last executing test programs: 5m3.144125913s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(0xffffffffffffffff) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) 5m3.057333135s ago: executing program 4 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5m1.845690973s ago: executing program 4 (id=13): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 5m0.850863928s ago: executing program 4 (id=16): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c60821044fcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b29643e40ddabc200ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142e65b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec636088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14dd7e270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32db2b0452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e552566c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfb698badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335e312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199984217b34b4f247ceabff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efcb885466710ea1112bd2a7561a6ddbb744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55e739ebe0b390c8205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e91839329ffff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a95204605af2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f945383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c139120bf5a35fadf7894d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950930b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c70900eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e109dd96f4c87e23a2350574e7c6d856628dced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117ec75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a01003568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x1, {{0xfffffffffff7fffb, 0x6, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 4m59.809738674s ago: executing program 4 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000000, 0x0) 4m44.38681482s ago: executing program 32 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000000, 0x0) 3m54.135753379s ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x96) pwrite64(r4, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) fallocate(0xffffffffffffffff, 0x20, 0x1000000, 0x7000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 3m51.47687182s ago: executing program 0 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 3m51.267926983s ago: executing program 0 (id=195): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 3m49.196102064s ago: executing program 0 (id=200): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 3m48.982866587s ago: executing program 0 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) 3m47.828525265s ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3m47.564014839s ago: executing program 33 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m22.042932907s ago: executing program 5 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='5\x00', 0x2) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000001400)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m15.133206113s ago: executing program 5 (id=478): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x141a82, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000600)=0x2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd", @ANYRES16=r1], 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 2m3.814679686s ago: executing program 5 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x5f}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m1.246315356s ago: executing program 5 (id=503): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 2m1.084050418s ago: executing program 5 (id=506): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m55.785400349s ago: executing program 5 (id=517): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0xad, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x9) 1m55.575425572s ago: executing program 34 (id=517): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0xad, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x9) 39.990799078s ago: executing program 6 (id=693): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000040)=0x10) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 38.978668704s ago: executing program 6 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) landlock_create_ruleset(&(0x7f00000000c0)={0x42, 0x1, 0x1}, 0x18, 0x0) 36.068239268s ago: executing program 6 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x7) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000004, 0x0, 0x0) 35.083157663s ago: executing program 6 (id=702): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) getresgid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000100)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x38) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001280)=""/4089, 0xff9) 33.367184929s ago: executing program 6 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0) 31.618563876s ago: executing program 6 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) 15.720759529s ago: executing program 35 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) 11.672316832s ago: executing program 7 (id=746): r0 = epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.589575922s ago: executing program 7 (id=748): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.617171723s ago: executing program 3 (id=751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) sendfile(r4, r3, 0x0, 0x578410e9) 9.614014983s ago: executing program 2 (id=761): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=maccroatian,iocharset=iso8859-6,umask=00000000000000000000005,file_umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x7, 0x2db, &(0x7f0000000800)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x4, 0x97, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 8.684950947s ago: executing program 3 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') 8.002747787s ago: executing program 2 (id=755): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 7.902242219s ago: executing program 7 (id=757): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.822978871s ago: executing program 2 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mlock(&(0x7f000069b000/0x12000)=nil, 0x12000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 5.82270196s ago: executing program 7 (id=760): socket(0x840000000002, 0x3, 0xfa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0x40000fe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x6, 0x40, 0x80, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x2200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.657156379s ago: executing program 2 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.53303745s ago: executing program 1 (id=763): r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) 4.384629533s ago: executing program 1 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r3, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8c) accept4(r3, 0x0, 0x0, 0x0) 3.531788295s ago: executing program 7 (id=765): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 3.482760936s ago: executing program 3 (id=766): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=maccroatian,iocharset=iso8859-6,umask=00000000000000000000005,file_umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x7, 0x2db, &(0x7f0000000800)="$eJzs3c9u00oUx/HfOEmb/lGvb9urK7EBFSrBpqLAArEJQtmyZ4WAJpUqoiLaIgGbFsQS8QDseQUegg2IF4AVKx6gO6MZT1w7dZwWNXHTfj9SImc84znW2Jk5ltoIwLl1r/nj081f9mWkiiqS7kiBpLpUlfSf/q+/2NzZ2Om0W0UHqrgW9mUUtzSH6qxttvOa2nauhRfaT1XNpsswHFEU3f1ZdhAonbv7cwTSpL8P3f76iOMalj3pYtkxjFp6gM2+9vVScyWGAwA4Bfz8H/hpYtYVGQWBtOyn/TM1/++XHcDJutU5VBQVNkjN/251Fxk7vv+4XQf5nkvh7P6gmyUeJZhaz+cJxVdWZoFpBmWVLpZgan2jqpW1N2oFequGl6q26N5b8aXbNSDapZzctED/o9V0fzo+G7ei7OVD2l3f6LQn7VZO/AuFPU4eJ86jMV/MN/PQhPqoVrL+q0bGDpMbqbBnpIKajf96/yPOuFa2lnza32g0gkyVf10nF3wP3oBRqudnJOljdh8Q7CURFMXp+p5X9rFCfHarA1ot5LUKk099Wi1mWtmzsX2trD3rFD5KGY7uKZoP5oFZ0m99VjO1/g9sfMtK3ZlFX/XG1fRXRnw+E/k1q65meGjmOLhdLiUReEO46M+D4z0te68nuq257Vevn1Y6nfaW3Xic2TCyG89nt4wvqb2TeuqMaqOigjraOyiJrN0oOuqRo2EGf+1ED2i/P5ISe/vkVbZ3WVISjHqYzstG86uKLsjx2Ygiqc+uoX1P4RTZNnasU1PHVJnRoAR23WXi/M+t5P2qzqVI9i0sWKcXJ5nKHHE1yeCyS8F59z59rAxupn8Gl+rxRp+c0eVcl69KV1KFRoU9hj7OM8I09V2PeP4PAAAAAAAAAAAAAAAAAAAwbkbxlwZlnyMAAAAAAAAAAAAAAAAAAAAAAOPur37/N+9/xLvf/w35/V9gjPwJAAD//2tCdrA=") openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x4, 0x97, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 2.097586868s ago: executing program 3 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 2.097228318s ago: executing program 7 (id=768): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096, 0x1000}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r3, 0x0) 2.063790788s ago: executing program 1 (id=776): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.062452558s ago: executing program 2 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1.163092642s ago: executing program 3 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 1.158514882s ago: executing program 1 (id=771): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 879.181216ms ago: executing program 2 (id=772): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 32.809999ms ago: executing program 3 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) getrlimit(0xf, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 30.595149ms ago: executing program 1 (id=774): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0x802c, @mcast1, 0x7}, 0xfffffffffffffe20) sendfile(r1, r0, 0x0, 0x100000000) 0s ago: executing program 1 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) kernel console output (not intermixed with test programs): 40.910533][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.934437][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.939657][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.943793][ T1595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.951523][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.954263][ T1595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.961177][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.964045][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.967039][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.987415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.989566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.000642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.003413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.012411][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.014475][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.018250][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.021564][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.023910][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.031690][ T4297] device veth0_vlan entered promiscuous mode [ 41.046568][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.049355][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.059411][ T4306] device veth0_vlan entered promiscuous mode [ 41.063666][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.066779][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.069678][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.072754][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.077556][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 41.077582][ T4304] Bluetooth: hci3: command 0x041b tx timeout [ 41.092027][ T4297] device veth1_vlan entered promiscuous mode [ 41.113501][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.116318][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.119044][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.155921][ T4304] Bluetooth: hci1: command 0x041b tx timeout [ 41.157696][ T4304] Bluetooth: hci2: command 0x041b tx timeout [ 41.159311][ T4304] Bluetooth: hci4: command 0x041b tx timeout [ 41.238693][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.241331][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.243895][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.247764][ T4306] device veth1_vlan entered promiscuous mode [ 41.258569][ T4305] device veth0_vlan entered promiscuous mode [ 41.264320][ T4298] device veth0_vlan entered promiscuous mode [ 41.269729][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.273742][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.284735][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.287838][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.290511][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.305686][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.308596][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.327865][ T4298] device veth1_vlan entered promiscuous mode [ 41.333242][ T4305] device veth1_vlan entered promiscuous mode [ 41.342498][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.346605][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.350332][ T4297] device veth0_macvtap entered promiscuous mode [ 41.362034][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.364698][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.369509][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.373472][ T4306] device veth0_macvtap entered promiscuous mode [ 41.389737][ T4297] device veth1_macvtap entered promiscuous mode [ 41.392668][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.395176][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.399347][ T4383] loop1: detected capacity change from 0 to 1024 [ 41.407096][ T4383] ======================================================= [ 41.407096][ T4383] WARNING: The mand mount option has been deprecated and [ 41.407096][ T4383] and is ignored by this kernel. Remove the mand [ 41.407096][ T4383] option from the mount to silence this warning. [ 41.407096][ T4383] ======================================================= [ 41.422019][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.422479][ T4383] EXT4-fs: Ignoring removed nobh option [ 41.424743][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.426241][ T4383] EXT4-fs: Ignoring removed bh option [ 41.433739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.436512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.440027][ T4305] device veth0_macvtap entered promiscuous mode [ 41.441818][ T4383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.454811][ T4306] device veth1_macvtap entered promiscuous mode [ 41.460411][ T4305] device veth1_macvtap entered promiscuous mode [ 41.473252][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.476203][ T4383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.480866][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.484566][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.488556][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.491367][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.494781][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.499541][ T4297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.502005][ T4297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.504411][ T4297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.507595][ T4297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.513668][ T4298] device veth0_macvtap entered promiscuous mode [ 41.517714][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.520298][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.522778][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.525213][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.527941][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.530586][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.533291][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.536702][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.559705][ T4298] device veth1_macvtap entered promiscuous mode [ 41.582427][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.586094][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.588787][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.591797][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.596737][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.598867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.602127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.613213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.627590][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.630441][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.633227][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.636824][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.639508][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.642305][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.647279][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.679414][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.682357][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.685096][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.688120][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 41.688749][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.692312][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.695177][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.698614][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.701399][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.705243][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.714733][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.719589][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.735613][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.738376][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.754162][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.757926][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.760625][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.763408][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.771056][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.779660][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.782524][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.785126][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.789117][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.791716][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.794495][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.799686][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.803190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.806591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.809433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.812071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.817424][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.819824][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.823277][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.831053][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.069604][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.072034][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.106666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.522906][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.526603][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.529616][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.532589][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.535956][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.538867][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.542156][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.544892][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.550423][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.554212][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.557119][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.559526][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.561951][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.566856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.569662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.577501][ T269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.579641][ T269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.587251][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.589634][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.591944][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.594315][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.604057][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.673776][ T4395] binder: 4394:4395 tried to acquire reference to desc 0, got 1 instead [ 42.679057][ T4395] binder: 4394:4395 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.682869][ T4395] binder: 4395 RLIMIT_NICE not set [ 42.684335][ T4395] binder: 4395 RLIMIT_NICE not set [ 42.702519][ T4395] binder: 4395 RLIMIT_NICE not set [ 42.703973][ T4395] binder_alloc: 4394: binder_alloc_buf, no vma [ 42.706650][ T4395] binder: cannot allocate buffer: vma cleared, target dead or dying [ 42.706682][ T4395] binder: 4394:4395 transaction reply to 4394:4395 failed 6/29189/-3, size 0-0 line 3239 [ 42.712368][ T4395] binder: send failed reply for transaction 5 to 4394:4395 [ 42.729143][ T4346] binder: undelivered TRANSACTION_COMPLETE [ 42.734233][ T4346] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.785431][ T4396] binder: undelivered TRANSACTION_ERROR: 29190 [ 42.828435][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.836285][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.852722][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.062230][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.064825][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.155379][ T4312] Bluetooth: hci3: command 0x040f tx timeout [ 43.166176][ T4312] Bluetooth: hci0: command 0x040f tx timeout [ 43.235628][ T4304] Bluetooth: hci1: command 0x040f tx timeout [ 43.237810][ T4304] Bluetooth: hci4: command 0x040f tx timeout [ 43.239800][ T4304] Bluetooth: hci2: command 0x040f tx timeout [ 43.797964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.803129][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.809591][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.833930][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.844539][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.890268][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.892539][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.902291][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.904444][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.001679][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.004500][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.007965][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.010461][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.729642][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 44.834303][ T4427] loop0: detected capacity change from 0 to 256 [ 44.860850][ T4427] FAT-fs (loop0): Directory bread(block 64) failed [ 44.862833][ T4427] FAT-fs (loop0): Directory bread(block 65) failed [ 44.864701][ T4427] FAT-fs (loop0): Directory bread(block 66) failed [ 44.880663][ T4427] FAT-fs (loop0): Directory bread(block 67) failed [ 44.882454][ T4427] FAT-fs (loop0): Directory bread(block 68) failed [ 44.884265][ T4427] FAT-fs (loop0): Directory bread(block 69) failed [ 44.908615][ T4427] FAT-fs (loop0): Directory bread(block 70) failed [ 44.910381][ T4427] FAT-fs (loop0): Directory bread(block 71) failed [ 44.912208][ T4427] FAT-fs (loop0): Directory bread(block 72) failed [ 44.913930][ T4427] FAT-fs (loop0): Directory bread(block 73) failed [ 45.255542][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 45.257723][ T4304] Bluetooth: hci3: command 0x0419 tx timeout [ 45.315542][ T4312] Bluetooth: hci2: command 0x0419 tx timeout [ 45.317543][ T4301] Bluetooth: hci4: command 0x0419 tx timeout [ 45.319376][ T4304] Bluetooth: hci1: command 0x0419 tx timeout [ 46.244982][ T4452] device syzkaller0 entered promiscuous mode [ 47.713226][ T4473] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 48.175227][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 48.181792][ T4478] netlink: 48 bytes leftover after parsing attributes in process `syz.0.26'. [ 48.564679][ T4486] loop3: detected capacity change from 0 to 512 [ 49.487581][ T4486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.944677][ T4486] EXT4-fs (loop3): 1 orphan inode deleted [ 49.946477][ T4486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.345292][ C0] sched: RT throttling activated [ 50.360095][ T4361] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.364481][ T4361] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 1 [ 51.355801][ T4499] binder: 4498:4499 tried to acquire reference to desc 0, got 1 instead [ 51.533645][ T22] binder: release 4498:4499 transaction 11 out, still active [ 51.571547][ T22] binder: send failed reply for transaction 11, target dead [ 51.624632][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 52.523509][ T4505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.721561][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 61.577763][ T4301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.580784][ T4301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.583453][ T4301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.591211][ T4312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.594013][ T4312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.596818][ T4312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.740173][ T4506] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 61.840637][ T4546] loop0: detected capacity change from 0 to 512 [ 61.857482][ T4506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.863705][ T4546] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 61.867546][ T4546] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 61.880890][ T4535] batman_adv: batadv0: Adding interface: ip6gretap1 [ 61.882828][ T4535] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.907538][ T4535] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 61.911042][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.913011][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.927771][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.929955][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.948814][ T4536] batman_adv: batadv0: Removing interface: ip6gretap1 [ 62.045766][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 62.260683][ T4538] chnl_net:caif_netlink_parms(): no params data found [ 62.452026][ T4566] loop3: detected capacity change from 0 to 256 [ 62.578401][ T4411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.591725][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.594251][ T4566] FAT-fs (loop3): Filesystem has been set read-only [ 