last executing test programs: 2m44.501855718s ago: executing program 1 (id=136): futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) 2m43.551679128s ago: executing program 1 (id=138): unshare(0x2040400) syz_usb_connect(0x5, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, 0xffffffffffffffff, 0xf6}, 0x18) r6 = getuid() r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, r6, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f00000000c0)=[0x4, 0x2], 0x2) bind$bt_sco(r4, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000340)=""/214}, 0x20) connect$bt_sco(r4, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) acct(&(0x7f0000000140)='./file0\x00') 2m41.872207089s ago: executing program 3 (id=155): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$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") 2m41.694283166s ago: executing program 3 (id=158): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) 2m40.828491813s ago: executing program 3 (id=168): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0x0, 0x2404c010, &(0x7f0000000040)={0xa, 0x4e22, 0xffffff7c, @local, 0x380000}, 0x1c) r2 = gettid() timer_create(0x1, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 2m40.707860268s ago: executing program 3 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x80, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) 2m40.643442251s ago: executing program 3 (id=171): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 2m40.640623981s ago: executing program 3 (id=172): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffffc) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/246, 0xf6}], 0x5, 0x2, 0x1, 0xc) write$nci(r0, &(0x7f0000000540)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x42, {0x0, 0x3, 0x1, 0x1}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind(r1, &(0x7f00000005c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x8, 0xb6, 0xc, @local, @private0, 0x8000, 0x10, 0x9, 0x4271c2af}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x6, 0x4, 0x44, @private1, @loopback, 0x8000, 0x8000, 0xb, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x15f5, 0xfffffff7, {{0xc, 0x4, 0x1, 0x3d, 0x30, 0x67, 0x0, 0xe, 0x77, 0x0, @remote, @private=0xa010100, {[@lsrr={0x83, 0xf, 0xd7, [@multicast1, @local, @loopback]}, @end, @rr={0x7, 0xb, 0xc9, [@loopback, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x134, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000f00)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, r7}, 0xc) r9 = openat$cgroup_ro(r1, &(0x7f0000000f40)='blkio.bfq.io_merged\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003180)={0x0, @private, @loopback}, &(0x7f00000031c0)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000033c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000003200)={0x180, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7e68b611d9ad9c75}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x180}}, 0x4080) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000003400)={'nat\x00', 0x0, 0x0, 0x0, [0xbcac, 0x6, 0x40, 0x9, 0x1, 0x5]}, &(0x7f0000003480)=0x78) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000007, 0x810, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x114, &(0x7f00000034c0)=0x6, 0x0, 0x4) sendmsg$inet6(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003500)="2bdb703b56e7e1e0ef16108b7b2cf819d3c148491f15b9980a3bd2c8faaef332e923de255a648e87ef5890f8243063795f0a12310a3fa9a0dbf450ff6bbd678964b4a3683af336cf0198e16532e2e1c1bddc08723eff8580d58dc21b61e0bcd5caa0f1a29666006bed1273a96bb727edf1635d00cadd35475967dbb7e2fb8fd81be4c754069be3651f207e0f177d7ec10e7daa2ed8d05199827c84fa5667008f18cde72d24b51879e1fc67b6f690ab9ea15381342d8a8e4186", 0xb9}, {&(0x7f00000035c0)="a0036c9b0c86019d9da5a00d534a842c237633ba11d95ac005012677d8c15a097ff58350565de38e1dbc6fb31e00fd5331cf4664542ffa9fdadfac58ac1860157536694b110171e0019cae91be4961b21e5d9f00fcab5c3993d54518d82008ebabbf375260ad4fa53b5d48dde47a09eaa34cdff9a80de298", 0x78}], 0x2}, 0x30008091) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000036c0)) preadv(r0, &(0x7f0000004cc0)=[{&(0x7f0000003940)=""/70, 0x46}, {&(0x7f00000039c0)=""/193, 0xc1}, {&(0x7f0000003ac0)=""/104, 0x68}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/92, 0x5c}, {&(0x7f0000004bc0)=""/223, 0xdf}], 0x6, 0xfffffffc, 0x7) 2m40.586671193s ago: executing program 1 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x3}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 2m40.428998609s ago: executing program 1 (id=176): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 2m40.328113124s ago: executing program 1 (id=177): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 2m40.17624743s ago: executing program 1 (id=179): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "132bf2047e9e60e0a312f164942f1d9b42e037d71993e244"}, @NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x400a1) syz_genetlink_get_family_id$batadv(0x0, r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x68, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x24000050) connect$netlink(r7, &(0x7f00000000c0)=@unspec, 0xc) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m25.384338864s ago: executing program 32 (id=172): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffffc) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/246, 0xf6}], 0x5, 0x2, 0x1, 0xc) write$nci(r0, &(0x7f0000000540)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x42, {0x0, 0x3, 0x1, 0x1}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind(r1, &(0x7f00000005c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x8, 0xb6, 0xc, @local, @private0, 0x8000, 0x10, 0x9, 0x4271c2af}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x6, 0x4, 0x44, @private1, @loopback, 0x8000, 0x8000, 0xb, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x15f5, 0xfffffff7, {{0xc, 0x4, 0x1, 0x3d, 0x30, 0x67, 0x0, 0xe, 0x77, 0x0, @remote, @private=0xa010100, {[@lsrr={0x83, 0xf, 0xd7, [@multicast1, @local, @loopback]}, @end, @rr={0x7, 0xb, 0xc9, [@loopback, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x134, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000f00)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, r7}, 0xc) r9 = openat$cgroup_ro(r1, &(0x7f0000000f40)='blkio.bfq.io_merged\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003180)={0x0, @private, @loopback}, &(0x7f00000031c0)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000033c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000003200)={0x180, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7e68b611d9ad9c75}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x180}}, 0x4080) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000003400)={'nat\x00', 0x0, 0x0, 0x0, [0xbcac, 0x6, 0x40, 0x9, 0x1, 0x5]}, &(0x7f0000003480)=0x78) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000007, 0x810, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x114, &(0x7f00000034c0)=0x6, 0x0, 0x4) sendmsg$inet6(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003500)="2bdb703b56e7e1e0ef16108b7b2cf819d3c148491f15b9980a3bd2c8faaef332e923de255a648e87ef5890f8243063795f0a12310a3fa9a0dbf450ff6bbd678964b4a3683af336cf0198e16532e2e1c1bddc08723eff8580d58dc21b61e0bcd5caa0f1a29666006bed1273a96bb727edf1635d00cadd35475967dbb7e2fb8fd81be4c754069be3651f207e0f177d7ec10e7daa2ed8d05199827c84fa5667008f18cde72d24b51879e1fc67b6f690ab9ea15381342d8a8e4186", 0xb9}, {&(0x7f00000035c0)="a0036c9b0c86019d9da5a00d534a842c237633ba11d95ac005012677d8c15a097ff58350565de38e1dbc6fb31e00fd5331cf4664542ffa9fdadfac58ac1860157536694b110171e0019cae91be4961b21e5d9f00fcab5c3993d54518d82008ebabbf375260ad4fa53b5d48dde47a09eaa34cdff9a80de298", 0x78}], 0x2}, 0x30008091) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000036c0)) preadv(r0, &(0x7f0000004cc0)=[{&(0x7f0000003940)=""/70, 0x46}, {&(0x7f00000039c0)=""/193, 0xc1}, {&(0x7f0000003ac0)=""/104, 0x68}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/92, 0x5c}, {&(0x7f0000004bc0)=""/223, 0xdf}], 0x6, 0xfffffffc, 0x7) 2m25.136814515s ago: executing program 33 (id=179): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "132bf2047e9e60e0a312f164942f1d9b42e037d71993e244"}, @NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x400a1) syz_genetlink_get_family_id$batadv(0x0, r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x68, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x24000050) connect$netlink(r7, &(0x7f00000000c0)=@unspec, 0xc) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 31.008207382s ago: executing program 2 (id=793): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x7, &(0x7f0000000080)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 31.007550192s ago: executing program 2 (id=795): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c9009100", 0x47}], 0x1) 30.149302758s ago: executing program 2 (id=797): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) 30.084209351s ago: executing program 2 (id=798): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 30.083948721s ago: executing program 2 (id=799): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 30.083612941s ago: executing program 2 (id=800): r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r1 = socket(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="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", 0xb93) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) listen(r6, 0x4) close_range(r0, r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 19.89398041s ago: executing program 0 (id=807): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r1], 0xa) 19.832230214s ago: executing program 0 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000180)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 19.831960074s ago: executing program 0 (id=809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x15, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 19.821249524s ago: executing program 0 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 19.805201304s ago: executing program 0 (id=811): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 19.784685905s ago: executing program 0 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000850000000800000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 14.350171435s ago: executing program 34 (id=800): r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r1 = socket(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="efb3ffa5cb19c3fd9afbd4acf62549fad0f8cdea919fdb3ba1b4ad5f8e41944cdb4944772554bcbbd5f97aa759eeb964f47f37e66ab2aeee985cc46db38e02623c245a49f9c59f20a7bc11d066e4fe6ac31fb8589a7f93d877c8f894889deaa325eca39d270bcd7e9adfe158016a03c81453f0059d88c21f8cbcf7c88bf0438d01114b9a56bece53dfd6c7a0eaf6618fbb993b3979509879f48d7a867f2dc38d862c4494eb3a39cda5d579bcdee64b678775491e972318cf83a4d36ec464f568aa61a2d3c61a8ea19070a716936e9ae192ce1f836302c592bb494c673169eb3abb446c442bc03af6bc9f8ae48981337addca06d972ca9934f79f0e89c4f18d70e74c60755af543abff18b72d07d0124f385c99da1895e7cfcd9e42562b38860eacd9ca87d54cf581d6ccd396f1b5555abbc8143869a09a67b83fc791d03a46e0ec7bd0ed30df03763daf9a3effd131311bc132c721eb27a0d953af656d4c03ad1e6e2e36a93a36db15c19a386917d0756c97182660a9ed263197821296ca491a86d384cea020daf4ef6861077a62b6e296a56c2f5899d58cbd11a242a556f90c78d0ba6ca80b58b19d678cc8302a89d46bdfc334b089f5b3a943d31b31f8f5a731f2ad363766721b15e391164ecd7d3ad141bd64562468efcef7919ad3d9b9496db110bf90af3b8f7b47158ecd51837038d179684e8c41d344ec6cc28881d5a32cd034a9d71082b71cba117938826cd344085db035678341e64aa915873a4f3c4b80dc63aa84c2e15dc16cb6e3661d5f61ee160eabe25b4fae7a3a784898151b3d8b2df2faff42cd61ec469bf6002e8c881a4445bb7069912a2d81f68ad23a20e51a66fee0e4e9c19baeffa68bb747d4a5ec58c0d68575d78fc3212879fe64acbeb00f3d7b1c65c21fab3edc014f2e3d99bdb9ee804e0e7351b3d515967dc5f306f0ef66f5f8ba7d49cee20826a4c0bd2c302854ec3ce4d07995fc15661bceafc10f7deb407e088f928a9bd48634c109fb22f74abefa86fed70cab1c07915b7e4c1ddb1422257748c696987b91356974e2a9eb8a1029282f1df5cd94bc90de0a9c7c6664a2885ae6a8bda94aa8d3e95c1875eecbccf0e0065bef28d5de2deb1635e6dc24cac40813b28e613d84221ce20a6b0440656f177e2ba9289d20cfa1d8a4cd3342cee5d817ee385ec4fa7c12f3e543659fbd9434396d70750a8c837115d8e98f9f3aff1b68aae25b89c69c21727c7ef57e93c8b4b660de042bde11c5f3ae70732e0ccb064ba3635a13decf581f74d3e979de15841d02e73d0e1748301bb96aabe9ce84c44c22ebf2d4e6c7aee0b439b810511c9894d1f83450542a51de2b5b67d28e2317fa9214ce652c36913a47da36dd952ea43a27159d319fd04f47dd7ff0986b99ee75663913267fbd73f124b94c34adf8b2345a68d83ed28b42e2459c16939668dbc597a9befebe46654aea60b116ee983b03297cd8da439e7b1a4fc5ac26323e0cf6e9ed0677a25b68bc58f24a324833b4d60b432835173d6c8a941b2a95efa1fe92c54038f6eea43fd9aa1d3582cf0fb91c045bfae746cf1f3ec31aed3db03f4b51f37ee9ad8df957b51d369ac507bd4002b354f7e3c316d86df359e29f0355a91177cd95e891fc7026e2c57e1e10681bb4c6dedba2abf4eb95aba1c6e47920e3e6094982330f45d4b835fdaf66593715ef7aa4e17ca720e893fb1b3799f53ade3442d19fbf079bfff6cb841b3e5704fba7bdb33c476390e250eb5618b1fafaf1c4e665f29e81cd0ee904966e71e77a0c3f293c4eaaa345b17ae2141f412c6875fb033c70fee292486e136df102d07a39545b93be241a8cf52759674bf194f728ce8ec5515f0f04a8763d46106a20b93de40295090d09fdd9b4da34076d58bf7b7a6ca4bfb96a81b24e337fa53abf17d11b8793d5f586cdafdc551082d80b29f662daaea5a3ba2f2b37b4b2e6b92d9145a6401c53c7db78108c9cf95a65890fd1f39014927c05e0f8e3d8f799480e1bd3d5bba06ab6b832d414f416074d04e9800aed25a3d51ebde7d1d910408378ad5a51567e530eb7805bada1c59dea6575a0c0d1d52da718c9926412f19acb61aaf13f1247fc7ed1cd8fad673eb227095d509f0b17c61a16bcb05624d4d0f7c77e17f3ab23730ae6b1e9c753b07f3cf5acc62f2a1b113571522666b49a24715ec4fc46f4388cc528347173c97a408026e774cb6829f8eb5aabc63c028f45e11f39314fe42bf7f02f5e4b85f52ddf7b030f2ea41d16bc89ca7deffd6d2669b5650af4d6e244e29145ac64f7eb49133ba39add68c54691943bec17993d06277170462d20deb288e842354a7bfc60d918f83a872f934794f6224335687fe72ca2983de6dc36b849aaba716a8dfe028d89e90dad9916f497595bf80b7f322998d65cbd068465e70ce9a43dfbabebc64df1c3c3ff4ecf3f2ce1080e3679e33b8aa4a7a6775314c9b8f1bdf13685bef5909e210bbb690ca82f8d7a41f37172e55cc38f2512167de6ba710f02525bf7eab84917ab64213c2e578250bb6a1ec40217d9740b9b40d30c97b85559e62181ec331aac3cf93e1893f79460272a3cf8e4b99785218f327fa5715c7c3dfcb2931a413fdb10fe17b4d7ca78be3d48501c649fc6f5104e58e06cc05fce7cf7d1118d68951dda05f7125343c4248d1b7765dd4ce3b5dcef38fc846aac213114700188f8bc689815bbe52f1298eceaab87c20ccaf9d1361e8ac59d549df3fcf80f9d8654856214b75380f672b42b6cc09d0ca33d4ca1bb29352cebe91e260ad4618fb402a3ff5320e0330a8bc619d075af5dd1807b83096a406a23070759189ad3733ea014b379990768a645bed1b6d40f7d583d9fb9f5e1770a765ee8bf4f56e8887a3261ad102fff3b21bcd82ff6d32b6c386e30f772fcbaa0903d0e03ab680be362ec7c4e14cb6d1501b3b081e8bef8131cb795c59d7b0b851411c961f0d5927baa0cc2f5d5c09a4945c088182d932086631108bdf304aa3b28e2b12aa7059b009ca09472bc3f7974f2a132b2f5e2ac6b36ffc75a1921f92f9f186cf89601e4f2a55d72cb2aa85762f570c557e86e1600466917f59ae8fae7dc2042f73870a1b5a188ce0900da3ca181271f1be2f96636063bb98f56ea9a986287b7608f64abe71fdfe0e67e23ef7bbe7f250a3da41168b62572ea2c73ff93bbf3cdfc644b721037ea78b50a39fe87ff192a4b8e801aba9fe139529a56d0c0b250002f3b43d3110ae127ad678ef76ba1d0bae0cbce881120508f1eb49494e7480b60162ba1bef1b92a31f4f6c0cbfacc72451d3a254c476e069423c668df36cef271a1b76e7ceda3bbd9a0800788b4b5a18b0a55614777d76d9ce808ec3e8104b7cf8a6b888b0a3fad29b3221441d893ab326c94c5ca9e1775159f0efc13850caaf68b981664989f51ab035357398d2733799323d2f9c9ab3de2935a5c27fdd351ec02539a023141854528f4b29cd1b255de803f888c0555677edf5759bba861e1f69b13b30bf49e9b5894954dfdeddb27ac457c07ca88330395bdd5b72073e66aa1571faea59a60728d0b00e8582fa654e0b8a7ec0d7fdb31bcaed495fe9cdb9d0d27439d1ea00f24434e0aedd6c632667c6defd950774f5682e2d79cbbe355bff6c4b52c5d3c13c450e23f94c89f720e24318cdbff8f7135ad3b5e362bef02d3cb5db80d988ae882ba0dbccdd0857c8cc42876c6ebd52b4374ce82f711ff139d61db613de9c1aa391bac1707285f3ddce7c55d96f4c47870a49bb0ddb4d215a1aeded59fa92c8a94c4296a7b121439bc2bdf4a902a81503416497f5fdd4d9ef0946968b54ea3d66e33b854f5a66dbe5b6a1996742066424a43382d9eedc4b4637f8585da8929a6e9da3a1ed1cdad4a9493eb7ebf1f41f365f672b68e7d9c064720424660f970e6a5cebf652d1915e3abc289c635afeb04786828f3fad0354fe84b182849a1af07a93abd8910367fc3fbb8f020aad324dcc9b49939a486394eeac70cd19bc070562f3d0106c61879637bca3468c794146286af7c563e2883933f0a887dfeeb367aeaeab8745dbe2a092d1e5aded2c8376c21d454638d8d83d67cbbff6c49d8f6b652f0dc5d7963b2cfcd7e2da9ea4e0a123a58cf41acef706a9ef312671b88aeefaa649a5c7bd880445abee90321e717321f", 