last executing test programs: 25.205706492s ago: executing program 0 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000240)=ANY=[], 0x3ff) 24.167746059s ago: executing program 0 (id=961): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005580)=@newtfilter={0x470, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xf00, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_police={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_POLICE={0xfffffffffffffead, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffffff81, 0xd, 0x7, 0x3ca0f2a, 0x4, 0x4, 0x7, 0x6, 0x5, 0x6, 0x3, 0x7f, 0x7, 0x3, 0x2, 0x7, 0x6, 0x401, 0x100, 0x4, 0xc7, 0x10001, 0xffff, 0x9, 0x6, 0x7f, 0xfffff990, 0xdf, 0xe, 0x1000, 0x6, 0xff, 0x9, 0x6, 0x6, 0xd50, 0x7, 0x0, 0x28, 0x100, 0x52, 0x8, 0x27fb, 0x5, 0xbe6, 0x9, 0x9, 0xfffffffd, 0x0, 0x6, 0x200, 0x7b7, 0x5, 0x1000, 0xffff, 0x55ed, 0x9, 0x2, 0x6, 0xf, 0x5, 0xff, 0x81, 0x3, 0x8, 0x5, 0xab5, 0x4, 0xc, 0x7, 0x3, 0x9, 0xffffffff, 0xa, 0xee, 0x3, 0x7fff, 0x7ff, 0xffffffff, 0xfffffffd, 0x4, 0x2, 0xfffffffc, 0x9, 0x3, 0xb023, 0x6, 0xd0b, 0x3767, 0x8, 0xfffff800, 0x3, 0x4, 0x13, 0x5, 0xf874, 0x1000, 0x9, 0x8, 0x81, 0x5, 0x7, 0x9, 0x8, 0x57b, 0x8, 0x4, 0x6, 0x3ff, 0xdc19, 0x8, 0xbbd4, 0x9, 0x6, 0x80000001, 0x10001, 0x66dc0, 0x8001, 0x7fffffff, 0x8001, 0xef8, 0x200, 0x7, 0x2, 0x7, 0x40, 0x6, 0x7, 0x2, 0x7, 0xc1, 0x2, 0x4, 0x9, 0x2, 0x3, 0x3, 0x9, 0x3, 0x8, 0x4, 0x3, 0x6, 0x6, 0x3, 0x0, 0x80, 0xff, 0x4, 0x8, 0x7, 0x4, 0x80, 0x7, 0x1, 0xd, 0xfffffffc, 0x3, 0x9, 0x6e3, 0x7, 0x3, 0x5, 0xb74, 0x6, 0x53, 0xf, 0x0, 0x15ec, 0x400, 0xffffffff, 0xfffffff8, 0x243, 0x6, 0x4, 0x7ff, 0xf, 0x2, 0xd, 0x9, 0x2f7e4da3, 0x1, 0x2dfc, 0x8, 0x400, 0xacf, 0xf, 0x6, 0x8, 0xfffffff6, 0x7, 0x0, 0x7b, 0x9, 0x80000001, 0xfffffff8, 0x5ae, 0xc, 0x4, 0x7, 0xab, 0x8, 0x8, 0x4, 0x7fffffff, 0x3, 0x2, 0x0, 0x1, 0x3, 0x1, 0x1, 0x7, 0x0, 0x3, 0x7b2, 0x3, 0x8000, 0x80000000, 0x6, 0x2, 0x0, 0x2dd, 0x2, 0x3ff, 0x3ff, 0xd015, 0xee, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x2, 0x80000000, 0x7f, 0x1, 0x9, 0x5, 0xfff, 0x7fffffff, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x6, 0x4, 0x1, 0x1, 0x0, 0xfffff0a8, 0x5, 0x1ff]}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x814}, 0x40c4) 23.923347392s ago: executing program 0 (id=967): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) fspick(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04480000f160"], 0x6) 23.061046089s ago: executing program 0 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 21.905684682s ago: executing program 0 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xf89}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.919069723s ago: executing program 0 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xf89}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.222589835s ago: executing program 3 (id=1044): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6.131741355s ago: executing program 3 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) 5.684833809s ago: executing program 3 (id=1051): socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751478af9c62f", 0x40, 0xfffffffffffffffc) 4.238415448s ago: executing program 1 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x160, 0xfffffffffffffe3a, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.237093388s ago: executing program 4 (id=1054): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x1}, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.227559659s ago: executing program 2 (id=1055): socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.145548283s ago: executing program 2 (id=1056): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") ioctl$BLKPBSZGET(r0, 0x80041284, &(0x7f0000000000)) 2.18775529s ago: executing program 3 (id=1057): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r1], 0xe8) 2.18674919s ago: executing program 1 (id=1058): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 1.830389929s ago: executing program 2 (id=1059): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20008004) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) read(r2, &(0x7f0000009180)=""/77, 0x4d) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000080)={0x7, 'gre0\x00', {0x80}, 0xd891}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x8010) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e23, 0x3, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.804608441s ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r6, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 1.790020262s ago: executing program 1 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000001c"], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 1.769840103s ago: executing program 2 (id=1062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, 0xe) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1.754655374s ago: executing program 4 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 1.728028146s ago: executing program 1 (id=1064): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="a55fddbfe2936c319a42572fc38e64f1e473fd9f6c6448d350", 0x19}], 0x1, 0x0, 0x0, 0x40}, 0x20008404) tee(r1, r0, 0xff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 1.64928392s ago: executing program 4 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x0, 0x3ffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x5000000, 0x0, 0x0, 0x0) 1.64800738s ago: executing program 2 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.551725125s ago: executing program 1 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 997.524816ms ago: executing program 3 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 417.747387ms ago: executing program 4 (id=1068): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="c2416441277dff4e7798"], 0x8) connect$inet6(r0, 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x98, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e2", 0x14) 409.750947ms ago: executing program 1 (id=1069): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 405.801637ms ago: executing program 2 (id=1070): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) 361.99696ms ago: executing program 4 (id=1071): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) tee(r2, r5, 0x4e, 0x0) write$binfmt_script(r5, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r4, r3, 0x9, 0x8) getdents64(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r0, 0x4, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1_vlan: link becomes ready [ 35.507063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.514031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.515369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.517571][ T4327] device veth0_vlan entered promiscuous mode [ 35.529576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.532235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.535568][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.536720][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.541712][ T4321] device veth0_macvtap entered promiscuous mode [ 35.544343][ T4327] device veth1_vlan entered promiscuous mode [ 35.545864][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.547489][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.549794][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.556693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.559243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.560722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.563511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.564944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.567013][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.568644][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.570187][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.572852][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.574991][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.576884][ T4321] device veth1_macvtap entered promiscuous mode [ 35.580644][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.581996][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.584991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.586498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.588068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.589634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.592164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.596104][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.597704][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.599800][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.607122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.608667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.615084][ T4327] device veth0_macvtap entered promiscuous mode [ 35.617350][ T4327] device veth1_macvtap entered promiscuous mode [ 35.618714][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.620438][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.623196][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.624841][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.627725][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.629294][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.630724][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.636705][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.637968][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.640902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.642745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.644288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.645621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.647187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.649933][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.652116][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.653575][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.655165][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.656620][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.658145][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.660780][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.663973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.665448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.667067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.668989][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.670341][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.673516][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.674936][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.706995][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.708604][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.710165][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.712504][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.714078][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.715905][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.718130][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.726287][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.728270][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.729982][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.732110][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.733634][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.735322][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.736793][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.738695][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.740956][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.747419][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.749077][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.750439][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.752768][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.794789][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.796176][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.797463][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.798711][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.818744][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.819990][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.821973][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.823483][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.825028][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.826461][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.827860][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.829455][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.830803][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.836081][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.838215][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.842285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.844089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.845647][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.866349][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.867880][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.870082][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.874743][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.899745][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.901258][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.902448][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.906918][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.917522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.919154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.974873][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.976194][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.980091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.981737][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.982968][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.985659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.076914][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.078261][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.080085][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.083469][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.086125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.092993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.136995][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.138353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.140750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.560202][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.627682][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.651705][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 