62.600028][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.613330][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.616569][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.618775][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.620885][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.623150][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.631181][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.633627][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.636211][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.638360][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.640583][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.642911][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.645450][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.647623][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.649947][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.652312][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.654530][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.656918][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.659069][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.661261][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.663499][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.665878][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.668289][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.670390][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.672563][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.674862][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.677382][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.679642][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.681846][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.684037][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.686395][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.687993][ T4411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.688558][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.693440][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.695632][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.697814][ T4566] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 62.753984][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.760920][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.766231][ T4538] device bridge_slave_0 entered promiscuous mode [ 62.790467][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.818462][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.829368][ T4538] device bridge_slave_1 entered promiscuous mode [ 62.927915][ T4411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.988283][ T4538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.992650][ T4538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.247570][ T4411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.260197][ T4538] team0: Port device team_slave_0 added [ 63.265694][ T4538] team0: Port device team_slave_1 added [ 63.285026][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.287000][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.231355][ T4538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.997063][ T4312] Bluetooth: hci5: command 0x0409 tx timeout [ 65.023798][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.026337][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.028191][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.051363][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.075522][ T4538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.211005][ T4590] netlink: 'syz.2.53': attribute type 3 has an invalid length. [ 65.220850][ T4590] netlink: 'syz.2.53': attribute type 3 has an invalid length. [ 65.297690][ T4538] device hsr_slave_0 entered promiscuous mode [ 66.149810][ T4538] device hsr_slave_1 entered promiscuous mode [ 66.528044][ T4538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.828270][ T4538] Cannot create hsr debugfs directory [ 66.962218][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'. [ 66.964600][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'. [ 67.123620][ T4610] dccp_close: ABORT with 32 bytes unread [ 67.155940][ T4304] Bluetooth: hci5: command 0x041b tx timeout [ 67.179742][ T4612] fuse: Unknown parameter 'fd18446744073709551615' [ 68.089078][ T4622] loop3: detected capacity change from 0 to 128 [ 68.098282][ T4622] FAT-fs (loop3): bogus logical sector size 0 [ 68.100076][ T4622] FAT-fs (loop3): Can't find a valid FAT filesystem [ 68.105056][ T4538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.952491][ T4538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.978195][ T4538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.018505][ T4538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.245365][ T4312] Bluetooth: hci5: command 0x040f tx timeout [ 69.281763][ T4647] loop3: detected capacity change from 0 to 164 [ 69.366267][ T4647] rock: directory entry would overflow storage [ 69.369454][ T4647] rock: sig=0x5053, size=7, remaining=4 [ 69.373520][ T4647] isofs_fill_super: root inode is not a directory. Corrupted media? [ 69.666856][ T112] cfg80211: failed to load regulatory.db [ 70.217875][ T4665] loop0: detected capacity change from 0 to 1024 [ 70.228644][ T4665] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.232631][ T4665] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.244513][ T4665] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.71: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.364107][ T4665] EXT4-fs (loop0): 1 orphan inode deleted [ 70.396057][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.533707][ T4538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.542359][ T4538] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.261746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.264342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.271669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.274323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.276880][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.278775][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.335473][ T4304] Bluetooth: hci5: command 0x0419 tx timeout [ 71.365699][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.368934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.371422][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.373387][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.376251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.379186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.381862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.384612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.400636][ T4538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.403443][ T4538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.460625][ T4684] tipc: Failed to remove unknown binding: 66,1,1/0:2174654886/2174654888 [ 71.471768][ T4684] tipc: Failed to remove unknown binding: 66,1,1/0:2174654886/2174654888 [ 71.494582][ T4684] tipc: Failed to remove unknown binding: 66,1,1/0:2174654886/2174654888 [ 71.579943][ T4664] loop3: detected capacity change from 0 to 32768 [ 71.599257][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 71.611433][ T4664] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.70 (4664) [ 71.706333][ T4664] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.709358][ T4664] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 71.720764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.722157][ T4664] BTRFS info (device loop3): doing ref verification [ 71.723395][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.724711][ T4664] BTRFS info (device loop3): enabling ssd optimizations [ 71.730603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.731263][ T4664] BTRFS info (device loop3): turning on sync discard [ 71.734795][ T4664] BTRFS info (device loop3): max_inline at 3 [ 71.740680][ T4664] BTRFS info (device loop3): not using ssd optimizations [ 71.742654][ T4664] BTRFS info (device loop3): using free space tree [ 71.779541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.911793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.956158][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.962892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.965748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.968886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.977172][ T4306] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 75.104376][ T4541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop3 scanned by udevd (4541) [ 75.112946][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.115178][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.137394][ T4538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.146431][ T4751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'. [ 75.874450][ T4763] loop0: detected capacity change from 0 to 512 [ 76.097838][ T4763] EXT4-fs (loop0): 1 orphan inode deleted [ 76.099438][ T4763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.197638][ T4735] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 76.200546][ T4735] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:16: Failed to release dquot type 1 [ 76.267362][ T4774] xt_nat: multiple ranges no longer supported [ 76.994524][ T4776] trusted_key: encrypted_key: insufficient parameters specified [ 77.165700][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 79.002471][ T4802] loop3: detected capacity change from 0 to 512 [ 79.095668][ T4802] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 79.104404][ T4802] EXT4-fs (loop3): 1 truncate cleaned up [ 79.141330][ T4802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.040012][ T4821] process 'syz.1.99' launched '/dev/fd/8' with NULL argv: empty string added [ 82.382869][ T4918] ptrace attach of "./syz-executor exec"[4296] was attempted by ""[4918] [ 82.886888][ T4809] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 83.100280][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 83.169737][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.172484][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.258731][ T4929] loop1: detected capacity change from 0 to 128 [ 83.312492][ T4929] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.334937][ T4411] device hsr_slave_0 left promiscuous mode [ 83.355853][ T4411] device hsr_slave_1 left promiscuous mode [ 83.545685][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.547814][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.909797][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.912024][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.915066][ T4411] device bridge_slave_1 left promiscuous mode [ 83.917669][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.986567][ T4411] device bridge_slave_0 left promiscuous mode [ 83.988318][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.079567][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 84.175829][ T4411] device veth1_macvtap left promiscuous mode [ 84.177822][ T4411] device veth0_macvtap left promiscuous mode [ 84.179508][ T4411] device veth1_vlan left promiscuous mode [ 84.181184][ T4411] device veth0_vlan left promiscuous mode [ 86.858718][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 87.038817][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 87.216849][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.437308][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.166500][ T4312] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 89.168998][ T4312] Bluetooth: hci3: Injecting HCI hardware error event [ 89.172602][ T4304] Bluetooth: hci3: hardware error 0x00 [ 89.860647][ T4411] bond0 (unregistering): Released all slaves [ 90.118926][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.121630][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.125911][ T4538] device veth0_vlan entered promiscuous mode [ 90.129349][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.131807][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.155390][ T4956] netlink: 96 bytes leftover after parsing attributes in process `syz.2.112'. [ 90.165563][ T4962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 90.312567][ T4964] device veth3 entered promiscuous mode [ 90.368907][ T4538] device veth1_vlan entered promiscuous mode [ 90.388589][ T4981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 90.450452][ T4538] device veth0_macvtap entered promiscuous mode [ 90.489801][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.492562][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.506747][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.530661][ T4538] device veth1_macvtap entered promiscuous mode [ 91.618712][ T4304] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 91.641959][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.678598][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.681437][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.697878][ T4993] loop3: detected capacity change from 0 to 128 [ 91.704352][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.709267][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.712458][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.904869][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.401949][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.461832][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.479593][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.059764][ T5005] loop0: detected capacity change from 0 to 512 [ 93.076444][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.761465][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.764240][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.774972][ T5005] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 93.781153][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.794117][ T5005] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 93.804197][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.821420][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.842515][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.858736][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.861504][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.871622][ T4890] kworker/u4:27: attempt to access beyond end of device [ 93.871622][ T4890] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 93.883457][ T4538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.886196][ T4538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.888575][ T4538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.890859][ T4538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.042003][ T5012] binder: 5011:5012 tried to acquire reference to desc 0, got 1 instead [ 94.044834][ T4908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.055439][ T4908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.066567][ T5012] binder: 5011:5012 ioctl c0306201 20000280 returned -14 [ 94.735419][ T5015] syz.2.128 sent an empty control message without MSG_MORE. [ 94.748557][ T4396] binder: release 5011:5012 transaction 16 out, still active [ 94.750661][ T4396] binder: undelivered TRANSACTION_COMPLETE [ 94.752235][ T4396] binder: undelivered TRANSACTION_COMPLETE [ 94.961291][ T112] binder: send failed reply for transaction 16, target dead [ 94.963342][ T112] binder: undelivered transaction 17, process died. [ 95.005411][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.308686][ T4908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.310993][ T4908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.314617][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.028190][ T5043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'. [ 97.047108][ T5052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'. [ 97.054196][ T5052] Zero length message leads to an empty skb [ 99.244382][ T5073] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 101.107336][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 101.856839][ T5098] loop0: detected capacity change from 0 to 1024 [ 101.860738][ T5098] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.012747][ T5098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.544940][ T5129] MPTCP: kernel_bind error, err=-98 [ 105.723956][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 105.944070][ T5150] loop1: detected capacity change from 0 to 2048 [ 105.971187][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.974511][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.001416][ T5153] loop3: detected capacity change from 0 to 512 [ 106.097721][ T5158] lo speed is unknown, defaulting to 1000 [ 106.099708][ T5158] lo speed is unknown, defaulting to 1000 [ 106.109338][ T5158] lo speed is unknown, defaulting to 1000 [ 106.123626][ T5158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.145324][ T5158] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 106.214059][ T5158] lo speed is unknown, defaulting to 1000 [ 106.220307][ T5158] lo speed is unknown, defaulting to 1000 [ 106.225874][ T5158] lo speed is unknown, defaulting to 1000 [ 106.231453][ T5158] lo speed is unknown, defaulting to 1000 [ 106.237561][ T5158] lo speed is unknown, defaulting to 1000 [ 106.734287][ T5149] device syzkaller0 entered promiscuous mode [ 106.760780][ T5153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.785648][ T5160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.267436][ T5153] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 108.270593][ T5153] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.654712][ T5175] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 109.298884][ T5175] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 109.319463][ T5175] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.346730][ T5186] mroute: pending queue full, dropping entries [ 109.505504][ T5190] loop5: detected capacity change from 0 to 2048 [ 109.518744][ T5190] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 109.569945][ T5190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.112367][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 110.222333][ T5188] tipc: Started in network mode [ 110.223874][ T5188] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.248321][ T5188] tipc: Enabled bearer , priority 10 [ 110.268046][ T5188] tipc: Enabled bearer , priority 0 [ 110.295493][ T5199] device syz_tun entered promiscuous mode [ 110.298218][ T5199] device vlan2 entered promiscuous mode [ 110.320980][ T27] audit: type=1326 audit(110.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.327871][ T27] audit: type=1326 audit(110.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.355394][ T27] audit: type=1326 audit(110.270:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.364944][ T27] audit: type=1326 audit(110.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.378277][ T27] audit: type=1326 audit(110.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.395501][ T27] audit: type=1326 audit(110.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.419952][ T27] audit: type=1326 audit(110.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.426264][ T27] audit: type=1326 audit(110.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b5a8a8 code=0x7ffc0000 [ 110.457390][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 110.464116][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 111.267152][ T22] tipc: Node number set to 2886997162 [ 114.025145][ T5249] loop1: detected capacity change from 0 to 8192 [ 114.227229][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.230724][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.232912][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.429421][ T5258] loop3: detected capacity change from 0 to 128 [ 114.473047][ T5261] device gtp0 entered promiscuous mode [ 114.612604][ T5258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 114.664692][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.528775][ T5287] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 116.728875][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 118.086235][ T5331] binder: 5328:5331 tried to acquire reference to desc 0, got 1 instead [ 118.100071][ T5331] binder: 5328:5331 ioctl c0306201 20000280 returned -14 [ 118.111929][ T4345] binder: undelivered TRANSACTION_COMPLETE [ 118.113602][ T4345] binder: undelivered TRANSACTION_COMPLETE [ 118.276098][ T4344] binder: undelivered transaction 23, process died. [ 118.277974][ T4344] binder: undelivered transaction 22, process died. [ 118.297836][ T5333] infiniband syz1: set active [ 118.312267][ T5333] infiniband syz1: added syz_tun [ 118.345713][ T5330] loop3: detected capacity change from 0 to 4096 [ 118.427054][ T5333] RDS/IB: syz1: added [ 118.447082][ T5333] smc: adding ib device syz1 with port count 1 [ 118.448988][ T5333] smc: ib device syz1 port 1 has pnetid [ 118.576731][ T5337] loop1: detected capacity change from 0 to 32768 [ 118.584518][ T5337] gfs2: fsid=_: Trying to join cluster "lock_nolock", "_" [ 118.586665][ T5337] gfs2: fsid=_: Now mounting FS (format 0)... [ 118.591339][ T5337] gfs2: fsid=_: can't read superblock: -22 [ 118.807866][ T4312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.812416][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.815105][ T4312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.822159][ T4312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.824475][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.826735][ T4312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.960997][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 118.961009][ T27] audit: type=1326 audit(118.910:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.214" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa675a8a8 code=0x0 [ 120.006736][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.039358][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.141496][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 120.144110][ T5381] netlink: 'syz.2.219': attribute type 5 has an invalid length. [ 120.146623][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 120.153222][ T5381] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 120.156007][ T5381] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 120.158533][ T5381] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 120.161637][ T5381] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 120.164142][ T5381] device geneve2 entered promiscuous mode [ 120.244210][ T5354] lo speed is unknown, defaulting to 1000 [ 120.363772][ T5384] loop5: detected capacity change from 0 to 1024 [ 120.840379][ T4312] Bluetooth: hci1: command 0x0409 tx timeout [ 121.097575][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 121.159003][ T5401] loop3: detected capacity change from 0 to 8 [ 121.174115][ T4617] hfsplus: b-tree write err: -5, ino 4 [ 121.187326][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.078490][ T5401] SQUASHFS error: zlib decompression failed, data probably corrupt [ 122.111475][ T5401] SQUASHFS error: Failed to read block 0x9b: -5 [ 122.113244][ T5401] SQUASHFS error: Unable to read metadata cache entry [99] [ 122.115152][ T5401] SQUASHFS error: Unable to read inode 0x127 [ 122.206226][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.208246][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.373683][ T5354] device bridge_slave_0 entered promiscuous mode [ 122.393833][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.413141][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.916292][ T4312] Bluetooth: hci1: command 0x041b tx timeout [ 123.139717][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.146987][ T5354] device bridge_slave_1 entered promiscuous mode [ 123.208133][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.273060][ T5422] loop3: detected capacity change from 0 to 2048 [ 123.319038][ T5422] loop3: p2 p3 < > p4 < p5 > [ 123.320658][ T5422] loop3: partition table partially beyond EOD, truncated [ 123.331290][ T5422] loop3: p3 start 4284289 is beyond EOD, truncated [ 123.440899][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.466810][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.215558][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.248524][ T5354] team0: Port device team_slave_0 added [ 124.292533][ T5354] team0: Port device team_slave_1 added [ 124.499690][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.525410][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.534112][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.671309][ T5444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.674820][ T5444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.677988][ T5444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.680920][ T5444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.304190][ T4312] Bluetooth: hci1: command 0x040f tx timeout [ 126.321082][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.322851][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.547008][ T4347] net_ratelimit: 366 callbacks suppressed [ 126.547021][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.601438][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.661166][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.663072][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.697996][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.730980][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.733612][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.745603][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.748056][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.750421][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.752865][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.760229][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.764157][ T5458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.797317][ T5459] tipc: Enabled bearer , priority 10 [ 127.829761][ T5354] device hsr_slave_0 entered promiscuous mode [ 127.927140][ T4304] Bluetooth: hci1: command 0x0419 tx timeout [ 128.245697][ T5354] device hsr_slave_1 entered promiscuous mode [ 128.336054][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.338204][ T5354] Cannot create hsr debugfs directory [ 128.679538][ T5483] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 128.721211][ T4345] lo speed is unknown, defaulting to 1000 [ 129.582316][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 129.584758][ T5496] device bridge_slave_1 left promiscuous mode [ 129.602435][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.732398][ T5496] device bridge_slave_0 left promiscuous mode [ 129.734340][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.533809][ T5500] loop3: detected capacity change from 0 to 512 [ 130.548339][ T5500] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.551496][ T5500] EXT4-fs: Ignoring removed bh option [ 130.605580][ T5500] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.611661][ T5500] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.673758][ T5500] EXT4-fs (loop3): 1 truncate cleaned up [ 130.680717][ T5500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.726584][ T5498] lo speed is unknown, defaulting to 1000 [ 130.727775][ T5354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 130.777132][ T5354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.798694][ T5506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.245'. [ 130.802962][ T5354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.865231][ T5354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.192967][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 131.646128][ T4344] net_ratelimit: 128 callbacks suppressed [ 131.646140][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.938232][ T5533] rdma_rxe: rxe_register_device failed with error -23 [ 131.940907][ T5533] rdma_rxe: failed to add lo [ 132.678590][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.726815][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.649440][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.658597][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.715835][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.718347][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.718467][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.729500][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.743704][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.746739][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.748671][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.759723][ T5555] set match dimension is over the limit! [ 133.764578][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.786133][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.792996][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.795102][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.946713][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.950500][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.953379][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.966080][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.983490][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.485499][ T5568] vhci_hcd: invalid port number 96 [ 134.487062][ T5568] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 135.600189][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.606007][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.649749][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.652711][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.693859][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.714315][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.728738][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.767104][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.800006][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.328874][ T4745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.475562][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.559505][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.561761][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.614544][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.617198][ T5601] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.851980][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.862244][ T5576] loop3: detected capacity change from 0 to 32768 [ 138.917653][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.938222][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 138.948215][ T5576] read_mapping_page failed! [ 138.949771][ T5576] diRead: read_metapage failed [ 139.395612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.423967][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.502033][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.016888][ T4745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.096349][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.099853][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.105500][ T5354] device veth0_vlan entered promiscuous mode [ 140.107683][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.110194][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.130544][ T5354] device veth1_vlan entered promiscuous mode [ 140.204968][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.212590][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.229248][ T5354] device veth0_macvtap entered promiscuous mode [ 140.233379][ T5354] device veth1_macvtap entered promiscuous mode [ 140.327263][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.330147][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.363351][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.370282][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.374170][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.386304][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.388968][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.391809][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.396227][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.078304][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.080980][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.083549][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.114048][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.119434][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.170984][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.174021][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.174080][ T5648] loop5: detected capacity change from 0 to 256 [ 141.193712][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.205386][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.207985][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.210705][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.213372][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.254506][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.286860][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.289914][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.292731][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.312403][ T5354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.314819][ T5354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.348817][ T5648] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 141.369635][ T5354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.372053][ T5354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.112473][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.141401][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.143783][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.157904][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.261332][ T4888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.263655][ T4888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.272003][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.310140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.308283][ T5665] input: syz1 as /devices/virtual/input/input2 [ 143.316052][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.721682][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 144.172703][ T5697] binder: 5696:5697 tried to acquire reference to desc 0, got 1 instead [ 144.182653][ T5697] binder: 5696:5697 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 144.194948][ T5697] binder: 5697 RLIMIT_NICE not set [ 144.196701][ T5697] binder: 5697 RLIMIT_NICE not set [ 144.209302][ T4396] binder: release 5696:5697 transaction 28 out, still active [ 144.211366][ T4396] binder: undelivered TRANSACTION_COMPLETE [ 144.993753][ T7] binder: release 5696:5697 transaction 28 in, still active [ 144.995859][ T7] binder: send failed reply for transaction 28, target dead [ 144.998305][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.149494][ T5709] xt_bpf: check failed: parse error [ 146.035863][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.295812][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.531440][ T5727] loop1: detected capacity change from 0 to 1024 [ 146.572779][ T5730] loop3: detected capacity change from 0 to 1024 [ 146.598279][ T5727] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.292: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 146.605634][ T5727] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.292: Bad quota inode: 3, type: 0 [ 146.626490][ T5727] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 146.631426][ T5727] EXT4-fs (loop1): mount failed [ 146.856921][ T5739] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 147.076081][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.080870][ T4888] hfsplus: b-tree write err: -5, ino 4 [ 147.520038][ T4745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.004921][ T5737] serio: Serial port pts0 [ 149.141470][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.249285][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.225926][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.281559][ T5777] loop3: detected capacity change from 0 to 4096 [ 151.365877][ T4745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.145948][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.166202][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.124045][ T4306] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 154.126380][ T4306] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 154.634651][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.037036][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.045462][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.055593][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.062644][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.070573][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.082036][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.091267][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.101015][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.137841][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.067972][ T27] audit: type=1326 audit(159.020:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.085001][ T27] audit: type=1326 audit(159.030:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.105243][ T27] audit: type=1326 audit(159.030:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.126154][ T27] audit: type=1326 audit(159.030:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.147787][ T27] audit: type=1326 audit(159.030:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.153847][ T27] audit: type=1326 audit(159.030:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.180362][ T27] audit: type=1326 audit(159.030:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.195357][ T27] audit: type=1326 audit(159.030:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.219071][ T27] audit: type=1326 audit(159.040:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.254323][ T27] audit: type=1326 audit(159.050:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.6.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb695a8a8 code=0x7ffc0000 [ 159.872429][ T5907] loop1: detected capacity change from 0 to 512 [ 161.291266][ T3875] net_ratelimit: 45 callbacks suppressed [ 161.291280][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.303381][ T5907] EXT4-fs (loop1): 1 orphan inode deleted [ 161.304988][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.324540][ T39] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 1 [ 161.949494][ T5902] tmpfs: Unknown parameter 'nolazytime˙˙' [ 162.365167][ T4749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.435740][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.590610][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 162.965623][ T5942] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 163.332292][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 163.396072][ T4749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.051027][ T4304] Bluetooth: hci4: command 0x0406 tx timeout [ 164.053026][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 164.850441][ T5964] loop3: detected capacity change from 0 to 8192 [ 164.867292][ T5964] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.871338][ T5964] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 164.873995][ T5964] REISERFS (device loop3): using ordered data mode [ 164.875901][ T5964] reiserfs: using flush barriers [ 164.883073][ T5964] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.887747][ T5964] REISERFS (device loop3): checking transaction log (loop3) [ 164.895481][ T5964] REISERFS (device loop3): Using rupasov hash to sort names [ 164.897850][ T5964] REISERFS (device loop3): using 3.5.x disk format [ 164.900633][ T5964] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 164.904000][ T5964] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 164.907195][ T5964] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 164.910369][ T5964] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 164.945237][ T4749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.865594][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.881245][ T5973] loop5: detected capacity change from 0 to 512 [ 165.926702][ T5973] EXT4-fs (loop5): orphan cleanup on readonly fs [ 165.954771][ T5973] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.346: bg 0: block 248: padding at end of block bitmap is not set [ 165.995572][ T5973] __quota_error: 2 callbacks suppressed [ 165.995585][ T5973] Quota error (device loop5): write_blk: dquota write failed [ 165.999467][ T5973] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 166.013998][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.040966][ T5973] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.346: Failed to acquire dquot type 1 [ 166.058956][ T5973] EXT4-fs (loop5): 1 truncate cleaned up [ 166.827820][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.893716][ T5973] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.076052][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.787462][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.791865][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.797003][ T4749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.800645][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.872351][ T6005] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 167.911356][ T6005] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 167.922666][ T6005] Quota error (device loop5): do_check_range: Getting block 1536 out of range 0-5 [ 168.125751][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.153442][ T5973] could not allocate digest TFM handle sha1-ssse3 [ 168.184969][ T6020] batman_adv: batadv0: Adding interface: ip6gretap1 [ 168.191436][ T6020] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.217753][ T6020] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 168.240258][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.242378][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.250426][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.252522][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.274919][ T6020] batman_adv: batadv0: Removing interface: ip6gretap1 [ 168.537857][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.728587][ T4538] EXT4-fs (loop5): unmounting filesystem. [ 168.833133][ T6056] netlink: 'syz.5.359': attribute type 3 has an invalid length. [ 168.844320][ T6056] netlink: 'syz.5.359': attribute type 3 has an invalid length. [ 168.915829][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.691992][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.834274][ T6060] loop5: detected capacity change from 0 to 1024 [ 170.541036][ T6060] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #3: comm syz.5.360: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 170.552864][ T6060] EXT4-fs error (device loop5): ext4_quota_enable:7025: comm syz.5.360: Bad quota inode: 3, type: 0 [ 170.558379][ T6060] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 170.571535][ T6060] EXT4-fs (loop5): mount failed [ 170.756160][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.854382][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.822626][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.834306][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.847367][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.856498][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.860590][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.837269][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.199763][ T6100] loop1: detected capacity change from 0 to 16 [ 175.236674][ T6100] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.988202][ T4745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.155265][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 178.409555][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.412458][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.414914][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.468328][ T6121] loop1: detected capacity change from 0 to 512 [ 178.494348][ T6121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.087019][ T4412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.187804][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.202438][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.560179][ T4745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.580026][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 179.589695][ T6139] tmpfs: Unknown parameter 'nolazytime˙˙' [ 179.595209][ T6139] loop3: detected capacity change from 0 to 64 [ 180.585915][ T6139] hfs: umask requires a value [ 180.587437][ T6139] hfs: unable to parse mount options [ 180.761536][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.774689][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 180.788351][ T6147] fuse: Bad value for 'fd' [ 180.936570][ T6156] loop3: detected capacity change from 0 to 4096 [ 180.944627][ T6159] fuse: Bad value for 'fd' [ 180.947790][ T6159] fuse: Unknown parameter 'fd18446744073709551615' [ 181.814690][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.870148][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.898999][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.883424][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.581148][ T4749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.722266][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 185.080434][ T6246] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.083717][ T6246] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.086510][ T6246] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.088925][ T6246] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.166756][ T6246] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 185.179612][ T6249] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 185.182809][ T6249] XFS (loop5): SB validate failed with error -5. [ 185.271827][ T6265] loop3: detected capacity change from 0 to 1024 [ 185.283755][ T6265] EXT4-fs: Ignoring removed nobh option [ 185.293227][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.295918][ T6265] EXT4-fs: inline encryption not supported [ 185.297496][ T6265] EXT4-fs: Ignoring removed bh option [ 185.304801][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.308655][ T6265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.312198][ T6265] EXT4-fs: test_dummy_encryption requires encrypt feature [ 185.316065][ T6266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.414748][ T6267] loop1: detected capacity change from 0 to 512 [ 185.463037][ T6267] EXT4-fs (loop1): 1 orphan inode deleted [ 185.464892][ T6267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.499747][ T4599] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 185.506827][ T4599] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:14: Failed to release dquot type 1 [ 186.875604][ T4304] Bluetooth: hci5: command 0x0406 tx timeout [ 186.957800][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 188.576124][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.649690][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.639210][ T4301] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 189.641802][ T4301] Bluetooth: hci4: Injecting HCI hardware error event [ 189.644681][ T4304] Bluetooth: hci4: hardware error 0x00 [ 189.821905][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.493382][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.757905][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.802026][ T6355] ptrace attach of "./syz-executor exec"[4538] was attempted by ""[6355] [ 192.865995][ T4304] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 193.934181][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.962506][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.424'. [ 195.189563][ T6379] loop1: detected capacity change from 0 to 128 [ 196.677368][ T4599] kworker/u4:14: attempt to access beyond end of device [ 196.677368][ T4599] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 197.894804][ T6399] netlink: 32 bytes leftover after parsing attributes in process `syz.6.435'. [ 197.912391][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.6.435'. [ 198.195165][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.683301][ T6437] loop1: detected capacity change from 0 to 1024 [ 198.688180][ T6437] ext4: Unknown parameter 'fsmagic' [ 198.841446][ T5456] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.955053][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.459'. [ 205.330003][ T6503] Bluetooth: MGMT ver 1.22 [ 207.149265][ C1] vcan0: j1939_tp_rxtimer: 0x000000003987b2d4: rx timeout, send abort [ 207.649525][ C1] vcan0: j1939_tp_rxtimer: 0x000000003fb3b040: rx timeout, send abort [ 207.649531][ T6593] loop1: detected capacity change from 0 to 1024 [ 207.653649][ C1] vcan0: j1939_tp_rxtimer: 0x000000003987b2d4: abort rx timeout. Force session deactivation [ 207.698493][ T6593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 207.808790][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 207.888023][ T6590] tipc: Enabling of bearer rejected, failed to enable media [ 208.153616][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0x000000003fb3b040: abort rx timeout. Force session deactivation [ 208.734400][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 210.813020][ T6627] loop5: detected capacity change from 0 to 512 [ 210.863318][ T55] device hsr_slave_0 left promiscuous mode [ 210.907841][ T55] device hsr_slave_1 left promiscuous mode [ 210.913822][ T6627] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 210.965608][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.967757][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.982883][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.985221][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.026034][ T55] device bridge_slave_1 left promiscuous mode [ 211.027904][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.156999][ T55] device bridge_slave_0 left promiscuous mode [ 211.158845][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.316090][ T55] device veth1_macvtap left promiscuous mode [ 211.317963][ T55] device veth0_macvtap left promiscuous mode [ 211.319799][ T55] device veth1_vlan left promiscuous mode [ 211.321584][ T55] device veth0_vlan left promiscuous mode [ 216.472176][ T6736] loop3: detected capacity change from 0 to 512 [ 216.491541][ T6736] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 216.497264][ T6736] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 216.502067][ T6736] EXT4-fs (loop3): mount failed [ 216.713407][ T6744] loop3: detected capacity change from 0 to 1764 [ 216.772827][ T4306] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 216.781897][ T4306] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.339325][ T55] team0 (unregistering): Port device team_slave_1 removed [ 217.518781][ T55] team0 (unregistering): Port device team_slave_0 removed [ 217.706226][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.916968][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.444892][ T55] bond0 (unregistering): Released all slaves [ 220.684670][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.475'. [ 220.690181][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.475'. [ 220.696591][ T6725] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 220.701123][ T6733] device gtp0 entered promiscuous mode [ 220.821138][ T6753] loop1: detected capacity change from 0 to 128 [ 220.836829][ T6753] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.852523][ T6753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.091464][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 222.106064][ T4538] EXT4-fs (loop5): unmounting filesystem. [ 224.672205][ T4301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.678312][ T4301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.685892][ T4301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.714793][ T4301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.718388][ T4301] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.720533][ T4301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.795594][ T6791] lo speed is unknown, defaulting to 1000 [ 227.262228][ T4301] Bluetooth: hci2: command 0x0409 tx timeout [ 228.654150][ T6834] ptrace attach of "./syz-executor exec"[5354] was attempted by ""[6834] [ 229.617691][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 230.038161][ T6791] chnl_net:caif_netlink_parms(): no params data found [ 230.091616][ T6844] loop1: detected capacity change from 0 to 512 [ 230.163849][ T6844] rdma_rxe: rxe_register_device failed with error -23 [ 230.166180][ T6844] rdma_rxe: failed to add syz_tun [ 231.076041][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.078068][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.080797][ T6791] device bridge_slave_0 entered promiscuous mode [ 231.084974][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.087681][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.090142][ T6791] device bridge_slave_1 entered promiscuous mode [ 231.152136][ T6791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.192741][ T6791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.249062][ T4304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.253760][ T4304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.256999][ T4304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.259637][ T4304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.262855][ T4304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.265898][ T4304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.635636][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 231.993280][ T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.123536][ T6791] team0: Port device team_slave_0 added [ 233.019557][ T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.031729][ T6791] team0: Port device team_slave_1 added [ 233.129982][ T6884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 233.132625][ T6884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 233.138134][ T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.146679][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.148570][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.164421][ T6791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.178802][ T6791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.180665][ T6791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.189041][ T6791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.215681][ T6887] loop1: detected capacity change from 0 to 2048 [ 233.252529][ T6887] EXT4-fs (loop1): invalid inodes per group: 1 [ 233.252529][ T6887] [ 233.315473][ T4301] Bluetooth: hci4: command 0x0409 tx timeout [ 233.317807][ T6791] device hsr_slave_0 entered promiscuous mode [ 233.355809][ T6791] device hsr_slave_1 entered promiscuous mode [ 233.414391][ T6891] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 234.066616][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 234.075561][ T6791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.077654][ T6791] Cannot create hsr debugfs directory [ 234.291225][ T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.162047][ T6894] netlink: 'syz.6.529': attribute type 13 has an invalid length. [ 235.164303][ T6865] lo speed is unknown, defaulting to 1000 [ 235.427275][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 236.064688][ T6791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.190394][ T6791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.161319][ T6934] bridge0: port 3(vlan2) entered blocking state [ 237.163113][ T6934] bridge0: port 3(vlan2) entered disabled state [ 237.168077][ T6934] device vlan2 entered