0xb93) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) listen(r6, 0x4) close_range(r0, r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 4.724087451s ago: executing program 35 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000850000000800000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 60.287488ms ago: executing program 4 (id=1077): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 59.963448ms ago: executing program 4 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x86}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.739888ms ago: executing program 4 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 57.032408ms ago: executing program 4 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 40.518258ms ago: executing program 4 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 4 (id=1082): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3c700fe0000000072101a0000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x34, 0x2) kernel console output (not intermixed with test programs): netdevsim3 netdevsim1: renamed from eth1 [ 28.163589][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.210434][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.271435][ T4333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.341681][ T4333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.382115][ T4333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.421282][ T4333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.478263][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.526299][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.586942][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.647470][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.691245][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.740922][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.774799][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.778955][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.810238][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 28.820455][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 28.822789][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.882176][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.890198][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 28.900663][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 28.900708][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 28.923025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.925060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.926862][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.962773][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.966055][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.004953][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.065481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.067060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.068638][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.069718][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.071671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.073098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.074730][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.075781][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.077049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.078623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.082689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.096020][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.097663][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.099034][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.100982][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.102402][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.107768][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.115977][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.117848][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.126285][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.127768][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.129151][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.132170][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.137866][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.144535][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.155992][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.167858][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.169241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.170747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.172128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.173656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.174975][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.176177][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.177958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.184337][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.187016][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.188621][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.191561][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.192701][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.195344][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.206533][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.209100][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.210692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.212057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.213903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.215315][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.216347][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.222066][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.229651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.231719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.233311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.234667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.235917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.237777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.239361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.241775][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.242899][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.244319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.245788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.247197][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.248248][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.249464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.251904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.253629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.255261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.268994][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.271300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.272789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.274335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.276130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.277506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.279069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.282795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.284229][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.285606][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.286677][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.287929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.289335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.292398][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.293504][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.294772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.296361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.297897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.299304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.301011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.302133][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.303538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.304950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.306333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.307619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.309001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.312491][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.314092][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.317170][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.325779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.327298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.328620][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.329742][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.331499][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.334737][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.336187][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.339865][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.349400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.352363][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.366633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.368127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.369616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.371974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.376098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.378211][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.379663][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.393670][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.395133][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.396667][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.398114][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.401044][ T4323] device veth0_vlan entered promiscuous mode [ 29.408000][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.410000][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.412853][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.414830][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.416379][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.425580][ T4323] device veth1_vlan entered promiscuous mode [ 29.427096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.428466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.429866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.434853][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.436079][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.444381][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.445812][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.447496][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.449013][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.459045][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.463561][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.465152][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.466567][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.468360][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.476982][ T4323] device veth0_macvtap entered promiscuous mode [ 29.491318][ T4323] device veth1_macvtap entered promiscuous mode [ 29.493964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.495469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.496993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.498332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.499494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.504123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.507603][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.515155][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.523338][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.526265][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.527760][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.534979][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.536646][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.545442][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.547444][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.548954][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.564035][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.568432][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.569767][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.571886][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.573391][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.574901][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.576442][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.578265][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.579687][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.586548][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.591563][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.592858][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.594053][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.595229][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.599121][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.601073][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.607957][ T4320] device veth0_vlan entered promiscuous mode [ 29.612869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.614216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.615647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.617078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.619010][ T4333] device veth0_vlan entered promiscuous mode [ 29.626752][ T4333] device veth1_vlan entered promiscuous mode [ 29.629184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.631009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.632295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.637388][ T4320] device veth1_vlan entered promiscuous mode [ 29.669766][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.671378][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.672828][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.674195][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.675659][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.678185][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.679480][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.689145][ T4327] device veth0_vlan entered promiscuous mode [ 29.693492][ T4327] device veth1_vlan entered promiscuous mode [ 29.695906][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.697354][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.698737][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.701437][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.703412][ T4320] device veth0_macvtap entered promiscuous mode [ 29.706872][ T4320] device veth1_macvtap entered promiscuous mode [ 29.715425][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.716919][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.718335][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.719817][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.722766][ T1709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.723951][ T1709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.727409][ T4333] device veth0_macvtap entered promiscuous mode [ 29.729584][ T4333] device veth1_macvtap entered promiscuous mode [ 29.733628][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.734996][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.736402][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.743416][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.745420][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.756860][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.758344][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.763577][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.766284][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.767845][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.772649][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.773802][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.775520][ T4327] device veth0_macvtap entered promiscuous mode [ 29.777113][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.778713][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.783481][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.786780][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.788306][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.789766][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.792248][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.794455][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.795604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.797057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.798457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.799934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.802359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.803776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.805335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.806825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.808325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.810324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.811835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.813149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.815859][ T4328] device veth0_vlan entered promiscuous mode [ 29.820562][ T4327] device veth1_macvtap entered promiscuous mode [ 29.823771][ T4328] device veth1_vlan entered promiscuous mode [ 29.826418][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.827763][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.829026][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.831049][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.834525][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.836217][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.837755][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.839290][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.841884][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.842930][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.845139][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.846806][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.848289][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.851086][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.852716][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.854194][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.855626][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.857028][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.858486][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.863396][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.867675][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.869184][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.871695][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.874173][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.875825][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.877324][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.878868][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.881455][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.883088][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.885144][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.888781][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.890749][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.908941][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.915178][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.916460][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.917716][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.918044][ T4429] loop3: detected capacity change from 0 to 512 [ 29.923342][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.925122][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.926575][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.927928][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.949914][ T4429] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.950636][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.952454][ T4429] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 29.953276][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.954379][ T4429] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 29.957675][ T4429] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 29.958844][ T4328] device veth0_macvtap entered promiscuous mode [ 29.965891][ T4429] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.4: corrupted in-inode xattr [ 29.968582][ T4429] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 29.971544][ T4429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.972510][ T4328] device veth1_macvtap entered promiscuous mode [ 29.976054][ T1709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.977221][ T1709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.978908][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.981299][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.982732][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.988988][ T4429] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.991635][ T4429] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 29.993119][ T4429] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 29.995356][ T4429] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.997075][ T4429] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 29.998484][ T4429] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 30.000811][ T4429] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 30.002795][ T4429] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 30.004159][ T4429] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 30.006256][ T4429] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.4: path /0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 30.015957][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.017629][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.019107][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.020823][ T4429] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.4: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.021058][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.025268][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.026690][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.028060][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.029519][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.032307][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.037872][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.039577][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.045611][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.047167][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.048586][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.051971][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.053755][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.055676][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.057136][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.058593][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.061512][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.062256][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 30.067029][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.068651][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.078231][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.079670][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.081619][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.112382][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.113339][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.113548][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.114982][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.117864][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.122462][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.125147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.134762][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.135951][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.137813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.148455][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.149553][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.158012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.193994][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.195961][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.198090][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.234450][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.235662][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.237145][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.238206][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.260961][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.263150][ T249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.296261][ T4444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.313753][ T4440] loop0: detected capacity change from 0 to 512 [ 30.317618][ T4440] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.344235][ T4440] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 30.346042][ T4440] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.350963][ T4440] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 30.353302][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.354281][ T4440] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm +}[@: mark_inode_dirty error [ 30.356093][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.357176][ T4440] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 30.359076][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.360205][ T4440] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm +}[@: mark_inode_dirty error [ 30.372066][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.373160][ T4440] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 30.375416][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.376455][ T4440] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 30.378087][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.379120][ T4440] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 30.382034][ T4456] netlink: 'syz.4.8': attribute type 24 has an invalid length. [ 30.383481][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.384516][ T4440] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm +}[@: mark_inode_dirty error [ 30.386380][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.387336][ T4440] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 30.388833][ T4440] EXT4-fs (loop0): Remounting filesystem read-only [ 30.390220][ T4440] EXT4-fs (loop0): 1 truncate cleaned up [ 30.431297][ T249] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 30.432800][ T249] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 1 [ 30.436072][ T249] EXT4-fs (loop0): Remounting filesystem read-only [ 30.437400][ T4440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.891454][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 30.893410][ T4325] Bluetooth: hci0: command 0x041b tx timeout [ 30.970288][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 30.980409][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 30.980418][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 31.044688][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 31.259327][ T4472] loop0: detected capacity change from 0 to 1024 [ 31.277461][ T4472] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.160057][ C0] sched: RT throttling activated [ 32.177728][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.347982][ T4478] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.418559][ T4477] smc: net device bond0 applied user defined pnetid SYZ0 [ 32.423892][ T4477] smc: net device bond0 erased user defined pnetid SYZ0 [ 32.503922][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 32.511159][ T4484] loop3: detected capacity change from 0 to 512 [ 32.539654][ T4484] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 32.541680][ T4484] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 32.543118][ T4484] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.17: Corrupt directory, running e2fsck is recommended [ 32.550760][ T4484] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 32.553766][ T4484] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.17: corrupted in-inode xattr [ 32.574849][ T4484] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.17: couldn't read orphan inode 15 (err -117) [ 32.580491][ T4484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.584095][ T4484] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 32.585769][ T4484] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 32.587346][ T4484] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.17: Corrupt directory, running e2fsck is recommended [ 32.594087][ T4484] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 32.595871][ T4484] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 32.597497][ T4484] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.17: Corrupt directory, running e2fsck is recommended [ 32.610564][ T4484] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 32.612364][ T4484] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 32.613854][ T4484] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.17: Corrupt directory, running e2fsck is recommended [ 32.615683][ T4484] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.17: path /5/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 32.625685][ T4484] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.17: path /5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 32.638393][ T4496] 9pnet_fd: Insufficient options for proto=fd [ 32.664485][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 32.685128][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 32.730537][ T27] audit: type=1326 audit(32.