last executing test programs: 3m25.662211327s ago: executing program 4 (id=171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80) 3m25.276703023s ago: executing program 4 (id=176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 3m25.090315811s ago: executing program 4 (id=181): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 3m24.761133416s ago: executing program 4 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001280)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0xd}, 0x20) creat(&(0x7f0000000100)='./bus\x00', 0x32) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8) 3m22.729512073s ago: executing program 4 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xec2861, &(0x7f0000000340)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) 3m21.494075886s ago: executing program 4 (id=199): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd8443314ef736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ce95d9669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3m20.666753802s ago: executing program 32 (id=199): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd8443314ef736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ce95d9669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 12.504278061s ago: executing program 1 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x78, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") 11.442546647s ago: executing program 1 (id=557): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x194}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGISO7816(r6, 0x80285442, 0x0) 11.345959041s ago: executing program 0 (id=261): io_setup(0x4082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 9.798115507s ago: executing program 1 (id=559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 9.138215096s ago: executing program 1 (id=562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 9.056962969s ago: executing program 0 (id=563): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0) ioctl$TCXONC(r5, 0x5453, 0x2) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r6, 0x0, 0x0, 0x1000f4) 8.857008878s ago: executing program 2 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x28040000) 8.666035437s ago: executing program 1 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b0000000500000002000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=ANY=[], 0xfffffeab}, 0x1, 0x7}, 0x8000) 7.933624748s ago: executing program 2 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() setrlimit(0xf, &(0x7f0000000280)={0x6, 0x1}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x6, 0x1d, 0x7}, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0800000000004e20,timeout=0']) 7.498020176s ago: executing program 3 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0xa0, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") 6.314021147s ago: executing program 1 (id=569): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6.312099557s ago: executing program 2 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x88, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") 6.003315301s ago: executing program 0 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 4.278536895s ago: executing program 3 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_DST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") 4.277085235s ago: executing program 2 (id=573): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) shmdt(r0) 4.1562771s ago: executing program 0 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd02}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r6, 0x0) listen(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 2.941486252s ago: executing program 3 (id=575): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3ea}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 2.926119673s ago: executing program 0 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r6, 0x0, 0x300, 0x0, 0x0, 0x3, r8}]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x288}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.822254258s ago: executing program 2 (id=577): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, 0x0) 2.557774109s ago: executing program 3 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b0000000500000002000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=ANY=[], 0xfffffeab}, 0x1, 0x7}, 0x8000) 2.552864349s ago: executing program 2 (id=579): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) 1.813338701s ago: executing program 0 (id=580): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0) ioctl$TCXONC(r5, 0x5453, 0x2) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r6, 0x0, 0x0, 0x1000f4) 1.468592396s ago: executing program 3 (id=581): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x2}}]}, 0xfc, 0x25d, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffbffffc, 0x0, 0x4, 0x1d, "0062ba098200ff00"}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget(0x3, 0x4, 0x2) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) 0s ago: executing program 3 (id=582): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040010}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): c addresses unique to avoid problems! [ 79.437827][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.437841][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.437851][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.437864][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.437874][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.437887][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.439619][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.538333][ T4396] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.548557][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.565214][ T4396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.590886][ T4396] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.612193][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 79.617928][ T4396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.627720][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 79.627744][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 79.633792][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 79.633825][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 79.633854][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 79.747187][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.757757][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 79.774861][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.780542][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.788239][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.799852][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.810821][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.835261][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.855752][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.883187][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.909285][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.921209][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.930069][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.951031][ T4395] loop1: detected capacity change from 0 to 128 [ 79.982569][ T4395] EXT4-fs: Ignoring removed nobh option [ 80.007343][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.033441][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.102837][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.103460][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.159465][ T4395] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.247276][ T4395] EXT4-fs (loop1): unmounting filesystem. [ 80.527147][ T4417] loop2: detected capacity change from 0 to 16 [ 80.563192][ T4417] erofs: (device loop2): mounted with root inode @ nid 36. [ 