36.651853][ T4323] Bluetooth: hci4: command 0x041b tx timeout [ 36.652701][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 36.653875][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 36.654566][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 37.893971][ T4462] loop1: detected capacity change from 0 to 32768 [ 37.917555][ T4462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12 (4462) [ 38.027844][ T4485] loop3: detected capacity change from 0 to 256 [ 38.046301][ T4485] exfat: Deprecated parameter 'utf8' [ 38.047257][ T4485] exfat: Deprecated parameter 'namecase' [ 38.079661][ T4485] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 38.386878][ T4441] loop0: detected capacity change from 0 to 131072 [ 38.387057][ T4462] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 38.390113][ T4441] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 38.392466][ T4441] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 38.395685][ T4441] F2FS-fs (loop0): invalid crc value [ 38.397710][ T4462] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 38.402493][ T4441] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.404765][ T4462] BTRFS info (device loop1): turning off barriers [ 38.405806][ T4462] BTRFS info (device loop1): setting nodatasum [ 38.406900][ T4462] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 38.419430][ T4441] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 38.420637][ T4441] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 38.432889][ T4462] BTRFS info (device loop1): use zstd compression, level 3 [ 38.434019][ T4462] BTRFS info (device loop1): using free space tree [ 38.731384][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 38.732493][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 38.733585][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 38.735104][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 38.736397][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 39.069381][ T4321] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.564987][ T4539] loop4: detected capacity change from 0 to 2048 [ 39.605812][ T4539] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 39.612962][ T4539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.385454][ T4562] loop3: detected capacity change from 0 to 2048 [ 41.393765][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 41.393788][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 41.396150][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 41.396829][ T4329] Bluetooth: hci4: command 0x0419 tx timeout [ 41.396973][ T4323] Bluetooth: hci1: command 0x0419 tx timeout [ 41.427264][ T4562] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 41.428509][ T4562] UDF-fs: Scanning with blocksize 512 failed [ 41.432918][ T4562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.452432][ T4560] overlayfs: upper fs needs to support d_type. [ 41.454372][ T4560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.455448][ T4560] overlayfs: failed to set xattr on upper [ 41.456321][ T4560] overlayfs: ...falling back to index=off,metacopy=off. [ 41.463370][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 41.532434][ T4573] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 42.087212][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 42.158513][ T4579] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 42.160563][ T4581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.161788][ T4581] IPv6: NLM_F_CREATE should be set when creating new route [ 42.162838][ T4581] IPv6: NLM_F_CREATE should be set when creating new route [ 42.164135][ T4581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.212542][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.213915][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.215162][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.217033][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.218243][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.231096][ T4531] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.422946][ T4531] usb 1-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 42.424505][ T4531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.428134][ T4531] usb 1-1: config 0 descriptor?? [ 42.521394][ T4581] Zero length message leads to an empty skb [ 42.658110][ T4568] kernel profiling enabled (shift: 11) [ 42.664960][ T4531] usbhid 1-1:0.0: can't add hid device: -71 [ 42.666143][ T4531] usbhid: probe of 1-1:0.0 failed with error -71 [ 42.669377][ T4531] usb 1-1: USB disconnect, device number 2 [ 42.681390][ T4589] loop4: detected capacity change from 0 to 32768 [ 44.519093][ T4616] Set syz0 is full, maxelem 0 reached [ 45.281381][ T3897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.523996][ T3897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.525868][ T3897] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 45.526998][ T3897] usb 1-1: can't read configurations, error -71 [ 45.563812][ T4637] loop1: detected capacity change from 0 to 8192 [ 45.570806][ T4637] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.573388][ T4637] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 45.574995][ T4637] REISERFS (device loop1): using ordered data mode [ 45.576020][ T4637] reiserfs: using flush barriers [ 45.577390][ T4637] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.580709][ T4637] REISERFS (device loop1): checking transaction log (loop1) [ 45.584791][ T4637] REISERFS (device loop1): Using r5 hash to sort names [ 45.586632][ T4637] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 45.630405][ T4640] loop3: detected capacity change from 0 to 4096 [ 45.636433][ T4640] ntfs3: Unknown parameter 'windows_names' [ 45.875071][ T4648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'. [ 47.119465][ T4664] loop0: detected capacity change from 0 to 2048 [ 47.324402][ T4664] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 47.325647][ T4664] UDF-fs: Scanning with blocksize 512 failed [ 47.369308][ T4664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.517117][ T4664] overlayfs: upper fs needs to support d_type. [ 47.521143][ T4664] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.522558][ T4664] overlayfs: failed to set xattr on upper [ 47.523574][ T4664] overlayfs: ...falling back to index=off,metacopy=off. [ 47.867939][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.949085][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.950341][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.968216][ T4669] device bridge_slave_0 left promiscuous mode [ 47.969973][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.016564][ T4671] sched: RT throttling activated [ 48.260276][ T4669] device bridge_slave_1 left promiscuous mode [ 48.261584][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.343730][ T4669] bond0: (slave bond_slave_0): Releasing backup interface [ 48.402664][ T4669] bond0: (slave bond_slave_1): Releasing backup interface [ 48.473693][ T4669] team0: Failed to send options change via netlink (err -105) [ 48.495320][ T4669] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 48.497597][ T4669] team0: Port device team_slave_0 removed [ 48.536027][ T4669] team0: Failed to send options change via netlink (err -105) [ 48.539717][ T4669] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 48.543799][ T4669] team0: Port device team_slave_1 removed [ 48.556141][ T4674] team0: Failed to send options change via netlink (err -105) [ 48.557992][ T4674] team0: Mode changed to "activebackup" [ 49.074252][ T4681] binfmt_misc: register: failed to install interpreter file ./file0 [ 49.783617][ T4334] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 49.785694][ T4334] Bluetooth: hci1: Injecting HCI hardware error event [ 49.789145][ T4334] Bluetooth: hci1: hardware error 0x00 [ 49.924257][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 49.944921][ T4697] loop2: detected capacity change from 0 to 512 [ 49.951331][ T4697] ======================================================= [ 49.951331][ T4697] WARNING: The mand mount option has been deprecated and [ 49.951331][ T4697] and is ignored by this kernel. Remove the mand [ 49.951331][ T4697] option from the mount to silence this warning. [ 49.951331][ T4697] ======================================================= [ 49.970777][ T4697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.979486][ T4699] process 'syz.4.69' launched '/dev/fd/3' with NULL argv: empty string added [ 50.003336][ T4697] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 50.022029][ T4697] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.67: invalid indirect mapped block 1 (level 1) [ 50.045301][ T4697] EXT4-fs (loop2): 1 truncate cleaned up [ 50.047460][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.142546][ T4707] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 50.145449][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'. [ 50.238714][ T4645] Set syz1 is full, maxelem 65536 reached [ 50.315007][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 50.317323][ T4715] device veth0_macvtap left promiscuous mode [ 51.176398][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 51.519832][ T4750] Injecting memory failure for pfn 0x132dbc at process virtual address 0x20003000 [ 51.522987][ T4750] Memory failure: 0x132dbc: Failed to invalidate [ 51.524178][ T4750] Memory failure: 0x132dbc: clean unevictable LRU page still referenced by 2 users [ 51.526663][ T4750] Memory failure: 0x132dbc: recovery action for clean unevictable LRU page: Failed [ 52.021272][ T4334] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 52.885170][ T4769] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 52.907911][ T4769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.930183][ T4769] team0: Port device bond0 added [ 55.479429][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.498222][ T4812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 55.593806][ T4814] loop2: detected capacity change from 0 to 32768 [ 55.604406][ T4814] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.109 (4814) [ 55.617581][ T4814] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 55.619339][ T4814] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 55.620696][ T4814] BTRFS info (device loop2): using free space tree [ 55.706241][ T4814] BTRFS info (device loop2): enabling ssd optimizations [ 55.835047][ T4328] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 56.895538][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.897616][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.898752][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.900584][ T4874] device bridge_slave_0 left promiscuous mode [ 56.901833][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.938858][ T4874] device bridge_slave_1 left promiscuous mode [ 56.943019][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.340515][ T4874] bond0: (slave bond_slave_0): Releasing backup interface [ 57.395627][ T4874] bond0: (slave bond_slave_1): Releasing backup interface [ 57.758174][ T4874] team0: Port device team_slave_0 removed [ 58.085571][ T4874] team0: Port device team_slave_1 removed [ 58.086848][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.088055][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.089867][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.091594][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.174869][ T4878] team0: Mode changed to "activebackup" [ 60.003933][ T4916] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 60.024107][ T4916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 60.196131][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 60.200648][ T4926] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 60.559551][ T4924] bond1: (slave gretap1): making interface the new active one [ 60.570940][ T4924] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 