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.735986][ T27] audit: type=1326 audit(32.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.739182][ T27] audit: type=1326 audit(32.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.748504][ T27] audit: type=1326 audit(32.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.751755][ T27] audit: type=1326 audit(32.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.755054][ T27] audit: type=1326 audit(32.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.773487][ T27] audit: type=1326 audit(32.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.776725][ T27] audit: type=1326 audit(32.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.779810][ T27] audit: type=1326 audit(32.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 32.813432][ T4505] lo speed is unknown, defaulting to 1000 [ 32.819784][ T4505] lo speed is unknown, defaulting to 1000 [ 32.822176][ T4505] lo speed is unknown, defaulting to 1000 [ 32.824279][ T4505] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.829338][ T4505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.845646][ T4505] lo speed is unknown, defaulting to 1000 [ 32.846907][ T4505] lo speed is unknown, defaulting to 1000 [ 32.848059][ T4505] lo speed is unknown, defaulting to 1000 [ 32.849118][ T4505] lo speed is unknown, defaulting to 1000 [ 32.860252][ T4505] lo speed is unknown, defaulting to 1000 [ 32.980445][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 32.981486][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 33.050846][ T4325] Bluetooth: hci3: command 0x040f tx timeout [ 33.051749][ T4325] Bluetooth: hci2: command 0x040f tx timeout [ 33.052655][ T4325] Bluetooth: hci4: command 0x040f tx timeout [ 33.365612][ T4516] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.367941][ T4516] smc: net device bond0 erased user defined pnetid SYZ0 [ 33.414259][ T4518] ip6t_srh: unknown srh match flags 4000 [ 33.487904][ T4518] loop1: detected capacity change from 0 to 8192 [ 33.593653][ T4518] loop1: p1 p2 p3 p4 [ 33.593653][ T4518] p1: [ 33.595033][ T4518] loop1: p1 size 196608 extends beyond EOD, truncated [ 33.597278][ T4518] loop1: p2 start 164919041 is beyond EOD, truncated [ 33.598835][ T4518] loop1: p3 size 66846464 extends beyond EOD, truncated [ 33.610959][ T4518] loop1: p4 size 37048832 extends beyond EOD, truncated [ 33.622936][ T4518] loop1: p5 size 196608 extends beyond EOD, truncated [ 33.751270][ T4522] loop0: detected capacity change from 0 to 1024 [ 34.533469][ T4522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.717580][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.884286][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 34.917029][ T4542] loop4: detected capacity change from 0 to 512 [ 34.922062][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 34.931330][ T4443] udevd[4443]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.939417][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 34.946801][ T4543] netlink: 'syz.2.37': attribute type 39 has an invalid length. [ 34.956556][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.978827][ T4542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.004289][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 35.043474][ T4551] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.044874][ T4551] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.050822][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 35.051826][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 35.105640][ T4558] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.111624][ T4558] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.130676][ T4325] Bluetooth: hci4: command 0x0419 tx timeout [ 35.131647][ T4325] Bluetooth: hci2: command 0x0419 tx timeout [ 35.132645][ T4325] Bluetooth: hci3: command 0x0419 tx timeout [ 35.523716][ T27] kauditd_printk_skb: 901 callbacks suppressed [ 35.523726][ T27] audit: type=1326 audit(35.510:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 35.530707][ T27] audit: type=1326 audit(35.520:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 35.536542][ T27] audit: type=1326 audit(35.520:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 35.542291][ T27] audit: type=1326 audit(35.530:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 35.555049][ T27] audit: type=1326 audit(35.540:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 35.561910][ T27] audit: type=1326 audit(35.550:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 35.930319][ T4586] loop0: detected capacity change from 0 to 1024 [ 35.983229][ T4586] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.412967][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.727410][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 36.831890][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 36.959560][ T4620] smc: net device bond0 applied user defined pnetid SYZ0 [ 36.963383][ T4620] smc: net device bond0 erased user defined pnetid SYZ0 [ 37.024499][ T4623] Zero length message leads to an empty skb [ 37.026033][ T4623] process 'syz.0.55' launched '/dev/fd/5' with NULL argv: empty string added [ 37.145346][ T4637] lo speed is unknown, defaulting to 1000 [ 37.369892][ T4649] loop4: detected capacity change from 0 to 1024 [ 37.450098][ T4649] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.866667][ T4649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.155972][ T4660] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.157619][ T4660] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.268141][ T4666] loop0: detected capacity change from 0 to 128 [ 38.277291][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'. [ 38.283497][ T4666] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.288193][ T4666] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.294569][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 38.401739][ T4654] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.447766][ T4677] loop3: detected capacity change from 0 to 512 [ 38.485636][ T4677] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.487385][ T4677] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 38.488993][ T4677] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 38.500605][ T4677] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 38.501851][ T4677] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.74: corrupted in-inode xattr [ 38.502967][ T4682] loop0: detected capacity change from 0 to 512 [ 38.505060][ T4682] ======================================================= [ 38.505060][ T4682] WARNING: The mand mount option has been deprecated and [ 38.505060][ T4682] and is ignored by this kernel. Remove the mand [ 38.505060][ T4682] option from the mount to silence this warning. [ 38.505060][ T4682] ======================================================= [ 38.508536][ T4677] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 38.516345][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.529430][ T4677] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.541630][ T4677] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 38.545387][ T4677] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 38.547864][ T4677] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.550958][ T4677] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 38.554050][ T4677] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 38.563086][ T4677] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.565483][ T4677] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 38.567068][ T4677] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 38.568803][ T4677] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.74: path /15/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 38.574804][ T4677] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.74: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 38.597685][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 38.618441][ T4689] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.619834][ T4689] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.871092][ T4702] loop0: detected capacity change from 0 to 1024 [ 38.917738][ T4702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.856547][ T4702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.922949][ T4710] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 39.923992][ T4710] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.926520][ T4710] vhci_hcd vhci_hcd.0: Device attached [ 39.929022][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 39.929507][ T4711] vhci_hcd: connection closed [ 39.932594][ T4474] vhci_hcd: stop threads [ 39.934418][ T4474] vhci_hcd: release socket [ 39.935042][ T4474] vhci_hcd: disconnect device [ 40.004157][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 40.091332][ T4721] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.092630][ T4721] smc: net device bond0 erased user defined pnetid SYZ0 [ 40.152575][ T4725] loop1: detected capacity change from 0 to 512 [ 40.166529][ T4725] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 40.168734][ T4725] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 40.178186][ T4725] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.92: Corrupt directory, running e2fsck is recommended [ 40.180384][ T4725] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 40.184601][ T4725] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.92: corrupted in-inode xattr [ 40.186770][ T4725] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.92: couldn't read orphan inode 15 (err -117) [ 40.188905][ T4725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.196319][ T4725] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 40.198167][ T4725] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 40.199796][ T4725] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.92: Corrupt directory, running e2fsck is recommended [ 40.203001][ T4725] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 40.204849][ T4725] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 40.206228][ T4725] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.92: Corrupt directory, running e2fsck is recommended [ 40.208219][ T4725] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 40.209933][ T4725] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 40.212022][ T4725] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.92: Corrupt directory, running e2fsck is recommended [ 40.213920][ T4725] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.92: path /17/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 40.216912][ T4725] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 64: comm syz.1.92: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.243418][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 40.535399][ T4746] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.536920][ T4746] smc: net device bond0 erased user defined pnetid SYZ0 [ 40.562507][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 40.660998][ T4749] loop3: detected capacity change from 0 to 1024 [ 41.599695][ T4749] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.650268][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.678638][ T4757] loop0: detected capacity change from 0 to 512 [ 41.691471][ T4757] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.693502][ T4757] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 41.695045][ T4757] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 41.701853][ T4757] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 41.704489][ T4757] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.104: corrupted in-inode xattr [ 41.706557][ T4757] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.104: couldn't read orphan inode 15 (err -117) [ 41.708672][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.713812][ T4757] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.715513][ T4757] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 41.717188][ T4757] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 41.719422][ T4757] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.721266][ T4757] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 41.722800][ T4757] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 41.726025][ T4761] lo speed is unknown, defaulting to 1000 [ 41.737311][ T4757] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.740230][ T4757] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 41.742181][ T4757] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.104: Corrupt directory, running e2fsck is recommended [ 41.745531][ T4757] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.104: path /30/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 41.759143][ T4757] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 64: comm syz.0.104: path /30/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 41.763913][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 41.768137][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 41.822971][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 41.839559][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 41.951571][ T4783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.117'. [ 