promiscuous mode [ 237.169814][ T6934] device bond0 entered promiscuous mode [ 237.171343][ T6934] device bond_slave_0 entered promiscuous mode [ 237.179548][ T6934] device bond_slave_1 entered promiscuous mode [ 237.257134][ T6791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.496492][ T4301] Bluetooth: hci4: command 0x040f tx timeout [ 238.708014][ T6791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.854633][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 239.306621][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.424835][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.565407][ T4304] Bluetooth: hci4: command 0x0419 tx timeout [ 239.654212][ T6865] device bridge_slave_0 entered promiscuous mode [ 239.660664][ T6971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.664784][ T6971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.667009][ T6971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.874546][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.876994][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.879614][ T6865] device bridge_slave_1 entered promiscuous mode [ 239.923645][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.774374][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.914796][ T6865] team0: Port device team_slave_0 added [ 240.934220][ T6865] team0: Port device team_slave_1 added [ 241.019489][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.021489][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.028699][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.033171][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.035023][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.042407][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.122227][ T6791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.240942][ T6791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.298172][ T6791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.397339][ T6865] device hsr_slave_0 entered promiscuous mode [ 241.435802][ T6865] device hsr_slave_1 entered promiscuous mode [ 241.475471][ T6865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.477460][ T6865] Cannot create hsr debugfs directory [ 241.770662][ T6791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.281723][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.325217][ T6791] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.336132][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.338652][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.341124][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.343989][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.353624][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.355603][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.360445][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.391370][ T55] device hsr_slave_0 left promiscuous mode [ 242.426069][ T55] device hsr_slave_1 left promiscuous mode [ 242.525649][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.527823][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.531015][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.533054][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.536082][ T55] device bridge_slave_1 left promiscuous mode [ 242.537744][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.571177][ T55] device bridge_slave_0 left promiscuous mode [ 242.572870][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.706214][ T55] device veth1_macvtap left promiscuous mode [ 242.707881][ T55] device veth0_macvtap left promiscuous mode [ 242.709597][ T55] device veth1_vlan left promiscuous mode [ 242.711248][ T55] device veth0_vlan left promiscuous mode [ 244.639690][ T55] team0 (unregistering): Port device team_slave_1 removed [ 244.828059][ T55] team0 (unregistering): Port device team_slave_0 removed [ 245.037744][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.246206][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.795403][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 247.640719][ T55] bond0 (unregistering): Released all slaves [ 247.910816][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.913783][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.917043][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.919012][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.921333][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.924096][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.927018][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.930932][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.933894][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.940729][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.943592][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.984515][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.988559][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.995047][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.997874][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.002319][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.017532][ T6865] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 248.057451][ T6865] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 248.077940][ T6865] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 248.140463][ T6865] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 248.222122][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.224337][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.246687][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.287028][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.289808][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.305178][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.327930][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.330619][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.333347][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.340400][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.348067][ T6865] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.350704][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.353827][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.357049][ T6791] device veth0_vlan entered promiscuous mode [ 248.364926][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.368849][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.371715][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.373717][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.382538][ T6791] device veth1_vlan entered promiscuous mode [ 248.386779][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.389463][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.392618][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.400330][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.402953][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.405032][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.420906][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.424021][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.427044][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.432052][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.447307][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.449857][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.452599][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.456297][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.470567][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.473641][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.476749][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.479336][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.481785][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.484389][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.489367][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.498245][ T6791] device veth0_macvtap entered promiscuous mode [ 248.503896][ T6791] device veth1_macvtap entered promiscuous mode [ 248.520217][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.523227][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.530680][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.533511][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.538199][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.543789][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.554478][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.558170][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.561631][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.612460][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.615650][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.618290][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.621116][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.625152][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.631146][ T6791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.633685][ T6791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.645413][ T6791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.647788][ T6791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.651421][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.654269][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.746942][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.749437][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.767335][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.782172][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.784494][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.794415][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.807111][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.809409][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.814300][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.836699][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.838496][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.968978][ T7060] loop1: detected capacity change from 0 to 128 [ 248.989179][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 248.993090][ T7060] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.999203][ T7063] netlink: 'syz.3.502': attribute type 5 has an invalid length. [ 249.003130][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 249.031261][ T7063] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 249.033693][ T7063] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 249.059789][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.075958][ T7063] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 249.078483][ T7063] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 249.081197][ T7063] device geneve2 entered promiscuous mode [ 249.107345][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 249.120580][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 249.310786][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 249.331380][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.335197][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.414917][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.469537][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.107826][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.110525][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.116356][ T6865] device veth0_vlan entered promiscuous mode [ 250.669292][ T7095] rdma_rxe: rxe_register_device failed with error -23 [ 250.671272][ T7095] rdma_rxe: failed to add lo [ 251.004027][ T6865] device veth1_vlan entered promiscuous mode [ 251.600331][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.609441][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.622332][ T6865] device veth0_macvtap entered promiscuous mode [ 251.627745][ T6865] device veth1_macvtap entered promiscuous mode [ 251.765182][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.587763][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.590773][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.593704][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.638237][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.641265][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.747505][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.766747][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.769846][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.795642][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.798567][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.801209][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.804095][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.808559][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.832185][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.834873][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.838831][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.912851][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.648579][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.660560][ T6865] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.675453][ T6865] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.677837][ T6865] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.680189][ T6865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.924784][ T4867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.929065][ T4867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.933877][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.969380][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.971797][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.991265][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.510754][ T7160] binder: 7158:7160 tried to acquire reference to desc 0, got 1 instead [ 256.531858][ T7160] binder: 7158:7160 got new transaction with bad transaction