80.856303][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.936586][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.090604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.161656][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.246706][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.329794][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.357478][ T4423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 82.544238][ T4441] loop0: detected capacity change from 0 to 16 [ 82.581096][ T4441] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.375847][ T4443] tipc: Started in network mode [ 83.400685][ T4443] tipc: Node identity 1e030124e4fc, cluster identity 4711 [ 83.421552][ T4443] tipc: Enabled bearer , priority 0 [ 83.669584][ T4446] loop2: detected capacity change from 0 to 8192 [ 83.673299][ T4447] tipc: Disabling bearer [ 83.749599][ T4452] tmpfs: Bad value for 'huge' [ 84.214441][ T4446] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff00) [ 84.389236][ T4446] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff00) [ 84.464587][ T14] tipc: Node number set to 4211015972 [ 85.631193][ T4462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 85.829930][ T4467] loop0: detected capacity change from 0 to 16 [ 85.854255][ T4467] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.572705][ T4409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.583654][ T951] cfg80211: failed to load regulatory.db [ 86.633555][ T4470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23'. [ 86.710727][ T4470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23'. [ 86.910058][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 86.910073][ T26] audit: type=1326 audit(1764080858.927:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 87.891280][ T4485] loop4: detected capacity change from 0 to 16 [ 87.966199][ T4485] erofs: (device loop4): mounted with root inode @ nid 36. [ 88.191076][ T26] audit: type=1326 audit(1764080858.937:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.280513][ C0] sched: RT throttling activated [ 88.284388][ T26] audit: type=1326 audit(1764080859.027:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.512411][ T26] audit: type=1326 audit(1764080859.057:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.514038][ T4371] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.555265][ T26] audit: type=1326 audit(1764080859.067:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.652834][ T26] audit: type=1326 audit(1764080859.097:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.795326][ T26] audit: type=1326 audit(1764080859.157:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.884678][ T26] audit: type=1326 audit(1764080859.167:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 88.925119][ T4503] loop1: detected capacity change from 0 to 128 [ 89.002291][ T4496] loop2: detected capacity change from 0 to 4096 [ 89.551664][ T26] audit: type=1326 audit(1764080859.207:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 89.747075][ T26] audit: type=1326 audit(1764080859.207:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 89.846847][ T4496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.905117][ T14] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 90.107124][ T14] usb 4-1: device descriptor read/64, error -71 [ 90.120268][ T4519] Zero length message leads to an empty skb [ 90.172330][ T4519] loop0: detected capacity change from 0 to 16 [ 90.224717][ T4519] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.944306][ T4523] netlink: 7 bytes leftover after parsing attributes in process `syz.1.37'. [ 90.956534][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 90.992820][ T4523] netlink: 7 bytes leftover after parsing attributes in process `syz.1.37'. [ 91.070919][ T14] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 91.220632][ T14] usb 4-1: device descriptor read/64, error -71 [ 91.345884][ T14] usb usb4-port1: attempt power cycle [ 91.666736][ T4539] tipc: Started in network mode [ 91.686509][ T4539] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 91.712507][ T4539] tipc: Enabled bearer , priority 0 [ 91.770678][ T14] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 91.831576][ T14] usb 4-1: device descriptor read/8, error -71 [ 92.060119][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 92.060133][ T26] audit: type=1326 audit(1764080864.077:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 92.235994][ T26] audit: type=1326 audit(1764080864.117:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 92.284714][ T4552] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 92.371330][ T26] audit: type=1326 audit(1764080864.117:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 92.449393][ T26] audit: type=1326 audit(1764080864.117:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 92.552037][ T4558] loop0: detected capacity change from 0 to 16 [ 92.572413][ T4558] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.185570][ T26] audit: type=1326 audit(1764080864.117:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 93.208146][ T951] tipc: Node number set to 9611946 [ 93.215083][ T4371] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.282188][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 93.580248][ T26] audit: type=1326 audit(1764080865.597:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 93.614413][ T26] audit: type=1326 audit(1764080865.617:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 93.690798][ T26] audit: type=1326 audit(1764080865.617:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 93.720245][ T4577] loop1: detected capacity change from 0 to 512 [ 93.750588][ T26] audit: type=1326 audit(1764080865.617:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 93.897765][ T4577] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.910418][ T26] audit: type=1326 audit(1764080865.617:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 94.080392][ T4577] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 94.181646][ T4592] netlink: 'syz.4.63': attribute type 1 has an invalid length. [ 94.200709][ T4577] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.58: Corrupt directory, running e2fsck is recommended [ 94.324166][ T4577] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 94.347612][ T4577] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.58: corrupted in-inode xattr [ 94.425375][ T4577] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.58: couldn't read orphan inode 15 (err -117) [ 94.465523][ T4577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.494256][ T4601] program syz.4.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.547019][ T4574] device bond1 entered promiscuous mode [ 94.704112][ T4605] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 94.783368][ T4607] loop2: detected capacity change from 0 to 1024 [ 94.830160][ T4607] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.67: Failed to acquire dquot type 0 [ 94.867825][ T4605] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 94.936326][ T4607] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 95.084108][ T4615] loop4: detected capacity change from 0 to 16 [ 95.098612][ T4607] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.67: corrupted inode contents [ 95.154963][ T4615] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.563701][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 95.829796][ T4605] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.58: Corrupt directory, running e2fsck is recommended [ 95.842825][ T4607] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #13: comm syz.2.67: mark_inode_dirty error [ 95.862396][ T4605] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.58: path /12/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 95.945648][ T4607] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.67: corrupted inode contents [ 96.019799][ T4607] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.67: mark_inode_dirty error [ 96.049247][ T4607] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.67: corrupted inode contents [ 96.093897][ T4605] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 64: comm syz.1.58: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.161065][ T4607] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 96.229740][ T4607] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #13: comm syz.2.67: corrupted inode contents [ 96.311771][ T4607] EXT4-fs error (device loop2): ext4_truncate:4318: inode #13: comm syz.2.67: mark_inode_dirty error [ 96.371695][ T4607] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 96.410070][ T4607] EXT4-fs (loop2): 1 truncate cleaned up [ 96.424246][ T4607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.436130][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 96.472219][ T4607] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.67: Failed to acquire dquot type 0 [ 96.651530][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 96.733784][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 96.972750][ T4642] random: crng reseeded on system resumption [ 97.112635][ T4645] netlink: 108 bytes leftover after parsing attributes in process `syz.4.82'. [ 97.207098][ T4645] netlink: 108 bytes leftover after parsing attributes in process `syz.4.82'. [ 97.738909][ T4654] tmpfs: Bad value for 'huge' [ 98.609869][ T4658] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 99.260229][ T4675] syz.4.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.347043][ T4678] ======================================================= [ 99.347043][ T4678] WARNING: The mand mount option has been deprecated and [ 99.347043][ T4678] and is ignored by this kernel. Remove the mand [ 99.347043][ T4678] option from the mount to silence this warning. [ 99.347043][ T4678] ======================================================= [ 99.546010][ T4678] option changes via remount are deprecated (pid=4676 comm=syz.2.94) [ 100.041720][ T4695] loop3: detected capacity change from 0 to 128 [ 100.424160][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 100.424174][ T26] audit: type=1326 audit(1764080872.447:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 100.458645][ T26] audit: type=1326 audit(1764080872.477:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 100.499579][ T26] audit: type=1326 audit(1764080872.477:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 100.604424][ T26] audit: type=1326 audit(1764080872.477:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 100.637633][ T26] audit: type=1326 audit(1764080872.477:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 100.779198][ T4721] lo speed is unknown, defaulting to 1000 [ 100.990443][ T4721] lo speed is unknown, defaulting to 1000 [ 101.039189][ T26] audit: type=1326 audit(1764080872.477:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 101.061893][ T4721] lo speed is unknown, defaulting to 1000 [ 101.088632][ T4721] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.117913][ T26] audit: type=1326 audit(1764080872.477:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 101.156603][ T26] audit: type=1326 audit(1764080872.477:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 101.193564][ T4721] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.204278][ T26] audit: type=1326 audit(1764080872.547:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 101.301303][ T4721] lo speed is unknown, defaulting to 1000 [ 101.309574][ T4721] lo speed is unknown, defaulting to 1000 [ 101.373100][ T4721] lo speed is unknown, defaulting to 1000 [ 101.379818][ T4721] lo speed is unknown, defaulting to 1000 [ 101.421416][ T4721] lo speed is unknown, defaulting to 1000 [ 101.454476][ T26] audit: type=1326 audit(1764080872.547:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd57fd8f783 code=0x7ffc0000 [ 102.011913][ T4747] loop0: detected capacity change from 0 to 16 [ 102.063568][ T4747] erofs: (device loop0): mounted with root inode @ nid 36. [ 103.016180][ T4755] loop3: detected capacity change from 0 to 512 [ 103.113795][ T4759] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.142027][ T4755] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.121: inode has both inline data and extents flags [ 103.254175][ T4755] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.121: couldn't read orphan inode 15 (err -117) [ 103.617226][ T4755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.380237][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 105.871615][ T4788] loop1: detected capacity change from 0 to 16 [ 105.955569][ T4788] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.363184][ T4792] netlink: 'syz.2.130': attribute type 6 has an invalid length. [ 106.382531][ T4792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.624878][ T4806] netlink: 'syz.2.137': attribute type 12 has an invalid length. [ 106.786524][ T4814] loop2: detected capacity change from 0 to 512 [ 106.835881][ T4814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.863772][ T4817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.141'. [ 106.896664][ T4817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.141'. [ 106.941248][ T4814] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 106.958012][ T4815] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 106.971591][ T4814] EXT4-fs (loop2): 1 truncate cleaned up [ 107.021073][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.161517][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 107.365682][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 107.365697][ T26] audit: type=1326 audit(1764080879.387:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 107.450652][ T26] audit: type=1326 audit(1764080879.387:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 107.530839][ T26] audit: type=1326 audit(1764080879.387:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 107.621032][ T26] audit: type=1326 audit(1764080879.437:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 107.668560][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 107.968167][ T4840] team0: Port device team_slave_1 removed [ 108.060654][ T4851] tmpfs: Bad value for 'huge' [ 108.800949][ T4843] netlink: 'syz.3.151': attribute type 12 has an invalid length. [ 108.921751][ T4855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.156'. [ 108.942315][ T4855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.156'. [ 108.991813][ T4861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 109.011289][ T4860] xt_hashlimit: max too large, truncated to 1048576 [ 109.437331][ T26] audit: type=1326 audit(1764080881.457:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 109.500718][ T26] audit: type=1326 audit(1764080881.487:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 109.619660][ T26] audit: type=1326 audit(1764080881.487:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 109.714215][ T26] audit: type=1326 audit(1764080881.487:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 109.738117][ T26] audit: type=1326 audit(1764080881.487:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 109.780784][ T26] audit: type=1326 audit(1764080881.487:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 109.881657][ T4887] tmpfs: Bad value for 'huge' [ 110.589077][ T4893] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 110.601377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.610639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.760316][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 110.843153][ T4901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.173'. [ 110.921124][ T4901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.173'. [ 111.193513][ T4912] loop3: detected capacity change from 0 to 128 [ 111.214519][ T4909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.617168][ T4929] tmpfs: Bad value for 'huge' [ 112.311157][ T4935] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 112.415529][ T4937] loop4: detected capacity change from 0 to 1024 [ 112.508674][ T4937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.443718][ T4953] __nla_validate_parse: 1 callbacks suppressed [ 113.443736][ T4953] netlink: 48 bytes leftover after parsing attributes in process `syz.3.191'. [ 113.503939][ T4265] EXT4-fs warning (device loop4): ext4_rmdir:3243: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (111) [ 113.537190][ T4953] netlink: 48 bytes leftover after parsing attributes in process `syz.3.191'. [ 113.619159][ T4957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'. [ 113.634569][ T4265] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 113.669780][ T4265] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 113.875507][ T4965] loop2: detected capacity change from 0 to 1024 [ 113.913535][ T4964] device syzkaller0 entered promiscuous mode [ 113.928876][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.954867][ T4965] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.203691][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 114.296536][ T4977] tmpfs: Bad value for 'huge' [ 116.087456][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.096959][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.128687][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.204803][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.212789][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.220196][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.310077][ T5004] loop3: detected capacity change from 0 to 8192 [ 117.438074][ T5012] loop0: detected capacity change from 0 to 16 [ 117.502504][ T5012] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.267335][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 119.893882][ T5008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.206'. [ 119.903881][ T5022] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 119.931638][ T5008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.206'. [ 120.008354][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 120.023365][ T4468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.169429][ T4999] lo speed is unknown, defaulting to 1000 [ 120.287123][ T4468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.388098][ T5032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 120.404616][ T5032] tmpfs: Bad value for 'huge' [ 120.440836][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 120.986496][ T4468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.291528][ T5043] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 121.302602][ T4468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.036648][ T5056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'. [ 122.603561][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 122.640358][ T5056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'. [ 123.135681][ T4468] tipc: Left network mode [ 123.154245][ T4999] chnl_net:caif_netlink_parms(): no params data found [ 123.194165][ T5071] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.508480][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 123.523306][ T5077] tmpfs: Bad value for 'huge' [ 124.556725][ T5098] loop0: detected capacity change from 0 to 512 [ 124.558431][ T5085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.592701][ T5098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.661186][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 124.741101][ T5105] loop3: detected capacity change from 0 to 16 [ 124.767875][ T5105] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.447739][ T5098] EXT4-fs (loop0): 1 truncate cleaned up [ 125.463224][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.501020][ T5098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.566712][ T5085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.632042][ T4999] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.649537][ T4999] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.681858][ T4999] device bridge_slave_0 entered promiscuous mode [ 125.691739][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 127.014969][ T5085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.034041][ T4999] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.067257][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.078432][ T4999] device bridge_slave_1 entered promiscuous mode [ 127.208112][ T4999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.304032][ T5085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.361074][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 127.369927][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 127.407750][ T4999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.568515][ T4999] team0: Port device team_slave_0 added [ 127.686307][ T5127] loop0: detected capacity change from 0 to 16 [ 127.704676][ T5127] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.999707][ T4999] team0: Port device team_slave_1 added [ 128.235617][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 128.334091][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 128.387125][ T4371] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.657632][ T5085] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.675430][ T5085] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.689298][ T4999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.705421][ T4999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.776933][ T4999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.829173][ T5085] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.859559][ T4999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.870787][ T4999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.001887][ T5134] loop3: detected capacity change from 0 to 16 [ 129.038765][ T5134] erofs: (device loop3): mounted with root inode @ nid 36. [ 129.468211][ T4999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.749332][ T5085] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.075714][ T4999] device hsr_slave_0 entered promiscuous mode [ 130.111537][ T4999] device hsr_slave_1 entered promiscuous mode [ 130.216835][ T4999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.271339][ T4999] Cannot create hsr debugfs directory [ 130.773279][ T4468] device hsr_slave_0 left promiscuous mode [ 130.954610][ T5144] loop0: detected capacity change from 0 to 16 [ 130.967727][ T5144] erofs: (device loop0): mounted with root inode @ nid 36. [ 131.083610][ T4468] device hsr_slave_1 left promiscuous mode [ 131.107808][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.123760][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.564514][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.745621][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.992285][ T4468] device bridge_slave_1 left promiscuous mode [ 132.033942][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.047263][ T4468] device bridge_slave_0 left promiscuous mode [ 132.062191][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.185105][ T4468] device veth1_macvtap left promiscuous mode [ 132.206837][ T4468] device veth0_macvtap left promiscuous mode [ 132.300683][ T4468] device veth1_vlan left promiscuous mode [ 132.339359][ T4468] device veth0_vlan left promiscuous mode [ 132.598294][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 132.599057][ T26] audit: type=1326 audit(1764080904.617:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5161 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 132.676800][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.684126][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.769381][ T26] audit: type=1326 audit(1764080904.617:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5161 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 132.807096][ T26] audit: type=1326 audit(1764080904.617:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5161 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 132.876730][ T26] audit: type=1326 audit(1764080904.617:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5161 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 