42.001804][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'. [ 42.062211][ T4790] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.294575][ T4797] loop4: detected capacity change from 0 to 1024 [ 42.362941][ T4797] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.031506][ T4797] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.318261][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 43.331650][ T4806] loop3: detected capacity change from 0 to 512 [ 43.336807][ T4806] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.338633][ T4806] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 43.344326][ T4806] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.123: Corrupt directory, running e2fsck is recommended [ 43.346131][ T4806] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 43.354590][ T4806] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.123: corrupted in-inode xattr [ 43.356558][ T4806] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.123: couldn't read orphan inode 15 (err -117) [ 43.358396][ T4806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.361712][ T4812] loop2: detected capacity change from 0 to 1024 [ 43.363098][ T4812] EXT4-fs: inline encryption not supported [ 43.364076][ T4812] EXT4-fs: Ignoring removed nobh option [ 43.364286][ T4806] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.364870][ T4812] EXT4-fs: Ignoring removed bh option [ 43.366676][ T4806] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 43.368769][ T4806] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.123: Corrupt directory, running e2fsck is recommended [ 43.374847][ T4806] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.378680][ T4806] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 43.382594][ T4806] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.123: Corrupt directory, running e2fsck is recommended [ 43.384890][ T4806] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.386567][ T4806] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 43.387973][ T4806] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.123: Corrupt directory, running e2fsck is recommended [ 43.389896][ T4806] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.123: path /25/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 43.397460][ T4812] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.403511][ T4806] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.123: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.488604][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.496483][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 43.614124][ T27] audit: type=1326 audit(43.600:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.617462][ T27] audit: type=1326 audit(43.600:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.625211][ T27] audit: type=1326 audit(43.610:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.628852][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 43.649788][ T27] audit: type=1326 audit(43.610:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.666802][ T27] audit: type=1326 audit(43.610:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.681156][ T4821] loop4: detected capacity change from 0 to 8192 [ 43.683371][ T27] audit: type=1326 audit(43.610:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.696701][ T27] audit: type=1326 audit(43.610:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.706101][ T27] audit: type=1326 audit(43.610:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.716041][ T27] audit: type=1326 audit(43.610:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=271 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.720975][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 43.723976][ T27] audit: type=1326 audit(43.610:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa235b9e8 code=0x7ffc0000 [ 43.827519][ T4829] device syzkaller0 entered promiscuous mode [ 43.829293][ T4829] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 44.399356][ T4844] loop2: detected capacity change from 0 to 1024 [ 44.472854][ T4844] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.805948][ T4844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.179870][ T4852] loop4: detected capacity change from 0 to 512 [ 45.199002][ T4852] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.203427][ T4852] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 45.204944][ T4852] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.139: Corrupt directory, running e2fsck is recommended [ 45.212486][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 45.215675][ T4852] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 45.216949][ T4852] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.139: corrupted in-inode xattr [ 45.229250][ T4852] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.139: couldn't read orphan inode 15 (err -117) [ 45.231834][ T4852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.235388][ T4852] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.237130][ T4852] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 45.238598][ T4852] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.139: Corrupt directory, running e2fsck is recommended [ 45.255172][ T4852] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.256924][ T4852] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 45.258421][ T4852] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.139: Corrupt directory, running e2fsck is recommended [ 45.268603][ T4852] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.274176][ T4852] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 45.283942][ T4852] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.139: Corrupt directory, running e2fsck is recommended [ 45.285251][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 45.285982][ T4852] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.139: path /28/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 45.290009][ T4852] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 64: comm syz.4.139: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 45.359387][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 45.378410][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 45.401893][ T4860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 45.492355][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 45.495671][ T4862] bond1 (unregistering): Released all slaves [ 45.507411][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 45.672065][ T4882] loop0: detected capacity change from 0 to 512 [ 45.682287][ T4882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.707361][ T4882] EXT4-fs (loop0): 1 truncate cleaned up [ 45.714833][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.809723][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 45.965022][ T4893] loop4: detected capacity change from 0 to 512 [ 45.971279][ T4893] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.973006][ T4893] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 45.974621][ T4893] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.154: Corrupt directory, running e2fsck is recommended [ 45.976571][ T4893] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 45.977942][ T4893] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.154: corrupted in-inode xattr [ 45.979838][ T4893] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.154: couldn't read orphan inode 15 (err -117) [ 45.982880][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.986557][ T4893] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.988709][ T4893] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 45.991160][ T4893] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.154: Corrupt directory, running e2fsck is recommended [ 45.997821][ T4893] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.999815][ T4893] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 46.001638][ T4893] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.154: Corrupt directory, running e2fsck is recommended [ 46.110456][ T4897] loop0: detected capacity change from 0 to 1024 [ 46.120474][ T4897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.618411][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.817138][ T4893] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 46.818938][ T4893] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 46.829487][ T4893] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.154: Corrupt directory, running e2fsck is recommended [ 46.838095][ T4893] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.154: path /31/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 46.848690][ T4893] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 64: comm syz.4.154: path /31/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 46.896854][ T4902] loop3: detected capacity change from 0 to 512 [ 46.955912][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 46.973001][ T4902] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.155: couldn't read orphan inode 26 (err -116) [ 46.975775][ T4902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.015174][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 47.035233][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 47.045704][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 47.053855][ T4910] loop3: detected capacity change from 0 to 1024 [ 47.055299][ T4910] EXT4-fs: Ignoring removed orlov option [ 47.075142][ T4910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.290353][ T47] Bluetooth: hci4: command 0x0405 tx timeout [ 47.825460][ T4910] can0: slcan on ttyS3. [ 47.826337][ T4919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 47.871413][ T4907] can0 (unregistered): slcan off ttyS3. [ 47.887727][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 48.147878][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 48.185934][ T4976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.624048][ T27] kauditd_printk_skb: 126 callbacks suppressed [ 48.624057][ T27] audit: type=1326 audit(48.610:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.629879][ T27] audit: type=1326 audit(48.610:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.637587][ T27] audit: type=1326 audit(48.620:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.648886][ T27] audit: type=1326 audit(48.620:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=14 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.661470][ T27] audit: type=1326 audit(48.620:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.669121][ T27] audit: type=1326 audit(48.620:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.676296][ T27] audit: type=1326 audit(48.620:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.679626][ T27] audit: type=1326 audit(48.620:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.683463][ T27] audit: type=1326 audit(48.620:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.686988][ T27] audit: type=1326 audit(48.620:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.4.181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 48.826874][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.835492][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.861680][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 48.974468][ T5042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 49.027814][ T5049] loop4: detected capacity change from 0 to 512 [ 49.054699][ T5049] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.192: inode has both inline data and extents flags [ 49.058292][ T5049] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.192: couldn't read orphan inode 15 (err -117) [ 49.068229][ T5049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.100983][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 49.216838][ T5070] can0: slcan on ptm0. [ 49.218854][ T5070] capability: warning: `syz.2.193' uses deprecated v2 capabilities in a way that may be insecure [ 49.271264][ T5070] can0 (unregistered): slcan off ptm0. [ 49.275325][ T5070] Falling back ldisc for ptm0. [ 49.987806][ T5143] loop2: detected capacity change from 0 to 512 [ 50.041784][ T5143] EXT4-fs (loop2): too many log groups per flexible block group [ 50.043226][ T5143] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 50.044331][ T5143] EXT4-fs (loop2): mount failed [ 50.235205][ T5160] tipc: Enabling of bearer rejected, failed to enable media [ 50.282212][ T5180] netlink: 'syz.2.205': attribute type 39 has an invalid length. [ 50.319089][ T5182] lo speed is unknown, defaulting to 1000 [ 51.395761][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 51.497208][ T5210] x_tables: duplicate entry at hook 1 [ 51.528157][ T5208] atomic_op 00000000453a4915 conn xmit_atomic 0000000000000000 [ 51.581081][ T5214] netlink: 'syz.4.217': attribute type 39 has an invalid length. [ 52.148967][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 52.150287][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 52.151413][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.152480][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.153645][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.154693][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.155775][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.156954][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.158077][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.159177][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.160986][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.162184][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.163314][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.164415][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.165520][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.166564][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 52.169126][ T112] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 52.202212][ T5224] fido_id[5224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.286212][ T5231] serio: Serial port ptm0 [ 52.719592][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 52.929502][ T5243] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.228'. [ 53.120922][ T5254] netlink: 'syz.2.233': attribute type 39 has an invalid length. [ 53.245284][ T5270] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.240'. [ 53.885048][ T5276] netlink: 388 bytes leftover after parsing attributes in process `syz.0.242'. [ 54.141017][ T5284] netlink: 'syz.2.245': attribute type 39 has an invalid length. [ 54.697124][ T5302] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.251'. [ 55.309566][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 55.309578][ T27] audit: type=1326 audit(55.290:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 55.313908][ T27] audit: type=1326 audit(55.290:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 