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.75: mark_inode_dirty error [ 39.073405][ T6842] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.75: Failed to acquire dquot type 1 [ 39.107867][ T6554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.163667][ T6846] loop3: detected capacity change from 0 to 4096 [ 39.165286][ T6846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.169390][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.202478][ T6846] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.215704][ T6554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.256676][ T2330] cfg80211: failed to load regulatory.db [ 39.294451][ T6853] pimreg: entered allmulticast mode [ 39.300540][ T6853] pimreg: left allmulticast mode [ 39.454850][ T6868] netlink: 'syz.1.86': attribute type 21 has an invalid length. [ 39.454903][ T6868] netlink: 'syz.1.86': attribute type 6 has an invalid length. [ 39.454912][ T6868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.86'. [ 39.483354][ T6870] loop1: detected capacity change from 0 to 1024 [ 39.488399][ T6870] EXT4-fs: Ignoring removed bh option [ 39.497247][ T6870] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 39.522671][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.525549][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.553494][ T6558] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.607815][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 39.835858][ T6903] loop3: detected capacity change from 0 to 1024 [ 39.845324][ T6903] EXT4-fs: Ignoring removed nobh option [ 39.846387][ T6903] EXT4-fs: Ignoring removed bh option [ 39.865181][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.891059][ T6554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.137614][ T6923] loop4: detected capacity change from 0 to 2048 [ 40.148587][ T6923] EXT4-fs (loop4): invalid first ino: 0 [ 40.515310][ T6937] ip6gre1: entered promiscuous mode [ 40.650789][ T53] Bluetooth: hci4: command tx timeout [ 40.659723][ T53] Bluetooth: hci1: command tx timeout [ 40.659762][ T53] Bluetooth: hci0: command tx timeout [ 40.659785][ T53] Bluetooth: hci2: command tx timeout [ 40.659805][ T53] Bluetooth: hci3: command tx timeout [ 40.757050][ T6950] loop0: detected capacity change from 0 to 128 [ 40.894781][ T6957] loop2: detected capacity change from 0 to 1024 [ 40.941633][ T6957] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.941674][ T6957] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.943263][ T6957] JBD2: no valid journal superblock found [ 40.943275][ T6957] EXT4-fs (loop2): Could not load journal inode [ 41.720010][ T6980] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.821120][ T6983] loop1: detected capacity change from 0 to 128 [ 41.965037][ T6991] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 41.981550][ T6993] netem: change failed [ 42.035991][ T31] kauditd_printk_skb: 480 callbacks suppressed [ 42.036026][ T31] audit: type=1326 audit(42.010:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.036046][ T31] audit: type=1326 audit(42.010:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.036059][ T31] audit: type=1326 audit(42.010:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.036071][ T31] audit: type=1326 audit(42.010:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.036083][ T31] audit: type=1326 audit(42.010:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.036094][ T31] audit: type=1326 audit(42.010:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=236 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.036106][ T31] audit: type=1326 audit(42.010:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="wg1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.340276][ T7019] IPv6: Can't replace route, no match found [ 42.365508][ T31] audit: type=1326 audit(42.340:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.365838][ T31] audit: type=1326 audit(42.340:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.366040][ T31] audit: type=1326 