132.947292][ T26] audit: type=1326 audit(1764080904.617:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5161 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57fd8f749 code=0x7ffc0000 [ 134.663886][ T5192] loop0: detected capacity change from 0 to 16 [ 134.677885][ T5192] erofs: (device loop0): mounted with root inode @ nid 36. [ 135.370005][ T4371] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.744543][ T4468] team0 (unregistering): Port device team_slave_1 removed [ 135.846242][ T4468] team0 (unregistering): Port device team_slave_0 removed [ 135.906617][ T4468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.951179][ T4468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.549102][ T4468] bond0 (unregistering): Released all slaves [ 136.693700][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 136.942613][ T5201] loop3: detected capacity change from 0 to 128 [ 137.099551][ T5206] loop1: detected capacity change from 0 to 16 [ 137.132627][ T5206] erofs: (device loop1): mounted with root inode @ nid 36. [ 138.112610][ T4409] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.156469][ T4999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.271688][ T4999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.304395][ T4999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.336533][ T4999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.222832][ T5226] loop1: detected capacity change from 0 to 16 [ 141.809901][ T5224] loop2: detected capacity change from 0 to 16 [ 141.818162][ T26] audit: type=1326 audit(1764080913.727:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 141.853317][ T26] audit: type=1326 audit(1764080913.727:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 141.853541][ T26] audit: type=1326 audit(1764080913.727:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 141.853796][ T26] audit: type=1326 audit(1764080913.727:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 141.854051][ T26] audit: type=1326 audit(1764080913.727:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 142.031295][ T5226] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.032307][ T5224] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.243830][ T4999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.326161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.335348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.447920][ T4999] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.485718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.509477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.544870][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.553196][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.613055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.717944][ T5240] loop1: detected capacity change from 0 to 16 [ 142.793101][ T5240] erofs: (device loop1): mounted with root inode @ nid 36. [ 143.044026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.284602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.486617][ T4371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.490971][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.503310][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.567879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.620659][ T5236] netlink: 'syz.2.269': attribute type 12 has an invalid length. [ 143.687491][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.697700][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.706962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.715605][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.724092][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.731771][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.739736][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.747123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.842049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.901479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.955995][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.067194][ T5251] loop2: detected capacity change from 0 to 16 [ 144.094674][ T5251] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.323726][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.636830][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.901496][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.914662][ T4999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.964852][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.978253][ T5256] loop1: detected capacity change from 0 to 1024 [ 145.024743][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.054780][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.101462][ T5256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.264023][ T4468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.280021][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 145.359421][ T5242] lo speed is unknown, defaulting to 1000 [ 145.507821][ T4468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.791259][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 145.821649][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 145.835965][ T5273] tmpfs: Bad value for 'huge' [ 145.894776][ T4468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.652226][ T4468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.808853][ T5282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 146.861558][ T5282] netem: change failed [ 146.926937][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.954641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.029475][ T4999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.054464][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 147.564785][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.597898][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.619950][ T5242] device bridge_slave_0 entered promiscuous mode [ 147.719902][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.735281][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.745736][ T5242] device bridge_slave_1 entered promiscuous mode [ 147.833129][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.860760][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 147.962062][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.107018][ T5242] team0: Port device team_slave_0 added [ 148.142054][ T5242] team0: Port device team_slave_1 added [ 148.302640][ T5322] loop3: detected capacity change from 0 to 16 [ 148.316197][ T5322] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.810304][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.873599][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.041528][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.054128][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.061607][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.090384][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.394246][ T5330] loop3: detected capacity change from 0 to 16 [ 149.412260][ T5330] erofs: (device loop3): mounted with root inode @ nid 36. [ 150.242871][ T5332] loop2: detected capacity change from 0 to 16 [ 150.255066][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 150.315570][ T5332] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.797020][ T5242] device hsr_slave_0 entered promiscuous mode [ 150.870915][ T5242] device hsr_slave_1 entered promiscuous mode [ 150.890883][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.908732][ T5242] Cannot create hsr debugfs directory [ 151.648867][ T5340] loop3: detected capacity change from 0 to 16 [ 151.701740][ T5343] loop2: detected capacity change from 0 to 16 [ 151.779032][ T5343] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.798547][ T5340] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.143680][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.183490][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.387580][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 152.390141][ T4999] device