55.687390][ T5321] netlink: 'syz.2.258': attribute type 39 has an invalid length. [ 55.786353][ T5329] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.262'. [ 56.284473][ T27] audit: type=1326 audit(56.270:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.288343][ T27] audit: type=1326 audit(56.270:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.293843][ T27] audit: type=1326 audit(56.280:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.299606][ T27] audit: type=1326 audit(56.280:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.310718][ T27] audit: type=1326 audit(56.280:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.320393][ T27] audit: type=1326 audit(56.280:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.326786][ T27] audit: type=1326 audit(56.280:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.333089][ T27] audit: type=1326 audit(56.280:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 56.390849][ T5350] netlink: 'syz.0.270': attribute type 39 has an invalid length. [ 56.457626][ T5356] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.273'. [ 57.104556][ T5367] loop4: detected capacity change from 0 to 128 [ 57.115768][ T5367] syz.4.276: attempt to access beyond end of device [ 57.115768][ T5367] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 57.458411][ T5380] lo speed is unknown, defaulting to 1000 [ 57.845155][ T5396] 9pnet: Unknown protocol version 9 [ 58.246083][ T5409] tipc: Enabling of bearer rejected, failed to enable media [ 58.248187][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 59.174835][ T5438] loop2: detected capacity change from 0 to 128 [ 59.207618][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.223009][ T5438] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.305: No space for directory leaf checksum. Please run e2fsck -D. [ 59.229203][ T5438] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.305: checksumming directory block 0 [ 59.249321][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 59.379848][ T5447] tipc: Started in network mode [ 59.380830][ T5447] tipc: Node identity 82726e5da54f, cluster identity 4711 [ 59.382030][ T5447] tipc: Enabled bearer , priority 0 [ 59.383777][ T5447] device syzkaller0 entered promiscuous mode [ 59.393674][ T5447] tipc: Resetting bearer [ 59.396958][ T5446] tipc: Resetting bearer [ 59.450711][ T5446] tipc: Disabling bearer [ 59.475049][ T5451] netlink: 96 bytes leftover after parsing attributes in process `syz.4.310'. [ 59.625009][ T5469] loop4: detected capacity change from 0 to 512 [ 59.653191][ T5469] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.654751][ T5469] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.657429][ T5469] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.318: Failed to acquire dquot type 1 [ 59.659429][ T5469] EXT4-fs (loop4): Remounting filesystem read-only [ 59.662391][ T5469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.318: bg 0: block 40: padding at end of block bitmap is not set [ 59.664611][ T5469] EXT4-fs (loop4): Remounting filesystem read-only [ 59.665657][ T5469] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 59.667150][ T5469] EXT4-fs (loop4): Remounting filesystem read-only [ 59.668485][ T5469] EXT4-fs (loop4): 1 truncate cleaned up [ 59.672619][ T5469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.718970][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 60.577532][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 60.728399][ T5514] 9pnet_fd: Insufficient options for proto=fd [ 60.729386][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 60.758813][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 60.758826][ T27] audit: type=1326 audit(2638.737:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.763356][ T27] audit: type=1326 audit(2638.737:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.767960][ T27] audit: type=1326 audit(2638.747:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.784112][ T27] audit: type=1326 audit(2638.767:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.787331][ T27] audit: type=1326 audit(2638.767:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91b86108 code=0x7ffc0000 [ 60.794007][ T27] audit: type=1326 audit(2638.767:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.797140][ T27] audit: type=1326 audit(2638.777:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.800650][ T27] audit: type=1326 audit(2638.777:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.803892][ T27] audit: type=1326 audit(2638.777:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.807306][ T27] audit: type=1326 audit(2638.777:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="gtp" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 60.845460][ T5528] loop4: detected capacity change from 0 to 512 [ 60.871914][ T5528] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 61.516690][ T5547] netlink: 59060 bytes leftover after parsing attributes in process `syz.4.346'. [ 61.518212][ T5547] netlink: zone id is out of range [ 61.519015][ T5547] netlink: zone id is out of range [ 61.521040][ T5547] netlink: zone id is out of range [ 61.530144][ T5547] netlink: zone id is out of range [ 61.530938][ T5547] netlink: zone id is out of range [ 61.531672][ T5547] netlink: zone id is out of range [ 61.532365][ T5547] netlink: zone id is out of range [ 61.533093][ T5547] netlink: zone id is out of range [ 61.533795][ T5547] netlink: zone id is out of range [ 61.534530][ T5547] netlink: zone id is out of range [ 62.184864][ T5581] netlink: 192 bytes leftover after parsing attributes in process `syz.2.361'. [ 62.206644][ T5583] loop2: detected capacity change from 0 to 1024 [ 62.215459][ T5583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 62.234506][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 62.876295][ T5612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 63.471533][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 63.473072][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.475036][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.476272][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.478188][ T5629] device bridge_slave_0 left promiscuous mode [ 63.479969][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.521017][ T5629] device bridge_slave_1 left promiscuous mode [ 63.522098][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.561995][ T5629] bond0: (slave bond_slave_0): Releasing backup interface [ 63.605337][ T5629] bond0: (slave bond_slave_1): Releasing backup interface [ 63.642974][ T5629] team0: Port device team_slave_0 removed [ 63.659202][ T5629] team0: Port device team_slave_1 removed [ 63.663158][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.664218][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.666572][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.667740][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.711168][ T5642] loop2: detected capacity change from 0 to 512 [ 63.775059][ T5648] loop4: detected capacity change from 0 to 512 [ 63.825240][ T5648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.829429][ T5648] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.388: lblock 23 mapped to illegal pblock 18 (length 1) [ 63.845111][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 63.962023][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 63.963838][ T5664] rdma_rxe: rxe_register_device failed with error -23 [ 63.965284][ T5664] rdma_rxe: failed to add ip6_vti0 [ 64.011957][ T5662] loop2: detected capacity change from 0 to 1024 [ 64.013756][ T5662] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.031983][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.491389][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492624][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.495258][ T14] cfg80211: failed to load regulatory.db [ 64.747126][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 64.794351][ T5685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.795814][ T5685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.989313][ T5689] smc: net device bond0 applied user defined pnetid SYZ0 [ 64.994440][ T5689] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.891267][ T5717] loop4: detected capacity change from 0 to 1024 [ 65.906567][ T5717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.913928][ T5717] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.417: Freeing blocks not in datazone - block = 0, count = 16 [ 65.917282][ T5717] EXT4-fs (loop4): Remounting filesystem read-only [ 65.928473][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 66.051520][ T5728] loop4: detected capacity change from 0 to 2048 [ 66.083094][ T5728] Alternate GPT is invalid, using primary GPT. [ 66.084173][ T5728] loop4: p1 p2 p3 [ 66.084740][ T5728] loop4: partition table partially beyond EOD, truncated [ 66.137972][ T27] kauditd_printk_skb: 141 callbacks suppressed [ 66.137982][ T27] audit: type=1326 audit(2644.118:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.146642][ T27] audit: type=1326 audit(2644.128:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.156612][ T27] audit: type=1326 audit(2644.138:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.165823][ T27] audit: type=1326 audit(2644.138:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.175088][ T27] audit: type=1326 audit(2644.148:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.178308][ T27] audit: type=1326 audit(2644.148:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.191021][ T27] audit: type=1326 audit(2644.148:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.193980][ T27] audit: type=1326 audit(2644.148:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.197026][ T27] audit: type=1326 audit(2644.148:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.204902][ T27] audit: type=1326 audit(2644.148:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 66.224193][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.224946][ T4541] udevd[4541]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.229274][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.238923][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.244318][ T4541] udevd[4541]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.246145][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.314978][ T5745] tipc: Started in network mode [ 66.316039][ T5745] tipc: Node identity 12bebd98363f, cluster identity 4711 [ 66.317276][ T5745] tipc: Enabled bearer , priority 0 [ 66.319748][ T5744] tipc: Resetting bearer [ 67.113699][ T5761] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.436'. [ 67.439997][ T22] tipc: Node number set to 612482456 [ 77.412583][ T5744] tipc: Disabling bearer [ 77.580814][ T5782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.964197][ T5782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.039179][ T5782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.119127][ T5782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.256173][ T5782] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.260276][ T5782] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.263321][ T5782] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.266171][ T5782] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.402673][ T5796] netlink: 'syz.0.448': attribute type 13 has an invalid length. [ 78.452931][ T5798] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.449'. [ 78.530102][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.531770][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.792529][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.805461][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.064156][ T5796] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.065537][ T5796] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.066850][ T5796] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.068316][ T5796] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.140509][ T5800] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.141701][ T5801] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.186613][ T5805] tipc: Started in network mode [ 79.187409][ T5805] tipc: Node identity dac9ffaf9bea, cluster identity 4711 [ 79.189220][ T5805] tipc: Enabled bearer , priority 0 [ 79.192013][ T5804] tipc: Disabling bearer [ 79.241703][ T5809] loop4: detected capacity change from 0 to 128 [ 79.245172][ T5809] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.247309][ T5809] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.358501][ T5822] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.460'. [ 79.384673][ T5820] tipc: Enabled bearer , priority 0 [ 79.390222][ T5819] tipc: Resetting bearer [ 90.460538][ T5819] tipc: Disabling bearer [ 90.528760][ T5829] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.530130][ T5830] smc: net device bond0 erased user defined pnetid SYZ0 [ 90.561578][ T5835] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 90.601261][ T5839] tipc: Enabled bearer , priority 0 [ 90.604322][ T5837] tipc: Disabling bearer [ 90.654038][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 90.654049][ T27] audit: type=1326 audit(2668.631:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 90.660786][ T27] audit: type=1326 audit(2668.631:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 90.663927][ T27] audit: type=1326 audit(2668.631:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 90.667526][ T27] audit: type=1326 audit(2668.631:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 90.670821][ T27] audit: type=1326 audit(2668.631:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 90.718088][ T5850] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.719338][ T5850] smc: net device bond0 erased user defined pnetid SYZ0 [ 90.735407][ T5852] syz.4.471 uses obsolete (PF_INET,SOCK_PACKET) [ 90.904993][ T5864] siw: device registration error -23 [ 90.958140][ T5868] tipc: Enabled bearer , priority 0 [ 90.961614][ T5867] tipc: Disabling bearer [ 91.059898][ T5874] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.061378][ T5874] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.400640][ T5888] tipc: Enabled bearer , priority 0 [ 91.404311][ T5887] tipc: Disabling bearer [ 91.513020][ T5893] loop2: detected capacity change from 0 to 1024 [ 91.526171][ T5893] EXT4-fs: inline encryption not supported [ 91.530220][ T5893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.544512][ T5893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.558782][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 91.599387][ T5893] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.490: Allocating blocks 385-513 which overlap fs metadata [ 91.617086][ T5893] EXT4-fs (loop2): pa 0000000046c2ffc6: logic 16, phys. 129, len 24 [ 91.618540][ T5893] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 91.691567][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 92.318921][ T5917] tipc: Enabled bearer , priority 0 [ 92.321713][ T27] audit: type=1326 audit(2670.301:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 92.324715][ T27] audit: type=1326 audit(2670.301:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 92.328626][ T27] audit: type=1326 audit(2670.301:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 92.329053][ T5916] tipc: Disabling bearer [ 92.331897][ T27] audit: type=1326 audit(2670.301:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 92.336982][ T27] audit: type=1326 audit(2670.301:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 92.581943][ T5929] syz.2.503 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.584400][ T5929] netlink: 'syz.2.503': attribute type 39 has an invalid length. [ 92.612707][ T5931] smc: net device bond0 applied user defined pnetid SYZ0 [ 92.614091][ T5931] smc: net device bond0 erased user defined pnetid SYZ0 [ 93.231138][ T5954] netlink: 'syz.2.513': attribute type 39 has an invalid length. [ 93.394661][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 93.748021][ T5988] loop4: detected capacity change from 0 to 1024 [ 93.753104][ T5988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.102352][ T5988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.129703][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 94.136942][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 94.758257][ T6021] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.536'. [ 94.859480][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 94.948184][ T6034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.950128][ T6034] bond0: (slave bond1): Enslaving as an active interface with an up link [ 95.465657][ T6046] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.546'. [ 95.728996][ T6064] tipc: Enabling of bearer rejected, failed to enable media [ 96.026021][ T6075] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.557'. [ 96.048677][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 96.048705][ T27] audit: type=1326 audit(5252.038:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.053150][ T27] audit: type=1326 audit(5252.038:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.059368][ T27] audit: type=1326 audit(5252.038:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.062682][ T27] audit: type=1326 audit(5252.038:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.066220][ T27] audit: type=1326 audit(5252.038:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.104191][ T27] audit: type=1326 audit(5252.088:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.109976][ T27] audit: type=1326 audit(5252.088:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.112920][ T27] audit: type=1326 audit(5252.098:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.116870][ T27] audit: type=1326 audit(5252.098:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.120153][ T27] audit: type=1326 audit(5252.098:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 96.318187][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 96.372049][ T6084] loop2: detected capacity change from 0 to 512 [ 96.398209][ T6084] EXT4-fs warning (device loop2): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.401235][ T6084] EXT4-fs (loop2): mount failed [ 97.339793][ T6119] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 97.459128][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 97.460489][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 97.611771][ T6126] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 97.669146][ T6126] device bond1 entered promiscuous mode [ 97.670482][ T6126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.853655][ T6141] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.578'. [ 97.878434][ T6144] netlink: 'syz.0.579': attribute type 39 has an invalid length. [ 97.951196][ T6148] loop2: detected capacity change from 0 to 1024 [ 97.960009][ T6148] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.993279][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.089209][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.197199][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.599878][ T6162] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.601249][ T6162] smc: net device bond0 erased user defined pnetid SYZ0 [ 98.812556][ T6171] tipc: Enabling of bearer rejected, failed to enable media [ 99.059874][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 99.107857][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 99.148863][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 99.180442][ T6188] smc: net device bond0 applied user defined pnetid SYZ0 [ 99.181852][ T6188] smc: net device bond0 erased user defined pnetid SYZ0 [ 99.481089][ T6197] tipc: Enabling of bearer rejected, failed to enable media [ 99.845325][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'. [ 100.802552][ T6214] netlink: 3 bytes leftover after parsing attributes in process `syz.2.603'. [ 100.804105][ T6214] 0ªX¹¦À: renamed from caif0 [ 100.913982][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 100.915622][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.916770][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.917960][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.919223][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.921113][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.922289][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.923256][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.924376][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.925843][ T6214] net_ratelimit: 3495 callbacks suppressed [ 100.925850][ T6214] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.931915][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.939371][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.940532][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.943164][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.944286][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.951944][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.953103][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.954211][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.959597][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.960732][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.961863][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.970738][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.972840][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.977034][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.978053][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.979824][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.981306][ T6218] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.982500][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.983953][ T6218] smc: net device bond0 erased user defined pnetid SYZ0 [ 100.987989][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.989012][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.991395][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.994752][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.997600][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.999863][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.002037][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.004258][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.010050][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.011378][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.012656][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.013800][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.016531][ T22] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 101.059775][ T6223] tipc: Enabled bearer , priority 0 [ 101.062349][ T6222] tipc: Disabling bearer [ 101.072125][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.361517][ T6235] device bridge_slave_0 left promiscuous mode [ 101.362661][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.376565][ T6235] device bridge_slave_1 left promiscuous mode [ 101.378332][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.416947][ T6235] bond0: (slave bond_slave_0): Releasing backup interface [ 101.466266][ T6235] bond0: (slave bond_slave_1): Releasing backup interface [ 101.508154][ T6235] team0: Port device team_slave_0 removed [ 101.510030][ T6235] team0: Port device team_slave_1 removed [ 101.511028][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.512445][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.564163][ T6240] netlink: 'syz.0.612': attribute type 39 has an invalid length. [ 101.584311][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 101.584326][ T27] audit: type=1326 audit(5257.569:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.588804][ T27] audit: type=1326 audit(5257.569:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.591968][ T27] audit: type=1326 audit(5257.579:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.595106][ T27] audit: type=1326 audit(5257.579:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.598665][ T27] audit: type=1326 audit(5257.579:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.602154][ T27] audit: type=1326 audit(5257.579:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.605808][ T27] audit: type=1326 audit(5257.579:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.609374][ T27] audit: type=1326 audit(5257.579:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.612728][ T27] audit: type=1326 audit(5257.579:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.616492][ T27] audit: type=1326 audit(5257.579:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 101.629763][ T6245] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.637597][ T6245] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.669607][ T6248] tipc: Enabled bearer , priority 0 [ 101.672319][ T6247] tipc: Disabling bearer [ 101.934644][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 102.035872][ T6265] netlink: 'syz.0.621': attribute type 39 has an invalid length. [ 102.095715][ T6273] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.097087][ T6273] smc: net device bond0 erased user defined pnetid SYZ0 [ 102.104029][ T6275] tipc: Enabled bearer , priority 0 [ 102.107021][ T6274] tipc: Disabling bearer [ 102.529921][ T6287] netlink: 'syz.0.630': attribute type 39 has an invalid length. [ 102.640224][ T6298] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.641671][ T6298] smc: net device bond0 erased user defined pnetid SYZ0 [ 102.667336][ T6300] tipc: Enabled bearer , priority 0 [ 102.669912][ T6299] tipc: Disabling bearer [ 102.942059][ T6308] netlink: 'syz.0.639': attribute type 39 has an invalid length. [ 103.038063][ T6315] loop2: detected capacity change from 0 to 512 [ 103.039587][ T6315] ext4: Unknown parameter 'nouser_xattr' [ 103.317971][ T6322] loop2: detected capacity change from 0 to 1024 [ 103.423748][ T6322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.663155][ T6322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.126773][ T6330] tipc: Enabling of bearer rejected, failed to enable media [ 104.187470][ T6336] netlink: 'syz.0.648': attribute type 39 has an invalid length. [ 104.244423][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 104.360613][ T6351] tipc: Enabled bearer , priority 0 [ 104.363236][ T6350] tipc: Disabling bearer [ 104.400356][ T6356] netlink: 'syz.4.657': attribute type 39 has an invalid length. [ 104.609280][ T6370] loop2: detected capacity change from 0 to 1024 [ 104.632023][ T6370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.653348][ T6370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.794033][ T6380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.664'. [ 104.826905][ T6384] netlink: 'syz.4.666': attribute type 39 has an invalid length. [ 105.816103][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 116.059974][ T6410] netlink: 'syz.2.675': attribute type 39 has an invalid length. [ 116.086847][ T6413] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.088342][ T6413] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 116.239247][ T6427] hub 9-0:1.0: USB hub found [ 116.240292][ T6427] hub 9-0:1.0: 8 ports detected [ 117.076199][ T6438] netlink: 'syz.2.686': attribute type 39 has an invalid length. [ 125.920861][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.921921][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.375570][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 128.434771][ T6470] netlink: 'syz.2.695': attribute type 39 has an invalid length. [ 129.462690][ T6502] loop2: detected capacity change from 0 to 128 [ 129.484885][ T6502] tipc: Cannot configure node identity twice [ 129.601591][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.791587][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 129.807280][ T22] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.808596][ T22] usb 1-1: config 0 has no interface number 0 [ 129.812344][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 129.813758][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.815008][ T22] usb 1-1: Product: syz [ 129.815654][ T22] usb 1-1: Manufacturer: syz [ 129.816404][ T22] usb 1-1: SerialNumber: syz [ 129.819707][ T22] usb 1-1: config 0 descriptor?? [ 129.826337][ T22] hub 1-1:0.132: bad descriptor, ignoring hub [ 129.827246][ T22] hub: probe of 1-1:0.132 failed with error -5 [ 129.830276][ T22] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input2 [ 130.340433][ T22] usb 1-1: USB disconnect, device number 2 [ 140.845813][ T6556] loop2: detected capacity change from 0 to 4096 [ 140.883385][ T6548] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.112732][ T6573] Set syz1 is full, maxelem 65536 reached [ 152.707875][ T6595] tipc: Enabled bearer , priority 0 [ 152.711101][ T6593] tipc: Resetting bearer [ 153.825718][ T14] tipc: Node number set to 658337373 [ 163.807922][ T6593] tipc: Disabling bearer [ 164.088806][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 164.088814][ T27] audit: type=1326 audit(5320.080:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 164.093814][ T27] audit: type=1326 audit(5320.080:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9695b9e8 code=0x7ffc0000 [ 175.264026][ T6657] loop2: detected capacity change from 0 to 32768 [ 175.281486][ T6657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.758 (6657) [ 175.296371][ T6657] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.298939][ T6657] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 175.303497][ T6657] BTRFS info (device loop2): using free space tree [ 175.371061][ T27] audit: type=1326 audit(5331.362:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 175.374697][ T27] audit: type=1326 audit(5331.362:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x7ffc0000 [ 175.380049][ T6657] BTRFS info (device loop2): enabling ssd optimizations [ 175.428990][ T6657] fs-verity: sha512 using implementation "sha512-ce" [ 176.639192][ T6657] fs-verity (loop2, inode 260): Error -4 building Merkle tree [ 176.649524][ T6657] BTRFS: error (device loop2) in rollback_verity:465: errno=-4 unknown (failed to drop verity items in rollback 260) [ 176.651458][ T6657] BTRFS info (device loop2: state E): forced readonly [ 176.653317][ T6657] BTRFS error (device loop2: state E): failed to rollback verity items: -4 [ 176.785771][ T4333] BTRFS info (device loop2: state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.350298][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.351340][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.579780][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.581074][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.800911][ T6846] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.828'. [ 189.802239][ T6846] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 189.917691][ T6856] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 191.834643][ T6928] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 191.843479][ T6928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.915429][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 191.916860][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 191.918323][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 191.920033][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 191.937338][ T6933] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.870'. [ 191.938747][ T6933] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.870'. [ 191.940661][ T6933] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.870'. [ 192.032331][ T6943] netlink: 'syz.4.875': attribute type 29 has an invalid length. [ 192.033648][ T6943] netlink: 'syz.4.875': attribute type 29 has an invalid length. [ 192.035470][ T6943] netlink: 'syz.4.875': attribute type 29 has an invalid length. [ 192.285408][ T6963] tipc: Enabling of bearer rejected, failed to enable media [ 192.450898][ T6977] netlink: 'syz.4.892': attribute type 10 has an invalid length. [ 192.886888][ T6981] tipc: Enabling of bearer rejected, failed to enable media [ 192.955685][ T6989] netlink: 'syz.4.898': attribute type 5 has an invalid length. [ 193.246257][ T7021] netlink: 60 bytes leftover after parsing attributes in process `syz.4.914'. [ 193.247739][ T7021] netlink: 60 bytes leftover after parsing attributes in process `syz.4.914'. [ 196.465142][ T7083] netlink: 'syz.4.944': attribute type 11 has an invalid length. [ 196.466369][ T7083] __nla_validate_parse: 3 callbacks suppressed [ 196.466382][ T7083] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.944'. [ 197.609449][ T7117] bond0: (slave dummy0): Error: Slave device does not support XDP [ 198.602148][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.964'. [ 198.603589][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.964'. [ 198.605168][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.964'. [ 198.732390][ T7140] netlink: 'syz.4.969': attribute type 10 has an invalid length. [ 198.733668][ T7140] netlink: 152 bytes leftover after parsing attributes in process `syz.4.969'. [ 198.735665][ T7140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 198.805033][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.973'. [ 198.806386][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.973'. [ 198.807905][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.973'. [ 198.810025][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.973'. [ 198.902387][ T7158] netlink: 'syz.4.978': attribute type 20 has an invalid length. [ 200.132830][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.134039][ T7202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.136197][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.137214][ T7202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.138533][ T7202] device bridge0 entered promiscuous mode [ 200.140755][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.651519][ T27] audit: type=1326 audit(5361.657:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.4.1065" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275b9e8 code=0x0 [ 207.291863][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 209.746139][ T28] INFO: task kworker/1:2:1515 blocked for more than 143 seconds. [ 209.747353][ T28] Not tainted syzkaller #0 [ 209.748097][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.749321][ T28] task:kworker/1:2 state:D stack:0 pid:1515 ppid:2 flags:0x00000008 [ 209.750644][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 209.751636][ T28] Call trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 209.752130][ T28] __switch_to+0x2f4/0x568 [ 209.752775][ T28] __schedule+0xddc/0x1b18 [ 209.753433][ T28] schedule+0xc4/0x170 [ 209.755684][ T28] schedule_preempt_disabled+0x18/0x2c [ 209.758970][ T28] __mutex_lock_common+0xad4/0x1f38 [ 209.759783][ T28] mutex_lock_nested+0x38/0x44 [ 209.760532][ T28] rfkill_global_led_trigger_worker+0x30/0xe4 [ 209.761454][ T28] process_one_work+0x7f4/0x13a8 [ 209.762213][ T28] worker_thread+0x8c8/0xfbc [ 209.762911][ T28] kthread+0x250/0x2d8 [ 209.763527][ T28] ret_from_fork+0x10/0x20 [ 209.764282][ T28] INFO: task syz.3.172:4960 blocked for more than 143 seconds. [ 209.765392][ T28] Not tainted syzkaller #0 [ 209.766593][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.767881][ T28] task:syz.3.172 state:D stack:0 pid:4960 ppid:4323 flags:0x0000000d [ 209.769312][ T28] Call trace: [ 209.769831][ T28] __switch_to+0x2f4/0x568 [ 209.770518][ T28] __schedule+0xddc/0x1b18 [ 209.771201][ T28] schedule+0xc4/0x170 [ 209.771851][ T28] schedule_preempt_disabled+0x18/0x2c [ 209.772691][ T28] __mutex_lock_common+0xad4/0x1f38 [ 209.773478][ T28] mutex_lock_nested+0x38/0x44 [ 209.774193][ T28] rfkill_unregister+0xb8/0x208 [ 209.775024][ T28] nfc_unregister_device+0x94/0x288 [ 209.775816][ T28] nci_unregister_device+0x1dc/0x21c [ 209.785662][ T28] virtual_ncidev_close+0x70/0xb0 [ 209.792814][ T28] __fput+0x1bc/0x7c0 [ 209.793416][ T28] ____fput+0x20/0x30 [ 209.793996][ T28] task_work_run+0x1ec/0x270 [ 209.794633][ T28] get_signal+0x1120/0x1310 [ 209.795251][ T28] do_notify_resume+0x34c/0x2b28 [ 209.798720][ T28] el0_svc+0x98/0x138 [ 209.799304][ T28] el0t_64_sync_handler+0x84/0xf0 [ 209.811115][ T28] el0t_64_sync+0x18c/0x190 [ 209.811988][ T28] INFO: task syz.1.179:4993 blocked for more than 143 seconds. [ 209.813019][ T28] Not tainted syzkaller #0 [ 209.813721][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.814869][ T28] task:syz.1.179 state:D stack:0 pid:4993 ppid:4327 flags:0x00000049 [ 209.824285][ T28] Call trace: [ 209.824877][ T28] __switch_to+0x2f4/0x568 [ 209.825653][ T28] __schedule+0xddc/0x1b18 [ 209.838267][ T28] schedule+0xc4/0x170 [ 209.838889][ T28] schedule_preempt_disabled+0x18/0x2c [ 209.839775][ T28] __mutex_lock_common+0xad4/0x1f38 [ 209.840546][ T28] mutex_lock_nested+0x38/0x44 [ 209.841185][ T28] nfc_rfkill_set_block+0x4c/0x2a8 [ 209.841868][ T28] rfkill_set_block+0x18c/0x374 [ 209.842544][ T28] rfkill_fop_write+0x488/0x5a4 [ 209.843174][ T28] vfs_write+0x29c/0x7c4 [ 209.843767][ T28] ksys_write+0x120/0x210 [ 209.844340][ T28] __arm64_sys_write+0x7c/0x90 [ 209.844962][ T28] invoke_syscall+0x98/0x2bc [ 209.845609][ T28] el0_svc_common+0x138/0x258 [ 209.853833][ T28] do_el0_svc+0x58/0x13c [ 209.854495][ T28] el0_svc+0x58/0x138 [ 209.855106][ T28] el0t_64_sync_handler+0x84/0xf0 [ 209.855910][ T28] el0t_64_sync+0x18c/0x190 [ 209.863023][ T28] INFO: task syz-executor:5624 blocked for more than 143 seconds. [ 209.864211][ T28] Not tainted syzkaller #0 [ 209.864937][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.874718][ T28] task:syz-executor state:D stack:0 pid:5624 ppid:1 flags:0x00000008 [ 209.878707][ T28] Call trace: [ 209.879238][ T28] __switch_to+0x2f4/0x568 [ 209.879916][ T28] __schedule+0xddc/0x1b18 [ 209.880621][ T28] schedule+0xc4/0x170 [ 209.881299][ T28] schedule_preempt_disabled+0x18/0x2c [ 209.882112][ T28] __mutex_lock_common+0xad4/0x1f38 [ 209.882894][ T28] mutex_lock_nested+0x38/0x44 [ 209.883598][ T28] rfkill_register+0x44/0x77c [ 209.884316][ T28] hci_register_dev+0x3e4/0x95c [ 209.885037][ T28] vhci_create_device+0x350/0x6cc [ 209.885801][ T28] vhci_write+0x30c/0x3ac [ 209.886952][ T28] vfs_write+0x5ac/0x7c4 [ 209.887615][ T28] ksys_write+0x120/0x210 [ 209.888287][ T28] __arm64_sys_write+0x7c/0x90 [ 209.889024][ T28] invoke_syscall+0x98/0x2bc [ 209.889740][ T28] el0_svc_common+0x138/0x258 [ 209.890458][ T28] do_el0_svc+0x58/0x13c [ 209.891149][ T28] el0_svc+0x58/0x138 [ 209.891745][ T28] el0t_64_sync_handler+0x84/0xf0 [ 209.892499][ T28] el0t_64_sync+0x18c/0x190 [ 209.893191][ T28] INFO: task syz-executor:5636 blocked for more than 143 seconds. [ 209.894347][ T28] Not tainted syzkaller #0 [ 209.894993][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.898932][ T28] task:syz-executor state:D stack:0 pid:5636 ppid:1 flags:0x00000008 [ 209.900302][ T28] Call trace: [ 209.900814][ T28] __switch_to+0x2f4/0x568 [ 209.901501][ T28] __schedule+0xddc/0x1b18 [ 209.902182][ T28] schedule+0xc4/0x170 [ 209.902810][ T28] schedule_preempt_disabled+0x18/0x2c [ 209.903638][ T28] __mutex_lock_common+0xad4/0x1f38 [ 209.904429][ T28] mutex_lock_nested+0x38/0x44 [ 209.905156][ T28] rfkill_register+0x44/0x77c [ 209.905854][ T28] hci_register_dev+0x3e4/0x95c [ 209.910738][ T28] vhci_create_device+0x350/0x6cc [ 209.911502][ T28] vhci_write+0x30c/0x3ac [ 209.912155][ T28] vfs_write+0x5ac/0x7c4 [ 209.912996][ T28] ksys_write+0x120/0x210 [ 209.913648][ T28] __arm64_sys_write+0x7c/0x90 [ 209.914357][ T28] invoke_syscall+0x98/0x2bc [ 209.915033][ T28] el0_svc_common+0x138/0x258 [ 209.915763][ T28] do_el0_svc+0x58/0x13c [ 209.919761][ T28] el0_svc+0x58/0x138 [ 209.920427][ T28] el0t_64_sync_handler+0x84/0xf0 [ 209.921253][ T28] el0t_64_sync+0x18c/0x190 [ 209.922003][ T28] [ 209.922003][ T28] Showing all locks held in the system: [ 209.923132][ T28] 1 lock held by rcu_tasks_kthre/12: [ 209.923891][ T28] #0: ffff800015297870 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 209.925456][ T28] 1 lock held by rcu_tasks_trace/13: [ 209.926284][ T28] #0: ffff800015298090 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 209.927832][ T28] 3 locks held by kworker/0:1/14: [ 209.928533][ T28] 1 lock held by khungtaskd/28: [ 209.929188][ T28] #0: ffff800015296f00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 209.930530][ T28] 3 locks held by kworker/1:2/1515: [ 209.931234][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 209.932809][ T28] #1: ffff8000251d7c20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 209.934724][ T28] #2: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x30/0xe4 [ 209.938762][ T28] 2 locks held by getty/4080: [ 209.939428][ T28] #0: ffff0000d65b1098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 209.940798][ T28] #1: ffff80001ce962f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c [ 209.942298][ T28] 2 locks held by syz.3.172/4960: [ 209.943013][ T28] #0: ffff0000dd17f100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x68/0x288 [ 209.944447][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 209.945955][ T28] 2 locks held by syz.1.179/4993: [ 209.946771][ T28] #0: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x21c/0x5a4 [ 209.948172][ T28] #1: ffff0000dd17f100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2a8 [ 209.949607][ T28] 1 lock held by syz.2.191/5053: [ 209.950306][ T28] #0: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 209.951799][ T28] 2 locks held by syz-executor/5624: [ 209.952537][ T28] #0: ffff0000d3212118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.954088][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.957488][ T28] 2 locks held by syz-executor/5636: [ 209.958323][ T28] #0: ffff0000d0da6118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.959965][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.961488][ T28] 1 lock held by syz.0.396/5667: [ 209.962256][ T28] #0: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 209.963716][ T28] 2 locks held by syz-executor/6455: [ 209.964427][ T28] #0: ffff0000d4110118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.965837][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.970029][ T28] 2 locks held by syz-executor/6457: [ 209.970794][ T28] #0: ffff0000dcf16118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.972301][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.973852][ T28] 3 locks held by kworker/1:9/6720: [ 209.974639][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 209.976319][ T28] #1: ffff800020e27c20 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 209.978227][ T28] #2: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_uevent_work+0x2c/0xb4 [ 209.979748][ T28] 2 locks held by syz-executor/6783: [ 209.980533][ T28] #0: ffff0000de770118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.982089][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.983598][ T28] 2 locks held by syz-executor/6784: [ 209.984317][ T28] #0: ffff0000f52d8118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.985788][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.989056][ T28] 2 locks held by syz-executor/7056: [ 209.989874][ T28] #0: ffff0000dd029118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.991373][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.992798][ T28] 2 locks held by syz-executor/7325: [ 209.993566][ T28] #0: ffff0000dce03118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 209.995010][ T28] #1: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 209.996516][ T28] 1 lock held by syz.4.1082/7389: [ 209.997223][ T28] #0: ffff8000179df8e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 209.998684][ T28] [ 209.999035][ T28] ============================================= [ 209.999035][ T28] [ 210.000182][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 210.001155][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 210.002143][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 210.003477][ T28] Call trace: [ 210.003929][ T28] dump_backtrace+0x1c8/0x1f4 [ 210.004606][ T28] show_stack+0x2c/0x3c [ 210.005210][ T28] __dump_stack+0x30/0x40 [ 210.005883][ T28] dump_stack_lvl+0xf8/0x160 [ 210.006536][ T28] dump_stack+0x1c/0x5c [ 210.007106][ T28] panic+0x2e0/0x79c [ 210.007668][ T28] hung_task_panic+0x0/0x2c [ 210.008277][ T28] kthread+0x250/0x2d8 [ 210.008824][ T28] ret_from_fork+0x10/0x20 [ 210.009409][ T28] SMP: stopping secondary CPUs [ 210.010025][ T28] Kernel Offset: disabled [ 210.010608][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 210.011376][ T28] Memory Limit: none [ 210.312968][ T28] Rebooting in 86400 seconds..