60.594130][ T4926] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 60.967223][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.994769][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.995994][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.997922][ T4937] device bridge_slave_0 left promiscuous mode [ 60.998993][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.032306][ T4937] device bridge_slave_1 left promiscuous mode [ 61.033363][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.073578][ T4937] bond0: (slave bond_slave_0): Releasing backup interface [ 61.106540][ T4937] bond0: (slave bond_slave_1): Releasing backup interface [ 61.158872][ T4937] team0: Failed to send options change via netlink (err -105) [ 61.160253][ T4937] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 61.162300][ T4945] loop0: detected capacity change from 0 to 32768 [ 61.164098][ T4937] team0: Port device team_slave_0 removed [ 61.169658][ T4945] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.141 (4945) [ 61.172709][ T4937] team0: Failed to send options change via netlink (err -105) [ 61.174365][ T4937] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 61.179771][ T4937] team0: Port device team_slave_1 removed [ 61.184570][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.185700][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.187423][ T4945] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.187812][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.190346][ T4945] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 61.190417][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.194213][ T4945] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 61.197338][ T4945] BTRFS info (device loop0): trying to use backup root at mount time [ 61.204129][ T4945] BTRFS info (device loop0): setting nodatasum [ 61.205059][ T4945] BTRFS info (device loop0): force zlib compression, level 3 [ 61.209722][ T4945] BTRFS info (device loop0): setting nodatacow [ 61.213190][ T4945] BTRFS info (device loop0): turning on flush-on-commit [ 61.215359][ T4945] BTRFS info (device loop0): disabling tree log [ 61.217358][ T4945] BTRFS info (device loop0): using free space tree [ 61.726220][ T4945] BTRFS info (device loop0): enabling ssd optimizations [ 61.772713][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 62.310477][ T4995] loop2: detected capacity change from 0 to 1024 [ 62.342226][ T4995] hfsplus: catalog name length corrupted [ 63.249202][ T5019] loop1: detected capacity change from 0 to 1024 [ 63.255664][ T5019] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 63.325398][ T5022] loop1: detected capacity change from 0 to 1024 [ 63.377715][ T5020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.387575][ T5022] EXT4-fs (loop1): Test dummy encryption mode enabled [ 63.404120][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.447181][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 64.004456][ T4320] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.552271][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.555612][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.337369][ T5067] binder: 5066:5067 tried to acquire reference to desc 0, got 1 instead [ 65.339882][ T5067] binder: tried to use weak ref as strong ref [ 65.340920][ T5067] binder: 5066:5067 got transaction to invalid handle, 1 [ 65.343144][ T5067] binder: 5067:5066 cannot find target node [ 65.344282][ T5067] binder: 5066:5067 transaction call to 0:0 failed 12/29201/-22, size 0-0 line 3045 [ 65.347819][ T4375] binder: release 5066:5067 transaction 5 out, still active [ 65.349485][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 65.371752][ T4850] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.372856][ T4850] binder: send failed reply for transaction 5, target dead [ 65.758370][ T5077] loop4: detected capacity change from 0 to 256 [ 66.534138][ T5085] loop2: detected capacity change from 0 to 256 [ 66.543304][ T5085] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.544932][ T5085] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 66.927058][ T5085] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d) [ 67.763668][ T5115] netlink: 'syz.2.191': attribute type 27 has an invalid length. [ 67.765116][ T5115] netlink: 'syz.2.191': attribute type 4 has an invalid length. [ 67.766567][ T5115] netlink: 144 bytes leftover after parsing attributes in process `syz.2.191'. [ 67.853879][ T5119] loop3: detected capacity change from 0 to 2364 [ 67.862883][ T5119] isofs_fill_super: bread failed, dev=loop3, iso_blknum=4111, block=8222 [ 67.960864][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 68.052493][ T5126] netlink: 'syz.3.196': attribute type 4 has an invalid length. [ 68.567124][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 68.599062][ T5137] device veth3 entered promiscuous mode [ 68.602637][ T5137] bridge1: port 1(veth3) entered blocking state [ 68.604031][ T5137] bridge1: port 1(veth3) entered disabled state [ 68.606378][ T5137] bridge1: port 1(veth3) entered blocking state [ 68.607503][ T5137] bridge1: port 1(veth3) entered forwarding state [ 68.620126][ T5139] binder: 5138:5139 tried to acquire reference to desc 0, got 1 instead [ 68.622827][ T4850] binder: release 5138:5139 transaction 17 out, still active [ 68.623946][ T4850] binder: undelivered TRANSACTION_COMPLETE [ 68.638429][ T5137] device veth5 entered promiscuous mode [ 68.640286][ T5137] bridge1: port 2(veth5) entered blocking state [ 68.641343][ T4850] binder: send failed reply for transaction 17, target dead [ 68.650258][ T5137] bridge1: port 2(veth5) entered disabled state [ 68.654521][ T5137] bridge1: port 2(veth5) entered blocking state [ 68.655468][ T5137] bridge1: port 2(veth5) entered forwarding state [ 68.658058][ T4470] bridge1: port 1(veth3) entered disabled state [ 68.662079][ T4470] bridge1: port 2(veth5) entered disabled state [ 69.758861][ T111] cfg80211: failed to load regulatory.db [ 69.954131][ T5159] loop1: detected capacity change from 0 to 512 [ 69.957852][ T5163] loop2: detected capacity change from 0 to 2048 [ 69.962029][ T5163] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 70.320624][ T5173] loop3: detected capacity change from 0 to 164 [ 70.386674][ T5173] isofs_fill_super: root inode is not a directory. Corrupted media? [ 70.470207][ T4312] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.631416][ T5159] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.150025][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 71.186015][ T5185] device syzkaller0 entered promiscuous mode [ 71.345673][ T5188] loop1: detected capacity change from 0 to 4096 [ 71.366012][ T5188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.702655][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 71.750602][ T5205] loop2: detected capacity change from 0 to 2048 [ 71.768371][ T5205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.773176][ T5205] EXT4-fs (loop2): resizing filesystem from 256 to 0 blocks [ 71.776658][ T5205] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 72.362536][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 72.759611][ T27] audit: type=1326 audit(72.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.4.225" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x0 [ 72.946342][ T5236] loop0: detected capacity change from 0 to 164 [ 72.957475][ T5236] isofs_fill_super: root inode is not a directory. Corrupted media? [ 74.047645][ T5244] loop3: detected capacity change from 0 to 1024 [ 74.104993][ T5244] hfsplus: failed to load catalog file [ 74.555524][ T5260] loop1: detected capacity change from 0 to 16 [ 76.116618][ T5260] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.152185][ T5258] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 76.153934][ T5258] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 76.219163][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 76.821680][ T5281] Invalid option length (1032005) for dns_resolver key [ 77.224473][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 77.515859][ T5283] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.517392][ T5283] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.518795][ T5283] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.520227][ T5283] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.533218][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 77.636778][ T5300] loop1: detected capacity change from 0 to 8192 [ 77.667038][ T5300] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 77.668257][ T5300] FAT-fs (loop1): Filesystem has been set read-only [ 77.672487][ T5300] overlayfs: unrecognized mount option "mask=MAY_APPEND" or missing value [ 77.856643][ T5305] binder: 5304:5305 tried to acquire reference to desc 0, got 1 instead [ 77.858369][ T5305] binder: 5304:5305 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.860254][ T5305] binder: 5305 RLIMIT_NICE not set [ 77.861361][ T5305] binder: 5305 RLIMIT_NICE not set [ 77.862677][ T5305] binder: 5304:5305 got reply transaction with bad transaction stack, transaction 27 has target 5304:5305 [ 77.864807][ T5305] binder: 5304:5305 transaction reply to 0:0 failed 28/29201/-71, size 0-0 line 2961 [ 77.866749][ T4472] binder: release 5304:5305 transaction 27 out, still active [ 77.867992][ T4472] binder: undelivered TRANSACTION_COMPLETE [ 77.869104][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.877809][ T4472] binder: release 5304:5305 transaction 27 in, still active [ 77.879071][ T4472] binder: send failed reply for transaction 27, target dead [ 79.135263][ T5313] device syzkaller1 entered promiscuous mode [ 79.319912][ T5331] loop1: detected capacity change from 0 to 256 [ 81.326170][ T5352] binder: 5351:5352 tried to acquire reference to desc 0, got 1 instead [ 81.328299][ T5352] binder: 5351:5352 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.330544][ T5352] binder: 5352 RLIMIT_NICE not set [ 81.333546][ T5350] device vlan2 entered promiscuous mode [ 81.335325][ T5352] binder: 5352 RLIMIT_NICE not set [ 81.337458][ T5352] binder: 5351:5352 got new transaction with bad transaction stack, transaction 33 has target 5351:5352 [ 81.339375][ T5352] binder: 5351:5352 transaction call to 5351:0 failed 34/29201/-71, size 0-0 line 3105 [ 81.346488][ T4375] binder: release 5351:5352 transaction 33 out, still active [ 81.347793][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 81.348748][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.378559][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 81.390856][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 81.483668][ T5358] netlink: 'syz.2.266': attribute type 11 has an invalid length. [ 81.502661][ T5358] netlink: 'syz.2.266': attribute type 11 has an invalid length. [ 82.622213][ T27] audit: type=1326 audit(82.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5377 comm="syz.2.273" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x0 [ 82.987672][ T5386] binder: 5384:5386 tried to acquire reference to desc 0, got 1 instead [ 82.989670][ T5386] binder: 5384:5386 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 83.011084][ T5386] binder: 5386 RLIMIT_NICE not set [ 83.011970][ T5386] binder: 5386 RLIMIT_NICE not set [ 83.020674][ T5386] binder: 5384:5386 got new transaction with bad transaction stack, transaction 39 has target 5384:5386 [ 83.022378][ T5386] binder_debug: 2 callbacks suppressed [ 83.022387][ T5386] binder: 5384:5386 transaction call to 5384:0 failed 40/29201/-71, size 0-0 line 3105 [ 83.026126][ T4412] binder: release 5384:5386 transaction 39 out, still active [ 83.027454][ T4412] binder: undelivered TRANSACTION_COMPLETE [ 83.028426][ T4412] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.036843][ T5390] loop3: detected capacity change from 0 to 256 [ 83.037237][ T111] binder: release 5384:5386 transaction 39 in, still active [ 83.039069][ T111] binder: send failed reply for transaction 39, target dead [ 83.041672][ T5390] exfat: Deprecated parameter 'utf8' [ 83.068689][ T5390] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 83.495083][ T5399] binder: 5398:5399 tried to acquire reference to desc 0, got 1 instead [ 83.496960][ T5399] binder: 5398:5399 got reply transaction with bad transaction stack, transaction 45 has target 5398:0 [ 83.498646][ T5399] binder: 5398:5399 transaction reply to 0:0 failed 46/29201/-71, size 0-0 line 2961 [ 83.500797][ T5399] binder: 5398:5399 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 83.515102][ T5399] binder: 5399 RLIMIT_NICE not set [ 83.516257][ T5399] binder: 5399 RLIMIT_NICE not set [ 83.518096][ T5399] binder_alloc: 5398: binder_alloc_buf, no vma [ 83.519211][ T5399] binder: cannot allocate buffer: vma cleared, target dead or dying [ 83.519259][ T5399] binder: 5398:5399 transaction reply to 5398:5399 failed 47/29189/-3, size 0-0 line 3230 [ 83.523248][ T5399] binder: send failed reply for transaction 45 to 5398:5399 [ 85.384159][ T5396] binder: 5395:5396 ioctl c0306201 0 returned -14 [ 85.404013][ T5432] batman_adv: batadv0: Adding interface: dummy0 [ 85.405007][ T5432] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.409426][ T5432] batman_adv: batadv0: Interface activated: dummy0 [ 85.414851][ T5433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 85.430926][ T5428] device syzkaller0 entered promiscuous mode [ 85.741553][ T5432] batadv0: mtu less than device minimum [ 85.744146][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.747283][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.750262][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.753335][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.756307][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.759208][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.762113][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.765026][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.767927][ T5432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.832418][ T5396] loop3: detected capacity change from 0 to 40427 [ 85.834531][ T5396] F2FS-fs (loop3): invalid crc value [ 85.916278][ T5396] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.937822][ T5396] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 85.939494][ T5396] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 85.955115][ T5396] binder: 5395:5396 ioctl c0306201 0 returned -14 [ 86.377463][ T5453] device syzkaller0 entered promiscuous mode [ 88.733664][ T5482] loop4: detected capacity change from 0 to 512 [ 88.749093][ T5478] device syzkaller1 entered promiscuous mode [ 88.755069][ T5482] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 88.794607][ T5482] EXT4-fs (loop4): invalid journal inode [ 88.795703][ T5482] EXT4-fs (loop4): can't get journal size [ 88.808647][ T5482] EXT4-fs (loop4): 1 truncate cleaned up [ 88.810267][ T5482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.662621][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 89.866363][ T5502] device syzkaller0 entered promiscuous mode [ 90.122417][ T5502] tipc: Started in network mode [ 90.123822][ T5502] tipc: Node identity 6a0bc4af3169, cluster identity 4711 [ 90.125624][ T5502] tipc: Enabled bearer , priority 0 [ 90.128211][ T5497] tipc: Resetting bearer [ 90.158247][ T5510] loop2: detected capacity change from 0 to 512 [ 90.176610][ T5510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.224288][ T5497] tipc: Disabling bearer [ 90.314011][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 90.364511][ T5516] loop4: detected capacity change from 0 to 1024 [ 90.385967][ T5516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.878784][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.884261][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.933440][ T5527] binder_user_error: 1 callbacks suppressed [ 90.933451][ T5527] binder: 5526:5527 tried to acquire reference to desc 0, got 1 instead [ 90.939981][ T4375] binder_debug: 4 callbacks suppressed [ 90.939989][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 90.953439][ T4375] binder: undelivered transaction 52, process died. [ 90.970257][ T5532] device ipip0 entered promiscuous mode [ 91.154949][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 92.328728][ T5567] fuse: Bad value for 'fd' [ 92.774152][ T5581] team0: No ports can be present during mode change [ 94.160852][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.162654][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.238513][ T5591] block nbd1: shutting down sockets [ 94.328090][ T5610] binder: 5609:5610 tried to acquire reference to desc 0, got 1 instead [ 94.340049][ T5610] binder: 5609:5610 got transaction with invalid data ptr [ 94.343454][ T5610] binder: 5609:5610 transaction async to 5609:0 failed 63/29201/-14, size 0-24 line 3333 [ 94.350060][ T5610] binder: 5609:5610 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.427214][ T5610] binder: 5610 RLIMIT_NICE not set [ 94.434370][ T5610] binder: 5610 RLIMIT_NICE not set [ 94.435178][ T5610] binder: send failed reply for transaction 64 to 5609:5615 [ 94.436406][ T5610] binder: 5609:5610 ioctl c0306201 20000680 returned -14 [ 94.443392][ T4412] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.444412][ T4412] binder: undelivered TRANSACTION_COMPLETE [ 94.445318][ T4412] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.973692][ T5618] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 94.976086][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.977379][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.988787][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.990772][ T5618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.991996][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.993025][ T5618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.000255][ T5618] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.030717][ T5624] tipc: Started in network mode [ 95.037074][ T5624] tipc: Node identity 4, cluster identity 4711 [ 95.038028][ T5624] tipc: Node number set to 4 [ 95.040353][ T5626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 95.055634][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 95.582656][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 95.831691][ T27] audit: type=1326 audit(95.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 95.837648][ T27] audit: type=1326 audit(95.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 95.844280][ T27] audit: type=1326 audit(95.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 95.850752][ T27] audit: type=1326 audit(95.820:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 95.925770][ T5644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.143641][ T27] audit: type=1326 audit(95.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 96.146889][ T27] audit: type=1326 audit(95.820:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 96.150506][ T27] audit: type=1326 audit(95.820:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 96.155884][ T27] audit: type=1326 audit(95.820:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 96.159294][ T27] audit: type=1326 audit(95.820:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 96.195363][ T27] audit: type=1326 audit(95.820:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90f78fa8 code=0x7fc00000 [ 96.577099][ T5660] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 96.578535][ T5660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.358'. [ 96.586867][ T5660] batman_adv: batadv0: Adding interface: vlan1 [ 96.588040][ T5660] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.593164][ T5660] batman_adv: batadv0: Interface activated: vlan1 [ 96.720678][ T5662] fuse: Bad value for 'fd' [ 96.723615][ T5662] fuse: Bad value for 'fd' [ 96.750448][ T5653] loop1: detected capacity change from 0 to 32768 [ 96.755354][ T5653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.357 (5653) [ 96.761690][ T5653] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.763484][ T5653] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 96.764858][ T5653] BTRFS info (device loop1): force clearing of disk cache [ 96.765976][ T5653] BTRFS info (device loop1): enabling auto defrag [ 96.766924][ T5653] BTRFS info (device loop1): enabling ssd optimizations [ 96.768152][ T5653] BTRFS info (device loop1): max_inline at 0 [ 96.769142][ T5653] BTRFS info (device loop1): enabling disk space caching [ 96.770240][ T5653] BTRFS info (device loop1): disk space caching is enabled [ 96.782950][ T5653] BTRFS info (device loop1): rebuilding free space tree [ 96.806921][ T5653] BTRFS info (device loop1): disabling free space tree [ 96.808374][ T5653] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.810930][ T5653] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.335181][ T4321] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.855754][ T51] block nbd0: Attempted send on invalid socket [ 97.857009][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 98.651572][ T5709] loop4: detected capacity change from 0 to 128 [ 98.736077][ T5709] hpfs: Bad version 183,140. Mount readonly to go around [ 98.737252][ T5709] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 100.011938][ T5749] capability: warning: `syz.1.378' uses deprecated v2 capabilities in a way that may be insecure [ 100.333551][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 100.338067][ T5767] net_ratelimit: 10 callbacks suppressed [ 100.338077][ T5767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.244471][ T5791] loop4: detected capacity change from 0 to 32768 [ 101.248001][ T5791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.390 (5791) [ 101.252613][ T5791] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.254364][ T5791] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 101.255793][ T5791] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 101.257577][ T5791] BTRFS info (device loop4): trying to use backup root at mount time [ 101.258907][ T5791] BTRFS info (device loop4): using free space tree [ 101.267367][ T4914] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 101.273971][ T5791] BTRFS warning (device loop4): couldn't read tree root [ 101.275069][ T5791] BTRFS warning (device loop4): try to load backup roots slot 1 [ 101.277880][ T4633] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 101.288804][ T5791] BTRFS warning (device loop4): failed to read root (objectid=9): -5 [ 101.290156][ T5791] BTRFS warning (device loop4): try to load backup roots slot 2 [ 101.292110][ T4914] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 101.297481][ T5791] BTRFS warning (device loop4): couldn't read tree root [ 101.298853][ T5791] BTRFS warning (device loop4): try to load backup roots slot 3 [ 101.300531][ T5791] BTRFS warning (device loop4): global root 2 0 already exists [ 101.302517][ T5791] BTRFS error (device loop4): failed to load root extent [ 101.384185][ T5791] BTRFS error (device loop4): open_ctree failed: -22 [ 101.732481][ T5828] device syzkaller0 entered promiscuous mode [ 101.757314][ T5830] loop4: detected capacity change from 0 to 4096 [ 101.762964][ T5830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.844847][ T5830] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 101.848618][ T5830] __quota_error: 90 callbacks suppressed [ 101.848627][ T5830] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 101.851432][ T5830] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 101.852907][ T5830] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.400: Failed to acquire dquot type 1 [ 101.887144][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 102.021991][ T4914] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.048166][ T4323] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 102.859068][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.863129][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.113475][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.154712][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.156288][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.193328][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.204581][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.033807][ T5889] loop4: detected capacity change from 0 to 128 [ 105.059204][ T5889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.159585][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.421'. [ 105.182552][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 105.500260][ T5902] device macvlan2 entered promiscuous mode [ 105.514701][ T5902] device bond2 entered promiscuous mode [ 105.551987][ T5889] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-ce" [ 105.554158][ T5902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.557165][ T5889] fscrypt: AES-128-CBC-ESSIV using implementation "essiv-cbc-aes-sha256-ce" [ 105.581952][ T5902] device bond2 left promiscuous mode [ 105.582592][ T5889] fscrypt: loop4: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 105.611847][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 106.245707][ T5924] tipc: Enabling of bearer rejected, failed to enable media [ 106.989436][ T5942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.477380][ C1] vcan0: j1939_tp_rxtimer: 0x00000000681b18dd: rx timeout, send abort [ 107.977936][ C1] vcan0: j1939_tp_rxtimer: 0x000000009300ff4d: rx timeout, send abort [ 107.979699][ C1] vcan0: j1939_tp_rxtimer: 0x00000000681b18dd: abort rx timeout. Force session deactivation [ 108.030947][ T5959] loop4: detected capacity change from 0 to 128 [ 108.141422][ T4310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.479170][ C1] vcan0: j1939_tp_rxtimer: 0x000000009300ff4d: abort rx timeout. Force session deactivation [ 110.090043][ T6003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.425147][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.427466][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.429205][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.430773][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.434597][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.435888][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.515857][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.517558][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.573285][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 110.614327][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.616128][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.635135][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.636348][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.637900][ T6006] device bridge_slave_0 entered promiscuous mode [ 110.640189][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.641705][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.643287][ T6006] device bridge_slave_1 entered promiscuous mode [ 110.651980][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.654704][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.666083][ T6006] team0: Port device team_slave_0 added [ 110.707864][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.709609][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.715008][ T6006] team0: Port device team_slave_1 added [ 110.720850][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.724165][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.733133][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.736720][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.739913][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.748310][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.912514][ T6006] device hsr_slave_0 entered promiscuous mode [ 111.167864][ T6006] device hsr_slave_1 entered promiscuous mode [ 111.221392][ T6006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.224432][ T6006] Cannot create hsr debugfs directory [ 111.332343][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.334065][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.807449][ T6035] binder: 6034:6035 tried to acquire reference to desc 0, got 1 instead [ 111.809693][ T4330] binder: undelivered TRANSACTION_COMPLETE [ 111.818187][ T4330] binder: undelivered transaction 69, process died. [ 112.492255][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 113.077982][ T6062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.987931][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 115.179212][ T6121] loop2: detected capacity change from 0 to 512 [ 115.217476][ T6121] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 116.148893][ T6006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.233960][ T6006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.646159][ T6006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.682501][ T6006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.061082][ T4323] Bluetooth: hci0: command 0x040f tx timeout [ 117.168453][ T6193] loop4: detected capacity change from 0 to 1024 [ 117.257554][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.258902][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.327327][ T6186] loop2: detected capacity change from 0 to 32768 [ 117.638393][ T6186] XFS (loop2): Mounting V5 Filesystem [ 117.674040][ T6186] XFS (loop2): Ending clean mount [ 117.679481][ T6186] XFS (loop2): Quotacheck needed: Please wait. [ 117.709499][ T6186] XFS (loop2): Quotacheck: Done. [ 117.778228][ T4470] hfsplus: b-tree write err: -5, ino 4 [ 117.819887][ T4328] XFS (loop2): Unmounting Filesystem [ 117.915457][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.930156][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.578155][ T6188] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.579531][ T6188] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.580796][ T6188] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.582307][ T6188] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.141327][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 119.335550][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 119.369565][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 119.404771][ T4334] block nbd0: Receive control failed (result -1) [ 120.773758][ T6258] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 121.174558][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.180482][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.184853][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.188781][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.193935][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.195795][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.197563][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.198701][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.200626][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.209764][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.212885][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.214486][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.215689][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.219396][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.225278][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.229129][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.247653][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.273193][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.281798][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.284534][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.286252][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.287830][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.293753][ T11] bridge1: port 2(veth5) entered disabled state [ 121.551331][ T11] bridge1: port 1(veth3) entered disabled state [ 121.669075][ T6274] loop2: detected capacity change from 0 to 2048 [ 121.686609][ T11] device hsr_slave_0 left promiscuous mode [ 121.687403][ T6274] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 121.692470][ T6274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.763581][ T11] device hsr_slave_1 left promiscuous mode [ 122.161267][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.162678][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.181679][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.183073][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.184930][ T11] device bridge_slave_1 left promiscuous mode [ 122.186092][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.212005][ T11] device bridge_slave_0 left promiscuous mode [ 122.213282][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.441761][ T11] device veth1_macvtap left promiscuous mode [ 122.443444][ T11] device veth0_macvtap left promiscuous mode [ 122.444528][ T11] device veth1_vlan left promiscuous mode [ 122.484376][ T11] device veth0_vlan left promiscuous mode [ 125.053432][ T11] team0 (unregistering): Port device team_slave_1 removed [ 125.223126][ T11] team0 (unregistering): Port device team_slave_0 removed [ 125.392124][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.591865][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.931549][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932612][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.212056][ T11] bond0 (unregistering): Released all slaves [ 127.425021][ T6006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.426991][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.430652][ T6276] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 127.444595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.446163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.447677][ T6291] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 127.489633][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.490865][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.492657][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.499352][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.501082][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.514707][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.516099][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.517593][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.519109][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.525974][ T6006] device veth0_vlan entered promiscuous mode [ 127.529498][ T6006] device veth1_vlan entered promiscuous mode [ 127.538038][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.539500][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.540903][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.545673][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.549062][ T6006] device veth0_macvtap entered promiscuous mode [ 127.559992][ T6006] device veth1_macvtap entered promiscuous mode [ 127.568837][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.570071][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.583924][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.592487][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.609972][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.622548][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.623705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.650539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.682944][ T6315] ptrace attach of "./syz-executor exec"[4327] was attempted by "./syz-executor exec"[6315] [ 127.920160][ T6006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.921692][ T6006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.923115][ T6006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.925028][ T6006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.981767][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.990114][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.991811][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.995066][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.004362][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.008641][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.377949][ T6328] loop1: detected capacity change from 0 to 128 [ 128.396667][ T6328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.776997][ T6328] fscrypt: loop1: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 128.848493][ T6344] device syzkaller0 entered promiscuous mode [ 128.875038][ T6006] EXT4-fs (loop1): unmounting filesystem. [ 130.165552][ T6364] loop1: detected capacity change from 0 to 1024 [ 130.189830][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 130.206498][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 131.320682][ T4778] hfsplus: b-tree write err: -5, ino 4 [ 131.627849][ T6383] loop1: detected capacity change from 0 to 128 [ 131.670056][ T6383] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.672651][ T6383] hpfs: filesystem error: improperly stopped [ 131.677901][ T6383] hpfs: You really don't want any checks? You are crazy... [ 131.686551][ T6383] hpfs: hpfs_map_sector(): read error [ 131.693085][ T6383] hpfs: code page support is disabled [ 131.700853][ T6383] hpfs: hpfs_map_4sectors(): unaligned read [ 131.706273][ T6383] hpfs: hpfs_map_4sectors(): unaligned read [ 131.707096][ T6383] hpfs: filesystem error: unable to find root dir [ 131.893724][ T6391] hpfs: hpfs_map_4sectors(): unaligned read [ 132.157113][ T6394] device bridge2 entered promiscuous mode [ 132.167473][ T6396] loop2: detected capacity change from 0 to 256 [ 132.194396][ T6394] team0: Port device bridge2 added [ 132.197493][ T6396] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.266621][ T6394] bridge0: port 1(team0) entered blocking state [ 132.272420][ T6394] bridge0: port 1(team0) entered disabled state [ 132.350933][ T6396] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 132.352663][ T6396] FAT-fs (loop2): Filesystem has been set read-only [ 132.801740][ T6414] loop4: detected capacity change from 0 to 1024 [ 132.803265][ T6414] EXT4-fs: Ignoring removed oldalloc option [ 132.804217][ T6414] EXT4-fs: Ignoring removed bh option [ 132.811819][ T6414] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.837129][ T6414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.281473][ T6425] loop2: detected capacity change from 0 to 1024 [ 133.410190][ T6430] loop1: detected capacity change from 0 to 256 [ 133.822145][ T4620] hfsplus: b-tree write err: -5, ino 4 [ 133.895418][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 134.215947][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 134.977763][ T6463] netlink: 7 bytes leftover after parsing attributes in process `syz.4.555'. [ 135.386384][ T6469] Illegal XDP return value 4294967285 on prog (id 89) dev syz_tun, expect packet loss! [ 135.399848][ T6468] netlink: 'syz.0.557': attribute type 13 has an invalid length. [ 135.978282][ T6482] binder: 6480:6482 tried to acquire reference to desc 0, got 1 instead [ 136.050014][ T111] binder: release 6480:6482 transaction 74 out, still active [ 136.055483][ T111] binder: undelivered TRANSACTION_COMPLETE [ 136.057363][ T111] binder: send failed reply for transaction 81 to 6480:6482 [ 136.069767][ T111] binder: undelivered TRANSACTION_COMPLETE [ 136.070688][ T111] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.079193][ T111] binder: send failed reply for transaction 74, target dead [ 137.531648][ T6509] loop2: detected capacity change from 0 to 16 [ 137.554061][ T6509] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.590780][ T6509] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 137.592664][ T6509] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 137.963440][ T6500] device syzkaller0 entered promiscuous mode [ 138.070483][ T6479] loop1: detected capacity change from 0 to 32768 [ 138.166624][ T6479] XFS (loop1): Mounting V5 Filesystem [ 138.273587][ T6479] XFS (loop1): Ending clean mount [ 138.286664][ T6479] XFS (loop1): Quotacheck needed: Please wait. [ 138.679187][ T6479] XFS (loop1): Quotacheck: Done. [ 138.781882][ T6533] netlink: 'syz.4.572': attribute type 13 has an invalid length. [ 138.796930][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.801457][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 138.804159][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.805690][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.837539][ T6006] XFS (loop1): Unmounting Filesystem [ 140.277637][ T6557] ptrace attach of "./syz-executor exec"[4322] was attempted by "./syz-executor exec"[6557] [ 140.306811][ T6558] dns_resolver: Unsupported server list version (0) [ 142.815469][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 142.852040][ T6604] netlink: 'syz.3.592': attribute type 13 has an invalid length. [ 142.857313][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.863360][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 142.865301][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.866809][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.237368][ T6611] loop4: detected capacity change from 0 to 512 [ 143.276775][ T6611] EXT4-fs (loop4): 1 truncate cleaned up [ 143.277823][ T6611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.294144][ T4621] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 143.295890][ T4621] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 1 [ 143.306325][ T6611] netlink: 182 bytes leftover after parsing attributes in process `syz.4.594'. [ 143.435229][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 143.675332][ T6624] loop2: detected capacity change from 0 to 32768 [ 143.753808][ T6624] XFS (loop2): Mounting V5 Filesystem [ 144.052550][ T6624] XFS (loop2): Ending clean mount [ 144.118798][ T4328] XFS (loop2): Unmounting Filesystem [ 145.246884][ T6666] batadv_slave_0: Caught tx_queue_len zero misconfig [ 146.110893][ T6680] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 146.124248][ T6680] device bond1 entered promiscuous mode [ 146.125771][ T6680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.266843][ T6680] bond1: (slave bridge3): making interface the new active one [ 146.267933][ T6680] device bridge3 entered promiscuous mode [ 146.269689][ T6680] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 146.273385][ T6683] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 146.283760][ T6690] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.285635][ T6690] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 146.355487][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 146.363174][ T6683] bond3: (slave gretap3): making interface the new active one [ 146.367210][ T6683] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 146.368471][ T6694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.616'. [ 146.370252][ T6694] device bond3 entered promiscuous mode [ 146.372543][ T6694] device gretap3 entered promiscuous mode [ 146.373940][ T6694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.426613][ T27] audit: type=1326 audit(146.410:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 146.508241][ T6705] input: syz1 as /devices/virtual/input/input2 [ 146.515825][ T27] audit: type=1326 audit(146.420:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 146.594542][ T27] audit: type=1326 audit(146.450:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 146.598023][ T27] audit: type=1326 audit(146.460:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 146.608959][ T6706] tmpfs: Bad value for 'mpol' [ 146.630244][ T27] audit: type=1326 audit(146.460:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 146.896324][ T27] audit: type=1326 audit(146.460:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff98b5bf6c code=0x7ffc0000 [ 146.906188][ T27] audit: type=1326 audit(146.460:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff98b5bf6c code=0x7ffc0000 [ 146.917325][ T27] audit: type=1326 audit(146.460:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 146.921619][ T27] audit: type=1326 audit(146.460:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 147.633095][ T6722] binder: 6721:6722 tried to acquire reference to desc 0, got 1 instead [ 147.635016][ T6722] binder: 6721:6722 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 147.637139][ T6722] binder: 6722 RLIMIT_NICE not set [ 147.638038][ T6722] binder: undelivered transaction 86, fd fixups failed [ 147.639411][ T6722] binder: 6721:6722 async transaction 86 fd fixups failed 29201/-12, line 4666 [ 147.641225][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 147.690061][ T6728] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 148.247331][ T6735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.632'. [ 148.251367][ T6735] device team_slave_1 entered promiscuous mode [ 148.363163][ T6740] device bridge1 entered promiscuous mode [ 148.372173][ T6740] team0: Port device bridge1 added [ 149.254469][ T6740] bridge0: port 3(team0) entered blocking state [ 149.271120][ T6740] bridge0: port 3(team0) entered disabled state [ 149.279534][ T6740] device team0 entered promiscuous mode [ 149.280428][ T6740] device team_slave_0 entered promiscuous mode [ 149.300192][ T6740] bridge0: port 3(team0) entered blocking state [ 149.301482][ T6740] bridge0: port 3(team0) entered forwarding state [ 149.310064][ T6746] fuse: Bad value for 'fd' [ 149.418897][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 150.931721][ T6756] loop2: detected capacity change from 0 to 131072 [ 151.763789][ T6756] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.788559][ T6756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.113760][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 155.115539][ T6843] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 155.130632][ T6843] device team1 entered promiscuous mode [ 155.824863][ T6850] loop1: detected capacity change from 0 to 128 [ 155.837006][ T6850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.855501][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.668'. [ 155.964176][ T6856] device bridge1 entered promiscuous mode [ 156.291213][ T6856] team0: Port device bridge1 added [ 156.325630][ T6856] bridge0: port 1(team0) entered blocking state [ 156.326687][ T6856] bridge0: port 1(team0) entered disabled state [ 156.994754][ T6006] EXT4-fs (loop1): unmounting filesystem. [ 157.010838][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 157.700207][ T6885] bond0: (slave bridge0): Error: Slave device does not support XDP [ 158.478609][ T6906] cgroup: No subsys list or none specified [ 158.736068][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 158.736786][ T4323] Bluetooth: hci3: command 0x0406 tx timeout [ 158.737106][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 158.770124][ T6914] binder: 6913:6914 tried to acquire reference to desc 0, got 1 instead [ 158.774122][ T6914] binder: 6913:6914 got transaction with invalid fd, 24 [ 158.775405][ T6914] binder: 6914:6913 translate fd array failed [ 158.776733][ T6914] binder: 6913:6914 transaction call to 6913:0 failed 92/29201/-9, size 96-24 line 3486 [ 158.779147][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.130746][ T6925] loop4: detected capacity change from 0 to 512 [ 159.163114][ T6925] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 12 [ 159.690816][ T6938] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 159.735231][ T6940] Bluetooth: MGMT ver 1.22 [ 161.216418][ T6965] loop1: detected capacity change from 0 to 1024 [ 161.217930][ T6965] EXT4-fs: Ignoring removed oldalloc option [ 161.219067][ T6965] EXT4-fs: Ignoring removed bh option [ 161.227216][ T6965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.237354][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 161.327722][ T6965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.538034][ T6983] tipc: Started in network mode [ 162.569957][ T6983] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 162.597868][ T6983] tipc: Enabled bearer , priority 10 [ 163.105452][ T6006] EXT4-fs (loop1): unmounting filesystem. [ 163.153603][ T7006] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 163.175853][ T7006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.215157][ T7006] bond1: (slave gretap1): making interface the new active one [ 163.218358][ T7006] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 163.248098][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 163.568900][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 163.674525][ T7026] loop4: detected capacity change from 0 to 128 [ 163.693580][ T7019] loop2: detected capacity change from 0 to 1024 [ 163.713250][ T7019] EXT4-fs: Ignoring removed orlov option [ 164.131247][ T4528] tipc: Node number set to 4269801494 [ 164.474299][ T6312] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.593533][ T7019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 164.594877][ T7019] System zones: 0-1, 3-12 [ 164.915459][ T7019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.945328][ T7019] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 164.994497][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 165.022131][ T7049] loop2: detected capacity change from 0 to 1024 [ 165.023822][ T7049] EXT4-fs: Ignoring removed oldalloc option [ 165.024835][ T7049] EXT4-fs: Ignoring removed bh option [ 165.026302][ T7049] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.039209][ T7049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.452721][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 165.894986][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 166.004404][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 166.009030][ T7070] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 166.015670][ T7070] device team1 entered promiscuous mode [ 166.153591][ T7077] ptrace attach of "./syz-executor exec"[4320] was attempted by " [ 167.775826][ T7100] loop2: detected capacity change from 0 to 512 [ 167.830742][ T7100] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 168.774499][ T7124] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 168.807101][ T7124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.968712][ T7124] bond2: (slave gretap1): making interface the new active one [ 168.983836][ T7124] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 168.988398][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 170.667076][ T7153] loop4: detected capacity change from 0 to 256 [ 170.784704][ T7157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.804296][ T7157] device veth0 entered promiscuous mode [ 170.807418][ T7157] bond3: (slave macvlan2): making interface the new active one [ 170.808975][ T7157] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 170.825142][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 170.988742][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'. [ 171.880686][ T7183] lo: Caught tx_queue_len zero misconfig [ 172.883247][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 172.884986][ T7206] binder: 7205:7206 tried to acquire reference to desc 0, got 1 instead [ 172.888711][ T7206] binder: 7205:7206 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 172.890773][ T7206] binder: 7206 RLIMIT_NICE not set [ 172.892917][ T7206] binder: 7206 RLIMIT_NICE not set [ 172.894391][ T7206] binder: 7206 RLIMIT_NICE not set [ 172.895373][ T7206] binder: 7205:7206 got transaction with unaligned buffers size, 4348 [ 172.896767][ T7206] binder: 7205:7206 transaction reply to 7205:7206 failed 98/29201/-22, size 0-0 line 3286 [ 172.898357][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 172.899839][ T7206] binder: send failed reply for transaction 97 to 7205:7206 [ 172.906442][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 172.909053][ T4472] binder: undelivered TRANSACTION_COMPLETE [ 172.910151][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.191728][ T4472] binder: undelivered TRANSACTION_ERROR: 29190 [ 173.197956][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 173.215264][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 173.220105][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 174.249880][ T7225] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 174.269676][ T7225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.409161][ T7225] bond1: (slave gretap1): making interface the new active one [ 174.411643][ T7225] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 174.413125][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 175.371752][ T7245] device syzkaller0 entered promiscuous mode [ 175.376505][ T7248] device vxcan1 entered promiscuous mode [ 175.506546][ T7252] binder: 7251:7252 tried to acquire reference to desc 0, got 1 instead [ 187.372378][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373398][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.406042][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 187.410743][ T7267] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 187.422706][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 187.476332][ T7279] netlink: 104 bytes leftover after parsing attributes in process `syz.1.801'. [ 187.577790][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 189.387609][ T7317] binder: 7315:7317 tried to acquire reference to desc 0, got 1 instead [ 189.868769][ T7318] sctp: [Deprecated]: syz.0.804 (pid 7318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.868769][ T7318] Use struct sctp_sack_info instead [ 189.985393][ T7324] lo: Caught tx_queue_len zero misconfig [ 190.012613][ T7323] overlayfs: failed to resolve './file0': -2 [ 190.163680][ T4472] binder: undelivered TRANSACTION_COMPLETE [ 190.164709][ T4472] binder: undelivered TRANSACTION_COMPLETE [ 190.165724][ T4472] binder: undelivered transaction 113, process died. [ 190.166752][ T4472] binder: undelivered transaction 112, process died. [ 191.119472][ C1] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 191.595158][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 191.595172][ T27] audit: type=1326 audit(191.580:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.599460][ T27] audit: type=1326 audit(191.580:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.604780][ T27] audit: type=1326 audit(191.590:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.608515][ T27] audit: type=1326 audit(191.590:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.615301][ T27] audit: type=1326 audit(191.590:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.617362][ T7359] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.816'. [ 191.618746][ T27] audit: type=1326 audit(191.590:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.626013][ T27] audit: type=1326 audit(191.590:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.629690][ T27] audit: type=1326 audit(191.600:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.633598][ T27] audit: type=1326 audit(191.600:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.637267][ T27] audit: type=1326 audit(191.600:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0778fa8 code=0x7ffc0000 [ 191.679870][ T7363] binder: BINDER_SET_CONTEXT_MGR already set [ 191.683873][ T7363] binder: 7362:7363 ioctl 4018620d 200000c0 returned -16 [ 191.694305][ T7363] binder: BINDER_SET_CONTEXT_MGR already set [ 191.695477][ T7363] binder: 7362:7363 ioctl 4018620d 20000180 returned -16 [ 191.697186][ T7363] binder: 7362:7363 got transaction to invalid handle, 1 [ 191.698403][ T7363] binder: 7363:7362 cannot find target node [ 191.699506][ T7363] binder: 7362:7363 transaction async to 0:0 failed 115/29201/-22, size 0-0 line 3045 [ 191.761463][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 192.335250][ T7378] loop4: detected capacity change from 0 to 2048 [ 192.347030][ T7378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.212288][ T7449] tipc: Failed to remove unknown binding: 66,0,0/0:520493296/520493297 [ 196.213762][ T7449] tipc: Failed to remove unknown binding: 66,0,0/0:520493296/520493297 [ 196.214997][ T7452] tipc: Failed to remove unknown binding: 66,0,0/0:1507567480/1507567482 [ 197.510039][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.514535][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.516295][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.517962][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.520285][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.523078][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.554772][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.561135][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'. [ 197.566625][ T7477] bridge1: port 1(veth0_to_bond) entered blocking state [ 197.568012][ T7477] bridge1: port 1(veth0_to_bond) entered disabled state [ 197.569735][ T7477] device veth0_to_bond entered promiscuous mode [ 198.504341][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.000211][ T7496] loop1: detected capacity change from 0 to 4096 [ 199.098886][ T7496] NILFS (loop1): invalid segment: Inconsistency found [ 199.105911][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 199.120951][ T7496] NILFS (loop1): trying rollback from an earlier position [ 199.185969][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.187260][ T7496] NILFS (loop1): recovery complete [ 199.195368][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.207936][ T7476] device bridge_slave_0 entered promiscuous mode [ 199.225717][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.230067][ T7510] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.233673][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.242295][ T7476] device bridge_slave_1 entered promiscuous mode [ 199.278574][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.305438][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.432676][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.867421][ T7476] team0: Port device team_slave_0 added [ 200.200881][ T7476] team0: Port device team_slave_1 added [ 200.215341][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.216401][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.273947][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.292780][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.293969][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.331165][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.463509][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 200.477133][ T7476] device hsr_slave_0 entered promiscuous mode [ 200.894585][ T7523] loop1: detected capacity change from 0 to 32768 [ 200.951867][ T7476] device hsr_slave_1 entered promiscuous mode [ 200.986297][ T7523] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 200.995088][ T7536] MPTCP: kernel_bind error, err=-99 [ 201.010983][ T7476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.012988][ T7476] Cannot create hsr debugfs directory [ 202.373650][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.491159][ T4323] Bluetooth: hci4: command 0x041b tx timeout [ 203.792874][ T11] tipc: Disabling bearer [ 203.796845][ T11] tipc: Left network mode [ 204.572054][ T4323] Bluetooth: hci4: command 0x040f tx timeout [ 205.481457][ T7589] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 205.524649][ T7589] device bond4 entered promiscuous mode [ 205.525923][ T7589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.094665][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 206.137955][ T7589] bond4: (slave bridge5): making interface the new active one [ 206.139408][ T7589] device bridge5 entered promiscuous mode [ 206.144506][ T7589] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 206.146567][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 206.381254][ T7559] udevd[7559]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 206.393996][ T7274] udevd[7274]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 206.672301][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 206.695515][ T7561] udevd[7561]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 206.714529][ T7274] udevd[7274]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory [ 206.726517][ T7284] udevd[7284]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 206.802612][ T7559] udevd[7559]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 206.810166][ T7561] udevd[7561]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory [ 206.813867][ T7559] udevd[7559]: inotify_add_watch(7, /dev/loop1p19, 10) failed: No such file or directory [ 206.823599][ T7561] udevd[7561]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory [ 206.827150][ T7559] udevd[7559]: inotify_add_watch(7, /dev/loop1p21, 10) failed: No such file or directory [ 208.222710][ T7656] tipc: Cannot configure node identity twice [ 208.297952][ T7658] device syzkaller0 entered promiscuous mode [ 208.305469][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 219.464684][ T7678] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 219.563074][ T7685] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 219.568292][ T7692] lo: Caught tx_queue_len zero misconfig [ 219.569353][ T7692] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 219.680053][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 219.680064][ T27] audit: type=1326 audit(219.660:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.684761][ T27] audit: type=1326 audit(219.660:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.689779][ T27] audit: type=1326 audit(219.670:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.693891][ T27] audit: type=1326 audit(219.670:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.697339][ T27] audit: type=1326 audit(219.670:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.700720][ T27] audit: type=1326 audit(219.680:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.706158][ T27] audit: type=1326 audit(219.680:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.709440][ T27] audit: type=1326 audit(219.680:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 219.752168][ T27] audit: type=1326 audit(219.680:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 220.504221][ T27] audit: type=1326 audit(220.490:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.903" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78fa8 code=0x7ffc0000 [ 220.525542][ T7476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.575404][ T7725] MPTCP: kernel_bind error, err=-98 [ 220.706546][ T7476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.103126][ T7476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.620512][ T7736] loop1: detected capacity change from 0 to 40427 [ 221.680564][ T7756] ipt_REJECT: ECHOREPLY no longer supported. [ 221.920222][ T7736] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x3ffff [ 222.500026][ T7476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.180255][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 225.233734][ T7782] netlink: 'syz.3.916': attribute type 30 has an invalid length. [ 225.435546][ T7782] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.436950][ T7782] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.438212][ T7782] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.439667][ T7782] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.444531][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 225.445957][ T7782] netlink: 'syz.3.916': attribute type 30 has an invalid length. [ 226.248440][ T11] device hsr_slave_0 left promiscuous mode [ 226.283553][ T11] device hsr_slave_1 left promiscuous mode [ 226.483217][ T11] batman_adv: batadv0: Interface deactivated: vlan1 [ 226.485795][ T11] batman_adv: batadv0: Removing interface: vlan1 [ 227.251159][ T11] device veth1_macvtap left promiscuous mode [ 227.252252][ T11] device veth0_macvtap left promiscuous mode [ 227.253328][ T11] device veth1_vlan left promiscuous mode [ 227.254342][ T11] device veth0_vlan left promiscuous mode [ 228.110680][ T7853] loop1: detected capacity change from 0 to 1764 [ 228.160322][ T7619] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.362125][ T11] bond0 (unregistering): Released all slaves [ 232.741739][ T7840] team_slave_1: Caught tx_queue_len zero misconfig [ 232.835779][ T7856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 232.909309][ T7860] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 232.934356][ T7860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.938817][ T7861] device veth7 entered promiscuous mode [ 232.952541][ T7861] bond2: (slave veth7): Enslaving as an active interface with a down link [ 233.035136][ T7864] bond2: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 233.389749][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.405840][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.410105][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.416182][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.419287][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.425068][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.428672][ T4660] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.429799][ T4660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.432296][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.443173][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.444942][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.446706][ T4660] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.447874][ T4660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.457797][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.464115][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.475954][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.478280][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.480135][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.486769][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.490086][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.496591][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.498509][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.513427][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.515181][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.519932][ T7476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.603640][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.605002][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.609263][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.620223][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.622932][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.635935][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.637625][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.639354][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.640887][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.644832][ T7476] device veth0_vlan entered promiscuous mode [ 233.648812][ T7476] device veth1_vlan entered promiscuous mode [ 233.657531][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.659337][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.662084][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.670829][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.680406][ T7476] device veth0_macvtap entered promiscuous mode [ 233.685793][ T7476] device veth1_macvtap entered promiscuous mode [ 233.694984][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.733451][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.735678][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.739049][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.740692][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.744647][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.748589][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.752837][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'. [ 233.758422][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.762328][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.768427][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.769879][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.772775][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.776538][ T7476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.780078][ T7476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.788038][ T7476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.789658][ T7476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.845454][ T7794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.846992][ T7794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.863308][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.865335][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.866677][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.883786][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.885322][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.986048][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.947533][ T7915] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 234.982356][ T7915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.112849][ T7941] loop1: detected capacity change from 0 to 8192 [ 236.127484][ T7941] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 236.247693][ T7950] loop1: detected capacity change from 0 to 1024 [ 236.318188][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.326186][ T7952] team0: Port device bond0 added [ 236.349063][ T7952] netlink: 'syz.4.959': attribute type 16 has an invalid length. [ 236.356959][ T7952] netlink: 'syz.4.959': attribute type 17 has an invalid length. [ 236.579537][ T7956] device wg1 entered promiscuous mode [ 236.755360][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 236.758160][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 236.924389][ T7966] netlink: 1032 bytes leftover after parsing attributes in process `syz.0.961'. [ 236.926487][ T7962] device syzkaller0 entered promiscuous mode [ 236.957483][ T7971] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 237.084292][ T4323] Bluetooth: hci2: Malformed Event: 0x48 [ 237.665446][ T7985] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 237.733430][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 237.803287][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 238.937975][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 239.270727][ T8020] fuse: Bad value for 'fd' [ 240.335019][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.347805][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.350787][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.362750][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.371607][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 240.372992][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.125557][ T8023] chnl_net:caif_netlink_parms(): no params data found [ 241.429069][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.430234][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.432144][ T8023] device bridge_slave_0 entered promiscuous mode [ 241.434146][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.435319][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.436831][ T8023] device bridge_slave_1 entered promiscuous mode [ 241.444225][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.446735][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.456759][ T8023] team0: Port device team_slave_0 added [ 241.459481][ T8023] team0: Port device team_slave_1 added [ 241.465837][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.466920][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.470795][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.473124][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.474192][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.477972][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.522509][ T8023] device hsr_slave_0 entered promiscuous mode [ 241.561323][ T8023] device hsr_slave_1 entered promiscuous mode [ 241.811503][ T8060] tipc: Enabled bearer , priority 10 [ 242.050427][ T8068] tipc: Enabled bearer , priority 0 [ 242.656821][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 243.093306][ T4389] tipc: Node number set to 1533199535 [ 243.123184][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 243.180264][ T8087] netlink: 'syz.4.998': attribute type 3 has an invalid length. [ 244.069508][ T8096] loop2: detected capacity change from 0 to 32768 [ 244.165451][ T8096] XFS (loop2): Mounting V5 Filesystem [ 244.167383][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.190700][ T8096] XFS (loop2): Ending clean mount [ 244.504984][ T7476] XFS (loop2): Unmounting Filesystem [ 244.741124][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 244.748569][ T8023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.792296][ T8023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.833209][ T8023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.853216][ T8023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.919037][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.924211][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.925584][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.928654][ T8023] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.931907][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.933502][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.934940][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.936168][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.938081][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.945454][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.947329][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.948862][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.950019][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.953653][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.986172][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.988023][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.001611][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.004654][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.006181][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.010510][ T8023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.013456][ T8023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.016953][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.018564][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.020065][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.022146][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.023535][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.026250][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.157915][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.159262][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.170396][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.189795][ T8159] tipc: Resetting bearer [ 246.256560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.258576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.266714][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.268551][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.272359][ T8023] device veth0_vlan entered promiscuous mode [ 246.279760][ T8023] device veth1_vlan entered promiscuous mode [ 246.282966][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.285278][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.287591][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.299938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.302173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.821232][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 246.899714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.130663][ T8023] device veth0_macvtap entered promiscuous mode [ 247.133838][ T8023] device veth1_macvtap entered promiscuous mode [ 247.140087][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.142051][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.143695][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.145270][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.147546][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.149675][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.179831][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.187788][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.189517][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.206288][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.208568][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.210098][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.218266][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.220574][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.224633][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.226687][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.933652][ T8023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.935046][ T8023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.936370][ T8023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.937786][ T8023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.056628][ T8190] loop2: detected capacity change from 0 to 1024 [ 249.062351][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.063441][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.154241][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 249.287922][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.289457][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.812023][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.839658][ T7794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.841196][ T7794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.845020][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.412961][ T8201] tipc: Started in network mode [ 250.413853][ T8201] tipc: Node identity 7a20742da20b, cluster identity 4711 [ 250.415090][ T8201] tipc: Enabled bearer , priority 0 [ 250.417121][ T8201] device syzkaller0 entered promiscuous mode [ 250.425138][ T8201] tipc: Resetting bearer [ 250.429726][ T8198] tipc: Resetting bearer [ 250.511966][ T8198] tipc: Disabling bearer [ 251.079575][ T8217] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 254.816603][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 254.860132][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 257.346977][ T8292] loop2: detected capacity change from 0 to 4096 [ 257.938829][ T8292] EXT4-fs (loop2): Test dummy encryption mode enabled [ 258.271117][ T8292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.042517][ T7476] EXT4-fs (loop2): unmounting filesystem. [ 259.129946][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'. [ 259.135950][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'. [ 259.161243][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1063'. [ 260.874037][ T4374] Process accounting resumed [ 260.880203][ T8198] unregister_netdevice: waiting for syzkaller0 to become free. Usage count = 2 [ 260.882732][ T8198] leaked reference. [ 260.883614][ T8198] fib6_nh_init+0x630/0x1ad4 [ 260.884285][ T8198] ip6_route_info_create+0x7b0/0xf78 [ 260.885021][ T8198] addrconf_f6i_alloc+0x1a8/0x36c [ 260.885772][ T8198] ipv6_add_addr+0x3c8/0xce0 [ 260.886599][ T8198] addrconf_add_linklocal+0x23c/0x608 [ 260.887496][ T8198] addrconf_addr_gen+0x3ec/0x4fc [ 260.888317][ T8198] addrconf_init_auto_addrs+0x5e0/0x94c [ 260.889238][ T8198] addrconf_notify+0x8c4/0xc8c [ 260.890028][ T8198] raw_notifier_call_chain+0xd4/0x164 [ 260.890881][ T8198] __dev_notify_flags+0x250/0x480 [ 260.891756][ T8198] dev_change_flags+0xc8/0x154 [ 260.892506][ T8198] dev_ifsioc+0x138/0xc04 [ 260.893154][ T8198] dev_ioctl+0x4b0/0xc74 [ 260.893795][ T8198] sock_do_ioctl+0x198/0x258 [ 260.894517][ T8198] sock_ioctl+0x238/0x824 [ 260.895198][ T8198] __arm64_sys_ioctl+0x14c/0x1c8