veth0_vlan entered promiscuous mode [ 152.594794][ T26] audit: type=1326 audit(1764080924.607:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 152.716207][ T26] audit: type=1326 audit(1764080924.617:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 152.793106][ T26] audit: type=1326 audit(1764080924.617:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 152.850670][ T26] audit: type=1326 audit(1764080924.617:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 152.902984][ T26] audit: type=1326 audit(1764080924.617:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 152.947761][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.959453][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.976341][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.995646][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.176737][ T4999] device veth1_vlan entered promiscuous mode [ 153.325100][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 153.330870][ T5354] tmpfs: Bad value for 'huge' [ 153.621736][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.992076][ T4468] device hsr_slave_0 left promiscuous mode [ 155.009753][ T4468] device hsr_slave_1 left promiscuous mode [ 155.033293][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.047170][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.057122][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.065673][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.109062][ T4468] device bridge_slave_1 left promiscuous mode [ 155.149159][ T5372] loop2: detected capacity change from 0 to 16 [ 155.160560][ T5372] erofs: (device loop2): mounted with root inode @ nid 36. [ 155.532995][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.724718][ T4468] device bridge_slave_0 left promiscuous mode [ 155.879585][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.996349][ T5376] loop2: detected capacity change from 0 to 128 [ 156.027748][ T4468] device veth1_macvtap left promiscuous mode [ 156.081365][ T4468] device veth0_macvtap left promiscuous mode [ 156.088299][ T4468] device veth1_vlan left promiscuous mode [ 156.094309][ T4468] device veth0_vlan left promiscuous mode [ 156.149746][ T5378] loop1: detected capacity change from 0 to 16 [ 156.171215][ T5378] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.880745][ T5386] loop2: detected capacity change from 0 to 16 [ 159.957292][ T5388] loop3: detected capacity change from 0 to 16 [ 160.009864][ T5389] loop1: detected capacity change from 0 to 16 [ 160.079212][ T5388] erofs: (device loop3): mounted with root inode @ nid 36. [ 160.091570][ T5389] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.104416][ T5386] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.543381][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.017323][ T26] audit: type=1326 audit(1764080933.037:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 161.229845][ T26] audit: type=1326 audit(1764080933.037:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 161.259005][ T26] audit: type=1326 audit(1764080933.037:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 161.313668][ T26] audit: type=1326 audit(1764080933.037:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 161.567084][ T26] audit: type=1326 audit(1764080933.037:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 161.664192][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 161.679002][ T5399] tmpfs: Bad value for 'huge' [ 162.062464][ T4468] bond1 (unregistering): Released all slaves [ 163.970110][ T5417] loop3: detected capacity change from 0 to 16 [ 163.982259][ T5417] erofs: (device loop3): mounted with root inode @ nid 36. [ 164.713316][ T4371] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.758756][ T4468] team0 (unregistering): Port device team_slave_1 removed [ 164.912462][ T4468] team0 (unregistering): Port device team_slave_0 removed [ 165.048588][ T4468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.144052][ T4468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.711092][ T5425] loop1: detected capacity change from 0 to 16 [ 165.719131][ T5425] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.881648][ T4371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.125624][ T5434] loop2: detected capacity change from 0 to 16 [ 166.315368][ T5434] erofs: (device loop2): mounted with root inode @ nid 36. [ 166.832344][ T5437] loop3: detected capacity change from 0 to 16 [ 166.893470][ T5437] erofs: (device loop3): mounted with root inode @ nid 36. [ 168.375417][ T5444] loop2: detected capacity change from 0 to 16 [ 168.783623][ T26] audit: type=1326 audit(1764080940.807:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 168.846361][ T5444] erofs: (device loop2): mounted with root inode @ nid 36. [ 169.069090][ T26] audit: type=1326 audit(1764080940.807:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 169.119668][ T26] audit: type=1326 audit(1764080940.807:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 169.238269][ T26] audit: type=1326 audit(1764080940.807:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 169.326913][ T26] audit: type=1326 audit(1764080940.807:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 169.415229][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 169.430705][ T5449] tmpfs: Bad value for 'huge' [ 171.586453][ T5470] overlayfs: failed to resolve './bus': -2 [ 171.653427][ T5472] loop1: detected capacity change from 0 to 16 [ 171.679894][ T5472] erofs: (device loop1): mounted with root inode @ nid 36. [ 172.297510][ T5475] loop3: detected capacity change from 0 to 128 [ 172.476132][ T4468] bond0 (unregistering): Released all slaves [ 172.598004][ T5479] loop1: detected capacity change from 0 to 16 [ 172.609540][ T5479] erofs: (device loop1): mounted with root inode @ nid 36. [ 173.335465][ T4371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.351595][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.360391][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.398378][ T4999] device veth0_macvtap entered promiscuous mode [ 173.521925][ T4999] device veth1_macvtap entered promiscuous mode [ 173.551755][ T4999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.325324][ T5487] loop2: detected capacity change from 0 to 16 [ 174.395760][ T5485] loop3: detected capacity change from 0 to 16 [ 174.424632][ T5487] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.465415][ T5485] erofs: (device loop3): mounted with root inode @ nid 36. [ 174.673341][ T4999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.825945][ T4999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.913127][ T4999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.926978][ T4999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.051374][ T4999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.110944][ T5491] loop1: detected capacity change from 0 to 16 [ 175.127044][ T5491] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.197316][ T4999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.837868][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.846644][ T4409] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.852721][ T4782] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.902521][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.925578][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.971239][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.451118][ T26] audit: type=1326 audit(1764080948.427:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 176.618733][ T26] audit: type=1326 audit(1764080948.427:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 176.865204][ T26] audit: type=1326 audit(1764080948.427:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 177.074279][ T5503] tmpfs: Bad value for 'huge' [ 177.686310][ T26] audit: type=1326 audit(1764080948.437:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 177.767189][ T26] audit: type=1326 audit(1764080948.437:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 