audit(42.340:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 42.523247][ T7034] loop2: detected capacity change from 0 to 512 [ 42.524289][ T7034] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 42.529250][ T7034] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.529592][ T7034] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.154: Block bitmap for bg 0 marked uninitialized [ 42.533802][ T7034] EXT4-fs (loop2): Remounting filesystem read-only [ 42.533935][ T7034] EXT4-fs (loop2): 1 orphan inode deleted [ 42.534374][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.568926][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.620096][ T7047] __nla_validate_parse: 5 callbacks suppressed [ 42.629751][ T7047] netlink: 372 bytes leftover after parsing attributes in process `syz.0.159'. [ 42.729979][ T6549] Bluetooth: hci3: command tx timeout [ 42.730025][ T6549] Bluetooth: hci2: command tx timeout [ 42.730043][ T6549] Bluetooth: hci0: command tx timeout [ 42.730059][ T6549] Bluetooth: hci1: command tx timeout [ 42.730074][ T6549] Bluetooth: hci4: command tx timeout [ 43.150559][ T7082] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 43.559562][ T7094] tipc: Enabling of bearer rejected, failed to enable media [ 43.755688][ T7115] lo speed is unknown, defaulting to 1000 [ 43.757211][ T7115] lo speed is unknown, defaulting to 1000 [ 43.759000][ T7115] lo speed is unknown, defaulting to 1000 [ 43.761781][ T7115] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.765092][ T7115] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.775230][ T7115] lo speed is unknown, defaulting to 1000 [ 43.777407][ T7115] lo speed is unknown, defaulting to 1000 [ 43.782561][ T7115] lo speed is unknown, defaulting to 1000 [ 43.785279][ T7115] lo speed is unknown, defaulting to 1000 [ 43.787069][ T7115] lo speed is unknown, defaulting to 1000 [ 44.101790][ T7117] loop2: detected capacity change from 0 to 512 [ 44.122822][ T7117] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.184: bad orphan inode 11862016 [ 44.128040][ T7117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.224579][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.299008][ T7137] syzkaller0: entered allmulticast mode [ 44.299260][ T7136] syzkaller0: left allmulticast mode [ 44.423754][ T7159] loop0: detected capacity change from 0 to 512 [ 44.430300][ T7159] EXT4-fs: Ignoring removed i_version option [ 44.430329][ T7159] EXT4-fs: Ignoring removed bh option [ 44.450350][ T7159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.457630][ T6548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.477891][ T7163] loop2: detected capacity change from 0 to 512 [ 44.511286][ T7163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 44.511411][ T7163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.525461][ T7163] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 44.539780][ T7163] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 44.542241][ T7163] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 44.545506][ T7163] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.202: couldn't read orphan inode 13 (err -117) [ 44.547882][ T7163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.592293][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.641675][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 44.643556][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.644805][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.659963][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.661421][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.904681][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 44.906274][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 44.906289][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906298][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906306][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906315][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906323][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906330][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906337][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.906343][ T6606] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 44.922464][ T6606] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.955218][ T7219] loop2: detected capacity change from 0 to 1024 [ 44.965914][ T7219] EXT4-fs: Ignoring removed orlov option [ 44.991973][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.015975][ T7215] fido_id[7215]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.031359][ T7217] loop3: detected capacity change from 0 to 512 [ 45.034487][ T7217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.048635][ T7217] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.050279][ T7217] EXT4-fs (loop3): 1 truncate cleaned up [ 45.050826][ T7217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.147652][ T6554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.158632][ T6553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.193767][ T7240] loop4: detected capacity change from 0 to 128 [ 45.210180][ T7240] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.228232][ T6555] Process accounting resumed [ 45.261335][ T7243] loop3: detected capacity change from 0 to 4096 [ 45.264732][ T7246] capability: warning: `syz.1.235' uses 32-bit capabilities (legacy support in use) [ 45.278235][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.322159][ T6554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.363167][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 45.384543][ T360] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.462630][ T7251] team0 (unregistering): Port device team_slave_0 removed [ 45.467174][ T7251] team0 (unregistering): Port device team_slave_1 removed [ 45.648178][ T7267] ptrace attach of "./syz-executor exec"[7268] was attempted by "./syz-executor exec"[7267] [ 46.130779][ T7304] capability: warning: `syz.0.259' uses deprecated v2 capabilities in a way that may be insecure [ 46.182561][ T7249] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 46.184294][ T7311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'. [ 46.261452][ T7312] infiniband syz!: set active [ 46.262633][ T7312] infiniband syz!: added team_slave_0 [ 46.272798][ T7312] RDS/IB: syz!: added [ 46.272931][ T7312] smc: adding ib device syz! with port count 1 [ 46.272976][ T7312] smc: ib device syz! port 1 has no pnetid [ 46.277249][ T26] hid-generic 0000:20000000:0000.0002: hidraw0: HID v200001.80 Device [sy] on syz0 [ 46.340414][ T7324] fido_id[7324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.370720][ T7329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.269'. [ 46.584996][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'. [ 46.684910][ T7375] 8021q: VLANs not supported on caif0 [ 46.698919][ T7378] loop1: detected capacity change from 0 to 128 [ 46.699332][ T7378] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.704975][ T7378] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.728195][ T2203] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.746384][ T7381] loop4: detected capacity change from 0 to 512 [ 46.756814][ T7381] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 46.793518][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.292'. [ 46.872555][ T7400] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 46.882020][ T7408] loop1: detected capacity change from 0 to 1024 [ 46.882367][ T7408] EXT4-fs: Ignoring removed orlov option [ 46.891353][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 46.908286][ T7408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.922449][ T7408] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.938218][ T7408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.965203][ T6558] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.994032][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.301'. [ 47.084132][ T31] kauditd_printk_skb: 208 callbacks suppressed [ 47.084171][ T31] audit: type=1326 audit(47.060:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 