stack, transaction 33 has target 7158:0 [ 256.535042][ T7160] binder: 7158:7160 transaction call to 7158:0 failed 34/29201/-71, size 0-0 line 3114 [ 256.677313][ T1963] binder: release 7158:7160 transaction 33 out, still active [ 256.763522][ T1963] binder: send failed reply for transaction 33, target dead [ 258.959450][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.7.569'. [ 262.787890][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.583'. [ 264.943147][ T7269] netlink: 'syz.7.589': attribute type 1 has an invalid length. [ 265.120421][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.7.589'. [ 265.130476][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.6.590'. [ 265.991265][ T7292] netlink: 'syz.6.593': attribute type 1 has an invalid length. [ 266.281124][ T7292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.023177][ T7311] loop7: detected capacity change from 0 to 256 [ 267.089251][ T7299] bond1: (slave veth3): Enslaving as an active interface with a down link [ 267.115028][ T7292] device veth1 entered promiscuous mode [ 267.139115][ T7292] device veth1 left promiscuous mode [ 267.153310][ T7292] bond1: (slave vlan3): making interface the new active one [ 267.170461][ T7292] device veth1 entered promiscuous mode [ 267.180192][ T7292] device vlan3 entered promiscuous mode [ 267.182088][ T7292] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 267.268394][ T7316] syz.2.602 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 267.928716][ T7306] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 267.935624][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 268.692987][ T27] audit: type=1326 audit(524.635:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.2.605" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b5a8a8 code=0x0 [ 269.645444][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.000346][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 272.122051][ T27] audit: type=1326 audit(528.065:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.170597][ T7358] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 272.183244][ T27] audit: type=1326 audit(528.105:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.204553][ T27] audit: type=1326 audit(528.105:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.211455][ T27] audit: type=1326 audit(528.105:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.217535][ T27] audit: type=1326 audit(528.105:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff95558dd4 code=0x7ffc0000 [ 272.224554][ T27] audit: type=1326 audit(528.105:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.230903][ T27] audit: type=1326 audit(528.115:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.236726][ T27] audit: type=1326 audit(528.115:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.242303][ T27] audit: type=1326 audit(528.115:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff9555a8a8 code=0x7ffc0000 [ 272.473990][ T7384] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 272.484430][ T7384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.508668][ T7388] loop1: detected capacity change from 0 to 64 [ 273.255539][ T4301] Bluetooth: hci4: command 0x0405 tx timeout [ 273.260382][ T7384] bond1: (slave veth3): Enslaving as an active interface with a down link [ 273.421461][ T7394] loop3: detected capacity change from 0 to 256 [ 274.555523][ T7394] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 274.621806][ T7384] bond1: (slave veth0_to_bond): making interface the new active one [ 274.696584][ T7384] device veth0_to_bond entered promiscuous mode [ 274.734620][ T7384] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 274.754832][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 274.847522][ T7406] device veth1 entered promiscuous mode [ 274.849426][ T7406] device veth1 left promiscuous mode [ 274.852548][ T7406] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 279.659687][ T7464] netlink: 76 bytes leftover after parsing attributes in process `syz.2.633'. [ 283.241719][ T7507] loop1: detected capacity change from 0 to 1024 [ 283.244043][ T7507] EXT4-fs: Ignoring removed oldalloc option [ 283.248544][ T7506] netlink: 'syz.7.643': attribute type 10 has an invalid length. [ 283.271160][ T7507] EXT4-fs: Ignoring removed nobh option [ 283.272781][ T7507] EXT4-fs: Ignoring removed bh option [ 283.288120][ T7507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.311164][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.643'. [ 284.821091][ T7507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.295527][ T7506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.316481][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 287.679761][ T7544] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 287.736808][ T7553] loop1: detected capacity change from 0 to 64 [ 290.363897][ T7585] loop7: detected capacity change from 0 to 40427 [ 290.376574][ T7585] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 290.406043][ T7585] F2FS-fs (loop7): invalid crc value [ 294.079269][ T7585] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 294.081081][ T7588] overlayfs: failed to clone lowerpath [ 294.936414][ T7613] overlayfs: failed to clone upperpath [ 295.934951][ T7608] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 296.025651][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 297.867839][ T7608] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.067583][ T4617] device vlan3 left promiscuous mode [ 298.092591][ T7648] block nbd7: shutting down sockets [ 304.555188][ T7716] loop1: detected capacity change from 0 to 512 [ 304.612628][ T7716] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.687: casefold flag without casefold feature [ 304.631847][ T7716] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.687: couldn't read orphan inode 15 (err -117) [ 304.646329][ T7716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 304.855941][ T7706] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 305.612074][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 306.663547][ T4584] device veth0_to_bond left promiscuous mode [ 309.968852][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.972649][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.717096][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.718858][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.024443][ T7796] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 312.268634][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.271206][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.386722][ T7794] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 312.559894][ T7804] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 314.192360][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.194944][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.275657][ T7804] bond1 (unregistering): Released all slaves [ 317.187785][ T7853] mmap: syz.7.716 (7853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 318.255754][ T7863] overlayfs: failed to clone lowerpath [ 319.066291][ T7870] loop7: detected capacity change from 0 to 1024 [ 320.465052][ T7870] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 321.837424][ T7900] loop3: detected capacity change from 0 to 4096 [ 321.964159][ T7900] ntfs: volume version 3.1. [ 323.770478][ T7911] binder: 7901:7911 ioctl 4018620d 0 returned -22 [ 324.314606][ T6865] EXT4-fs (loop7): unmounting filesystem. [ 328.043854][ T7950] loop3: detected capacity change from 0 to 64 [ 329.568637][ T7967] loop1: detected capacity change from 0 to 128 [ 329.577948][ T7967] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.847078][ T7967] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.642854][ T4301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.672928][ T4301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.686833][ T4301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.713370][ T4301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.724065][ T4301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.736380][ T4301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.043617][ T7981] lo speed is unknown, defaulting to 1000 [ 334.164212][ T4304] Bluetooth: hci5: command 0x0409 tx timeout [ 335.922759][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.959360][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.219200][ T4304] Bluetooth: hci5: command 0x041b tx timeout [ 336.467940][ T8033] loop3: detected capacity change from 0 to 40427 [ 336.507442][ T8033] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 336.509727][ T8033] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 336.530321][ T8033] F2FS-fs (loop3): invalid crc value [ 336.836049][ T8033] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.863696][ T8033] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 336.865893][ T8033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 337.133626][ T6248] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.191422][ T7981] chnl_net:caif_netlink_parms(): no params data found [ 338.044839][ T6248] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.510987][ T4301] Bluetooth: hci5: command 0x040f tx timeout [ 339.924222][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.936912][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.950360][ T7981] device bridge_slave_0 entered promiscuous mode [ 341.182871][ T6248] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.192020][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.194124][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.198956][ T7981] device bridge_slave_1 entered promiscuous mode [ 341.483157][ T6248] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.537284][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.541742][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.635439][ T4304] Bluetooth: hci5: command 0x0419 tx timeout [ 342.443675][ T7981] team0: Port device team_slave_0 added [ 342.536574][ T7981] team0: Port device team_slave_1 added [ 342.596239][ T8112] loop3: detected capacity change from 0 to 64 [ 343.338728][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.340730][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.392148][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.578750][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.580890][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.588953][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.658139][ T7981] device hsr_slave_0 entered promiscuous mode [ 343.725853][ T7981] device hsr_slave_1 entered promiscuous mode [ 343.770785][ T7981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.772996][ T7981] Cannot create hsr debugfs directory [ 345.900369][ T8165] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 345.903350][ T8165] Mem abort info: [ 345.904349][ T8165] ESR = 0x0000000086000006 [ 345.905627][ T8165] EC = 0x21: IABT (current EL), IL = 32 bits [ 345.907362][ T8165] SET = 0, FnV = 0 [ 345.908420][ T8165] EA = 0, S1PTW = 0 [ 345.909459][ T8165] FSC = 0x06: level 2 translation fault SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.910963][ T8165] user pgtable: 4k pages, 48-bit VAs, pgdp=000000013965d000 [ 345.912851][ T8165] [0000000000000000] pgd=0800000125638003, p4d=0800000125638003, pud=080000013578c003, pmd=0000000000000000 [ 345.916083][ T8165] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 345.918040][ T8165] Modules linked in: [ 345.919103][ T8165] CPU: 1 PID: 8165 Comm: syz.2.772 Not tainted 6.1.141-syzkaller #0 [ 345.921262][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.923922][ T8165] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 345.926057][ T8165] pc : 0x0 [ 345.926899][ T8165] lr : bond_xdp_xmit+0x27c/0x45c [ 345.928208][ T8165] sp : ffff800020957220 [ 345.929360][ T8165] x29: ffff8000209572e0 x28: 000000000000000f x27: ffff800020957248 [ 345.931500][ T8165] x26: dfff800000000000 x25: ffff800012b264b8 x24: ffff0000dbb40000 [ 345.933652][ T8165] x23: fffffbffeffb6ed0 x22: ffff0000dee0c000 x21: fffffbffeffb6ed0 [ 345.935894][ T8165] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 345.938074][ T8165] x17: 0000000000000000 x16: ffff8000082d0750 x15: 0000000000000002 [ 345.940204][ T8165] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 345.942388][ T8165] x11: 0000000000004c79 x10: ffff800024239000 x9 : ffff800020957280 [ 345.944573][ T8165] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 345.946757][ T8165] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 345.948969][ T8165] x2 : ffff8000209572a0 x1 : 0000000000000001 x0 : ffff0000dbb40000 [ 345.951152][ T8165] Call trace: [ 345.952029][ T8165] 0x0 [ 345.952747][ T8165] bq_xmit_all+0xab0/0xf10 [ 345.953940][ T8165] __dev_flush+0xc4/0x18c [ 345.955091][ T8165] xdp_do_flush+0x14/0x28 [ 345.956298][ T8165] bpf_test_run_xdp_live+0x10e0/0x1544 [ 345.957858][ T8165] bpf_prog_test_run_xdp+0x560/0xb88 [ 345.959300][ T8165] bpf_prog_test_run+0x2dc/0x364 [ 345.960653][ T8165] __sys_bpf+0x4ec/0x634 [ 345.961679][ T8165] __arm64_sys_bpf+0x80/0x98 [ 345.962779][ T8165] invoke_syscall+0x98/0x2bc [ 345.963878][ T8165] el0_svc_common+0x138/0x258 [ 345.965179][ T8165] do_el0_svc+0x58/0x13c [ 345.966299][ T8165] el0_svc+0x58/0x138 [ 345.967380][ T8165] el0t_64_sync_handler+0x84/0xf0 [ 345.968752][ T8165] el0t_64_sync+0x18c/0x190 [ 345.969896][ T8165] Code: bad PC value [ 345.970977][ T8165] ---[ end trace 0000000000000000 ]--- [ 346.512473][ T8165] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 346.514589][ T8165] SMP: stopping secondary CPUs [ 346.515888][ T8165] Kernel Offset: disabled [ 346.517045][ T8165] CPU features: 0x080000,02070084,26017203 [ 346.518594][ T8165] Memory Limit: none [ 347.073180][ T8165] Rebooting in 86400 seconds..