47.094732][ T31] audit: type=1326 audit(47.070:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 47.099120][ T31] audit: type=1326 audit(47.070:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 47.102687][ T31] audit: type=1326 audit(47.070:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 47.102713][ T31] audit: type=1326 audit(47.070:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 47.130290][ T31] audit: type=1326 audit(47.110:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7438 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 47.133971][ T31] audit: type=1326 audit(47.110:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7438 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 47.134015][ T31] audit: type=1326 audit(47.110:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7438 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 47.134033][ T31] audit: type=1326 audit(47.110:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7438 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 47.147131][ T31] audit: type=1326 audit(47.120:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7438 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8015b9e8 code=0x7ffc0000 [ 47.207907][ T7451] loop1: detected capacity change from 0 to 128 [ 47.212916][ T7445] lo speed is unknown, defaulting to 1000 [ 47.214955][ T7451] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.249132][ T6558] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.331038][ T7462] sctp: [Deprecated]: syz.3.320 (pid 7462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.331038][ T7462] Use struct sctp_sack_info instead [ 47.343971][ T7463] loop1: detected capacity change from 0 to 128 [ 47.345847][ T7463] EXT4-fs: Ignoring removed nobh option [ 47.356618][ T7463] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.398707][ T6558] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.588745][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'. [ 47.635558][ T7491] syzkaller1: entered promiscuous mode [ 47.635589][ T7491] syzkaller1: entered allmulticast mode [ 47.713501][ T7496] ip6gre1: entered promiscuous mode [ 47.713541][ T7496] ip6gre1: entered allmulticast mode [ 47.756150][ T7502] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 47.756249][ T7502] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 47.834537][ T7508] loop2: detected capacity change from 0 to 512 [ 47.854419][ T7508] EXT4-fs (loop2): too many log groups per flexible block group [ 47.854614][ T7508] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 47.854674][ T7508] EXT4-fs (loop2): mount failed [ 48.047246][ T7525] lo speed is unknown, defaulting to 1000 [ 48.162562][ T7548] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 48.162583][ T7548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.163093][ T7548] vhci_hcd vhci_hcd.0: Device attached [ 48.185530][ T7554] __nla_validate_parse: 1 callbacks suppressed [ 48.186837][ T7554] netlink: 96 bytes leftover after parsing attributes in process `syz.4.360'. [ 48.201896][ T7555] syz.2.357 uses obsolete (PF_INET,SOCK_PACKET) [ 48.556282][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 48.570874][ T6606] usb 2-1: new high-speed USB device number 2 using vhci_hcd [ 48.610958][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 48.676521][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 48.798065][ T7591] bond1 (unregistering): Released all slaves [ 48.843867][ T7585] lo speed is unknown, defaulting to 1000 [ 48.984438][ T7608] loop4: detected capacity change from 0 to 128 [ 49.048872][ T7612] tipc: Can't bind to reserved service type 0 [ 49.096170][ T7614] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 49.118173][ T7620] netlink: 5 bytes leftover after parsing attributes in process `syz.3.388'. [ 49.118261][ T7620] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 49.123484][ T7620] 0ªî{X¹¦: entered allmulticast mode [ 49.123691][ T7620] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 49.246814][ T7636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.317503][ T7636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.328451][ T7648] loop3: detected capacity change from 0 to 256 [ 49.331624][ T7648] msdos: Bad value for 'uid' [ 49.331646][ T7648] msdos: Bad value for 'uid' [ 49.362707][ T7650] loop4: detected capacity change from 0 to 512 [ 49.376922][ T7650] [ 49.377316][ T7650] ====================================================== [ 49.378395][ T7650] WARNING: possible circular locking dependency detected [ 49.379488][ T7650] syzkaller #0 Not tainted [ 49.380175][ T7650] ------------------------------------------------------ [ 49.381287][ T7650] syz.4.403/7650 is trying to acquire lock: [ 49.382213][ T7650] ffff0000fc830b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 49.383691][ T7650] [ 49.383691][ T7650] but task is already holding lock: [ 49.384824][ T7650] ffff0000f6630a58 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 49.386261][ T7650] [ 49.386261][ T7650] which lock already depends on the new lock. [ 49.386261][ T7650] [ 49.387843][ T7650] [ 49.387843][ T7650] the existing dependency chain (in reverse order) is: [ 49.389101][ T7650] [ 49.389101][ T7650] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 49.390200][ T7650] down_write+0x50/0xc0 [ 49.390922][ T7650] ext4_xattr_set_handle+0x11c/0x1260 [ 49.391803][ T7650] ext4_initxattrs+0xa4/0x11c [ 49.392513][ T7650] security_inode_init_security+0x6dc/0x7f4 [ 49.393452][ T7650] ext4_init_security+0x44/0x58 [ 49.394197][ T7650] __ext4_new_inode+0x27f4/0x3190 [ 49.395031][ T7650] ext4_create+0x1f8/0x3fc [ 49.395778][ T7650] path_openat+0x12d8/0x2c40 [ 49.396582][ T7650] do_filp_open+0x18c/0x36c [ 49.397306][ T7650] do_sys_openat2+0x11c/0x1b4 [ 49.398094][ T7650] __arm64_sys_openat+0x120/0x158 [ 49.398998][ T7650] invoke_syscall+0x98/0x254 [ 49.399821][ T7650] el0_svc_common+0xe8/0x23c [ 49.400561][ T7650] do_el0_svc+0x48/0x58 [ 49.401279][ T7650] el0_svc+0x5c/0x254 [ 49.401959][ T7650] el0t_64_sync_handler+0x84/0x12c [ 49.402845][ T7650] el0t_64_sync+0x198/0x19c [ 49.403623][ T7650] [ 49.403623][ T7650] -> #1 (jbd2_handle){++++}-{0:0}: [ 49.404714][ T7650] start_this_handle+0xe74/0x10dc [ 49.405526][ T7650] jbd2__journal_start+0x288/0x51c [ 49.406361][ T7650] __ext4_journal_start_sb+0x378/0x88c [ 49.407321][ T7650] ext4_do_writepages+0xb94/0x39b4 [ 49.408132][ T7650] ext4_writepages+0x178/0x2a0 [ 49.408911][ T7650] do_writepages+0x270/0x468 [ 49.409622][ T7650] file_write_and_wait_range+0x1d0/0x2c4 [ 49.410601][ T7650] ext4_sync_file+0x274/0xb44 [ 49.411365][ T7650] __arm64_sys_fsync+0x170/0x1d4 [ 49.412167][ T7650] invoke_syscall+0x98/0x254 [ 49.412919][ T7650] el0_svc_common+0xe8/0x23c [ 49.413667][ T7650] do_el0_svc+0x48/0x58 [ 49.414346][ T7650] el0_svc+0x5c/0x254 [ 49.414945][ T7650] el0t_64_sync_handler+0x84/0x12c [ 49.415739][ T7650] el0t_64_sync+0x198/0x19c [ 49.416520][ T7650] [ 49.416520][ T7650] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 49.417726][ T7650] __lock_acquire+0x1774/0x30a4 [ 49.418542][ T7650] lock_acquire+0x14c/0x2e0 [ 49.419313][ T7650] percpu_down_read_internal+0x5c/0x298 [ 49.420246][ T7650] ext4_writepages+0x150/0x2a0 [ 49.421005][ T7650] do_writepages+0x270/0x468 [ 49.421754][ T7650] __writeback_single_inode+0x15c/0x13e8 [ 49.422606][ T7650] writeback_single_inode+0x18c/0x54c [ 49.423467][ T7650] write_inode_now+0x13c/0x1a4 [ 49.424218][ T7650] iput+0x7d4/0xad4 [ 49.424894][ T7650] ext4_xattr_block_set+0x13dc/0x24bc [ 49.425755][ T7650] ext4_expand_extra_isize_ea+0xeb8/0x1830 [ 49.426673][ T7650] __ext4_expand_extra_isize+0x2a0/0x37c [ 49.427584][ T7650] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 49.428489][ T7650] ext4_evict_inode+0x930/0x1084 [ 49.429321][ T7650] evict+0x414/0x928 [ 49.429943][ T7650] iput+0x95c/0xad4 [ 49.430566][ T7650] ext4_process_orphan+0x240/0x2b4 [ 49.431457][ T7650] ext4_orphan_cleanup+0x930/0x107c [ 49.432330][ T7650] ext4_fill_super+0x4854/0x4fcc [ 49.433138][ T7650] get_tree_bdev_flags+0x360/0x414 [ 49.433934][ T7650] get_tree_bdev+0x2c/0x3c [ 49.434659][ T7650] ext4_get_tree+0x28/0x38 [ 49.435380][ T7650] vfs_get_tree+0x90/0x28c [ 49.436193][ T7650] do_new_mount+0x284/0x944 [ 49.436912][ T7650] path_mount+0x5b4/0xdfc [ 49.437601][ T7650] __arm64_sys_mount+0x3e8/0x468 [ 49.438421][ T7650] invoke_syscall+0x98/0x254 [ 49.439170][ T7650] el0_svc_common+0xe8/0x23c [ 49.439869][ T7650] do_el0_svc+0x48/0x58 [ 49.440513][ T7650] el0_svc+0x5c/0x254 [ 49.441178][ T7650] el0t_64_sync_handler+0x84/0x12c [ 49.442063][ T7650] el0t_64_sync+0x198/0x19c [ 49.442834][ T7650] [ 49.442834][ T7650] other info that might help us debug this: [ 49.442834][ T7650] [ 49.444333][ T7650] Chain exists of: [ 49.444333][ T7650] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 49.444333][ T7650] [ 49.446443][ T7650] Possible unsafe locking scenario: [ 49.446443][ T7650] [ 49.447553][ T7650] CPU0 CPU1 [ 49.448339][ T7650] ---- ---- [ 49.449097][ T7650] lock(&ei->xattr_sem); [ 49.449747][ T7650] lock(jbd2_handle); [ 49.450739][ T7650] lock(&ei->xattr_sem); [ 49.451762][ T7650] rlock(&sbi->s_writepages_rwsem); [ 49.452596][ T7650] [ 49.452596][ T7650] *** DEADLOCK *** [ 49.452596][ T7650] [ 49.453800][ T7650] 3 locks held by syz.4.403/7650: [ 49.454570][ T7650] #0: ffff0000c6f7e0e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x168/0x7d4 [ 49.456259][ T7650] #1: ffff0000c6f7e610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 49.457593][ T7650] #2: ffff0000f6630a58 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 49.459222][ T7650] [ 49.459222][ T7650] stack backtrace: [ 49.460064][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT [ 49.461344][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.462802][ T7650] Call trace: [ 49.463243][ T7650] show_stack+0x2c/0x3c (C) [ 49.463844][ T7650] __dump_stack+0x30/0x40 [ 49.464458][ T7650] dump_stack_lvl+0xd8/0x12c [ 49.465134][ T7650] dump_stack+0x1c/0x28 [ 49.465685][ T7650] print_circular_bug+0x324/0x32c [ 49.466458][ T7650] check_noncircular+0x154/0x174 [ 49.467207][ T7650] __lock_acquire+0x1774/0x30a4 [ 49.468058][ T7650] lock_acquire+0x14c/0x2e0 [ 49.468770][ T7650] percpu_down_read_internal+0x5c/0x298 [ 49.469681][ T7650] ext4_writepages+0x150/0x2a0 [ 49.470480][ T7650] do_writepages+0x270/0x468 [ 49.471184][ T7650] __writeback_single_inode+0x15c/0x13e8 [ 49.472074][ T7650] writeback_single_inode+0x18c/0x54c [ 49.472888][ T7650] write_inode_now+0x13c/0x1a4 [ 49.473697][ T7650] iput+0x7d4/0xad4 [ 49.474263][ T7650] ext4_xattr_block_set+0x13dc/0x24bc [ 49.475026][ T7650] ext4_expand_extra_isize_ea+0xeb8/0x1830 [ 49.475852][ T7650] __ext4_expand_extra_isize+0x2a0/0x37c [ 49.476737][ T7650] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 49.477607][ T7650] ext4_evict_inode+0x930/0x1084 [ 49.478367][ T7650] evict+0x414/0x928 [ 49.478938][ T7650] iput+0x95c/0xad4 [ 49.479562][ T7650] ext4_process_orphan+0x240/0x2b4 [ 49.480365][ T7650] ext4_orphan_cleanup+0x930/0x107c [ 49.481121][ T7650] ext4_fill_super+0x4854/0x4fcc [ 49.481880][ T7650] get_tree_bdev_flags+0x360/0x414 [ 49.482649][ T7650] get_tree_bdev+0x2c/0x3c [ 49.483261][ T7650] ext4_get_tree+0x28/0x38 [ 49.483886][ T7650] vfs_get_tree+0x90/0x28c [ 49.484542][ T7650] do_new_mount+0x284/0x944 [ 49.485211][ T7650] path_mount+0x5b4/0xdfc [ 49.485821][ T7650] __arm64_sys_mount+0x3e8/0x468 [ 49.486528][ T7650] invoke_syscall+0x98/0x254 [ 49.487143][ T7650] el0_svc_common+0xe8/0x23c [ 49.487891][ T7650] do_el0_svc+0x48/0x58 [ 49.488458][ T7650] el0_svc+0x5c/0x254 [ 49.489041][ T7650] el0t_64_sync_handler+0x84/0x12c [ 49.489799][ T7650] el0t_64_sync+0x198/0x19c [ 49.492731][ T7636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49. ** replaying previous printk message ** [ 49.501210][ T7650] ------------[ cut here ]------------ [ 49.501230][ T7650] EA inode 11 i_nlink=2 [ 49.501322][ T7650] WARNING: CPU: 1 PID: 7650 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x408/0x44c [ 49.504901][ T7650] Modules linked in: [ 49.505486][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT [ 49.506844][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.508368][ T7650] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 49.509593][ T7650] pc : ext4_xattr_inode_update_ref+0x408/0x44c [ 49.510575][ T7650] lr : ext4_xattr_inode_update_ref+0x408/0x44c [ 49.511509][ T7650] sp : ffff80009df16ce0 [ 49.512144][ T7650] x29: ffff80009df16d90 x28: 0000000000000000 x27: 1fffe0001ecfb68b [ 49.513414][ T7650] x26: dfff800000000000 x25: ffff80009df16d00 x24: ffff700013be2da0 [ 49.514610][ T7650] x23: ffff800092c29000 x22: ffff0000f67db2a8 x21: 0000000000000002 [ 49.515829][ T7650] x20: 0000000000000001 x19: ffff0000f67db268 x18: 1fffe000337d9290 [ 49.517042][ T7650] x17: ffff80008f5ae000 x16: ffff800082defcc0 x15: 0000000000000001 [ 49.518237][ T7650] x14: 1ffff00011ed68e7 x13: 0000000000000000 x12: 0000000000000000 [ 49.519404][ T7650] x11: 0000000000080000 x10: 000000000005b6b5 x9 : 359e0cf25d36e000 [ 49.520552][ T7650] x8 : 359e0cf25d36e000 x7 : 0000000000000000 x6 : ffff800080565b88 [ 49.521696][ T7650] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 49.522818][ T7650] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.524025][ T7650] Call trace: [ 49.524518][ T7650] ext4_xattr_inode_update_ref+0x408/0x44c (P) [ 49.525426][ T7650] ext4_xattr_set_entry+0x928/0x15c0 [ 49.526194][ T7650] ext4_xattr_ibody_set+0x204/0x5fc [ 49.526964][ T7650] ext4_expand_extra_isize_ea+0xf00/0x1830 [ 49.527839][ T7650] __ext4_expand_extra_isize+0x2a0/0x37c [ 49.528671][ T7650] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 49.529500][ T7650] ext4_evict_inode+0x930/0x1084 [ 49.530196][ T7650] evict+0x414/0x928 [ 49.530738][ T7650] iput+0x95c/0xad4 [ 49.531307][ T7650] ext4_process_orphan+0x240/0x2b4 [ 49.532098][ T7650] ext4_orphan_cleanup+0x930/0x107c [ 49.532851][ T7650] ext4_fill_super+0x4854/0x4fcc [ 49.533567][ T7650] get_tree_bdev_flags+0x360/0x414 [ 49.534387][ T7650] get_tree_bdev+0x2c/0x3c [ 49.535089][ T7650] ext4_get_tree+0x28/0x38 [ 49.535768][ T7650] vfs_get_tree+0x90/0x28c [ 49.536461][ T7650] do_new_mount+0x284/0x944 [ 49.537115][ T7650] path_mount+0x5b4/0xdfc [ 49.537778][ T7650] __arm64_sys_mount+0x3e8/0x468 [ 49.538467][ T7650] invoke_syscall+0x98/0x254 [ 49.539102][ T7650] el0_svc_common+0xe8/0x23c [ 49.539726][ T7650] do_el0_svc+0x48/0x58 [ 49.540326][ T7650] el0_svc+0x5c/0x254 [ 49.540932][ T7650] el0t_64_sync_handler+0x84/0x12c [ 49.541696][ T7650] el0t_64_sync+0x198/0x19c [ 49.542349][ T7650] irq event stamp: 2793 [ 49.542972][ T7650] hardirqs last enabled at (2793): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 49.544446][ T7650] hardirqs last disabled at (2792): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 49.545761][ T7650] softirqs last enabled at (2782): [] handle_softirqs+0xaf8/0xc88 [ 49.547040][ T7650] softirqs last disabled at (2307): [] __do_softirq+0x14/0x20 [ 49.548417][ T7650] ---[ end trace 0000000000000000 ]--- [ 49.550186][ T7650] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.403: iget: bad extra_isize 90 (inode size 256) [ 49.550358][ T7650] EXT4-fs (loop4): Remounting filesystem read-only [ 49.550445][ T7650] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 49.550466][ T7650] EXT4-fs (loop4): 1 orphan inode deleted [ 49.550648][ T7650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.559062][ T6547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.575597][ T7636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.653339][ T2203] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.656091][ T2203] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.659444][ T2203] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.662501][ T2203] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.259695][ T6549] Bluetooth: hci5: command 0x1003 tx timeout [ 50.259734][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 50.263639][ T7549] vhci_hcd: connection reset by peer [ 50.264656][ T12] vhci_hcd: stop threads [ 50.265603][ T12] vhci_hcd: release socket [ 50.265634][ T12] vhci_hcd: disconnect device [ 53.679652][ T6606] vhci_hcd: vhci_device speed not set