178.866060][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.882463][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.900882][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.909286][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.100540][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.107949][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.113177][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.374832][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.384793][ T5528] overlayfs: failed to resolve './bus': -2 [ 179.406229][ T5528] loop2: detected capacity change from 0 to 16 [ 179.446263][ T5528] erofs: (device loop2): mounted with root inode @ nid 36. [ 179.581077][ T5530] loop1: detected capacity change from 0 to 128 [ 179.663594][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.689760][ T5517] lo speed is unknown, defaulting to 1000 [ 179.721754][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.102447][ T5548] loop3: detected capacity change from 0 to 16 [ 180.116988][ T5548] erofs: (device loop3): mounted with root inode @ nid 36. [ 181.035067][ T5555] loop3: detected capacity change from 0 to 16 [ 181.054566][ T5555] erofs: (device loop3): mounted with root inode @ nid 36. [ 181.438627][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 183.411035][ T5564] loop2: detected capacity change from 0 to 16 [ 183.430050][ T5564] erofs: (device loop2): mounted with root inode @ nid 36. [ 183.470659][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 185.017905][ T5570] loop3: detected capacity change from 0 to 16 [ 185.025519][ T5570] erofs: (device loop3): mounted with root inode @ nid 36. [ 185.415433][ T26] audit: type=1326 audit(1764080957.437:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 185.445687][ T26] audit: type=1326 audit(1764080957.437:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 185.560700][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 185.604201][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.676580][ T26] audit: type=1326 audit(1764080957.437:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 185.706902][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.842842][ T5581] tmpfs: Bad value for 'huge' [ 186.476819][ T26] audit: type=1326 audit(1764080957.437:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 186.613824][ T26] audit: type=1326 audit(1764080957.437:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 186.720915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.751901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.779154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.811053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.827746][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.834947][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.842902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.852613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.861275][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.868389][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.876913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.885979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.895894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.923766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.964414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.166367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.734089][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 187.802595][ T5599] loop3: detected capacity change from 0 to 16 [ 188.064193][ T5599] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.301444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.413621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.498931][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.518596][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.544328][ T5605] loop3: detected capacity change from 0 to 128 [ 188.564228][ T5517] chnl_net:caif_netlink_parms(): no params data found [ 188.595712][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.628646][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.698500][ T5608] overlayfs: failed to resolve './bus': -2 [ 188.736956][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.748445][ T5608] loop1: detected capacity change from 0 to 16 [ 188.761076][ T5608] erofs: (device loop1): mounted with root inode @ nid 36. [ 188.964186][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.478884][ T4409] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.896846][ T5621] loop3: detected capacity change from 0 to 16 [ 189.913393][ T5621] erofs: (device loop3): mounted with root inode @ nid 36. [ 190.781776][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.812023][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.820280][ T5517] device bridge_slave_0 entered promiscuous mode [ 191.003194][ T5631] loop3: detected capacity change from 0 to 16 [ 191.015691][ T5631] erofs: (device loop3): mounted with root inode @ nid 36. [ 191.785431][ T5637] loop1: detected capacity change from 0 to 16 [ 191.801880][ T5637] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.910600][ T4371] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.543604][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.572763][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.584726][ T5517] device bridge_slave_1 entered promiscuous mode [ 192.833228][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.763846][ T26] audit: type=1326 audit(1764080965.777:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 194.103449][ T5654] tmpfs: Bad value for 'huge' [ 194.447355][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461156][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.561384][ T26] audit: type=1326 audit(1764080965.777:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 194.662401][ T26] audit: type=1326 audit(1764080965.777:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 194.923349][ T26] audit: type=1326 audit(1764080965.777:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 194.928733][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.260823][ T26] audit: type=1326 audit(1764080965.777:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 195.296995][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.349626][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.652663][ T5668] loop1: detected capacity change from 0 to 16 [ 195.719310][ T5668] erofs: (device loop1): mounted with root inode @ nid 36. [ 196.407553][ T5670] loop3: detected capacity change from 0 to 128 [ 196.462177][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.501143][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 196.507233][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 196.520678][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 196.706104][ T5679] loop2: detected capacity change from 0 to 16 [ 196.725730][ T5679] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.599618][ T5686] loop3: detected capacity change from 0 to 16 [ 197.692663][ T5686] erofs: (device loop3): mounted with root inode @ nid 36. [ 198.561621][ T5691] loop2: detected capacity change from 0 to 16 [ 198.576850][ T5691] erofs: (device loop2): mounted with root inode @ nid 36. [ 198.610235][ T5517] team0: Port device team_slave_0 added [ 198.802882][ T5517] team0: Port device team_slave_1 added [ 199.221572][ T5698] loop3: detected capacity change from 0 to 16 [ 199.250139][ T5698] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.355888][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.438137][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.932303][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.180711][ T56] device hsr_slave_0 left promiscuous mode [ 200.299879][ T56] device hsr_slave_1 left promiscuous mode [ 200.526922][ T26] audit: type=1326 audit(1764080972.527:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 200.622495][ T5708] tmpfs: Bad value for 'huge' [ 200.847552][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.905439][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.324359][ T26] audit: type=1326 audit(1764080972.527:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 201.360540][ T26] audit: type=1326 audit(1764080972.537:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 201.384329][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.445184][ T56] device bridge_slave_1 left promiscuous mode [ 201.453531][ T26] audit: type=1326 audit(1764080972.537:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 201.631938][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.646953][ T26] audit: type=1326 audit(1764080972.537:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 201.761974][ T56] device bridge_slave_0 left promiscuous mode [ 201.784812][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.962174][ T56] device veth1_macvtap left promiscuous mode [ 201.996891][ T56] device veth0_macvtap left promiscuous mode [ 202.018432][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.024580][ T56] device veth1_vlan left promiscuous mode [ 202.038096][ T56] device veth0_vlan left promiscuous mode [ 202.134127][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.142262][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.151128][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.158812][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.166449][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.851929][ T5726] loop2: detected capacity change from 0 to 16 [ 203.865013][ T5726] erofs: (device loop2): mounted with root inode @ nid 36. [ 204.180799][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 204.254746][ T5733] loop1: detected capacity change from 0 to 128 [ 207.145249][ T5736] loop3: detected capacity change from 0 to 16 [ 207.217565][ T5734] loop2: detected capacity change from 0 to 16 [ 207.238531][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 207.284248][ T5736] erofs: (device loop3): mounted with root inode @ nid 36. [ 207.296939][ T5734] erofs: (device loop2): mounted with root inode @ nid 36. [ 208.224912][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.235014][ T4371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.934162][ T5746] loop2: detected capacity change from 0 to 16 [ 209.996556][ T5748] loop3: detected capacity change from 0 to 16 [ 210.034183][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 210.071377][ T5746] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.084527][ T5748] erofs: (device loop3): mounted with root inode @ nid 36. [ 211.228756][ T5759] tmpfs: Bad value for 'huge' [ 211.728400][ T26] audit: type=1326 audit(1764080983.317:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 211.803500][ T26] audit: type=1326 audit(1764080983.327:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 211.857166][ T26] audit: type=1326 audit(1764080983.327:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 212.004463][ T26] audit: type=1326 audit(1764080983.327:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 212.050567][ T26] audit: type=1326 audit(1764080983.337:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 212.100615][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 213.745784][ T5775] loop3: detected capacity change from 0 to 16 [ 213.774750][ T5775] erofs: (device loop3): mounted with root inode @ nid 36. [ 213.926014][ T56] team0 (unregistering): Port device team_slave_1 removed [ 214.260342][ T5777] loop1: detected capacity change from 0 to 128 [ 214.430063][ T5781] loop2: detected capacity change from 0 to 16 [ 214.500517][ T5781] erofs: (device loop2): mounted with root inode @ nid 36. [ 214.926688][ T56] team0 (unregistering): Port device team_slave_0 removed [ 215.378481][ T5785] loop3: detected capacity change from 0 to 16 [ 215.400393][ T5785] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.903257][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.157080][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.271475][ T5792] loop2: detected capacity change from 0 to 16 [ 216.307028][ T5792] erofs: (device loop2): mounted with root inode @ nid 36. [ 217.056469][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.109124][ T5799] loop3: detected capacity change from 0 to 16 [ 217.120667][ T5799] erofs: (device loop3): mounted with root inode @ nid 36. [ 217.801655][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.933478][ T5803] tmpfs: Bad value for 'huge' [ 219.069196][ T26] audit: type=1326 audit(1764080991.087:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 219.257926][ T26] audit: type=1326 audit(1764080991.087:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 219.286413][ T26] audit: type=1326 audit(1764080991.087:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 219.317186][ T26] audit: type=1326 audit(1764080991.087:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 219.346057][ T26] audit: type=1326 audit(1764080991.087:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 221.533981][ T5825] loop2: detected capacity change from 0 to 16 [ 221.598693][ T5823] loop1: detected capacity change from 0 to 16 [ 221.650286][ T5823] erofs: (device loop1): mounted with root inode @ nid 36. [ 221.662446][ T5825] erofs: (device loop2): mounted with root inode @ nid 36. [ 221.951201][ T56] bond0 (unregistering): Released all slaves [ 222.579989][ T5831] loop2: detected capacity change from 0 to 128 [ 222.912277][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.993219][ T4409] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 223.019046][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.107707][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.871381][ T5840] loop1: detected capacity change from 0 to 16 [ 225.939308][ T5841] loop2: detected capacity change from 0 to 16 [ 226.004002][ T5838] loop3: detected capacity change from 0 to 16 [ 226.056590][ T5840] erofs: (device loop1): mounted with root inode @ nid 36. [ 226.069202][ T5841] erofs: (device loop2): mounted with root inode @ nid 36. [ 226.081313][ T5838] erofs: (device loop3): mounted with root inode @ nid 36. [ 226.844104][ T5517] device hsr_slave_0 entered promiscuous mode [ 226.922659][ T5517] device hsr_slave_1 entered promiscuous mode [ 226.944874][ T5517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.965104][ T5517] Cannot create hsr debugfs directory [ 227.009963][ T5717] lo speed is unknown, defaulting to 1000 [ 227.142796][ T5853] tmpfs: Bad value for 'huge' [ 228.473731][ T26] audit: type=1326 audit(1764081000.497:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 228.582599][ T26] audit: type=1326 audit(1764081000.497:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 228.681857][ T26] audit: type=1326 audit(1764081000.497:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 228.778200][ T26] audit: type=1326 audit(1764081000.497:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 228.809665][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 228.864041][ T26] audit: type=1326 audit(1764081000.497:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 229.397466][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.411876][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.424520][ T5717] device bridge_slave_0 entered promiscuous mode [ 229.459043][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.476663][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.546483][ T5717] device bridge_slave_1 entered promiscuous mode [ 229.561860][ T5517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.582449][ T5517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.609556][ T5882] loop1: detected capacity change from 0 to 128 [ 229.678995][ T5517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.705480][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.736150][ T5517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.793856][ T5885] loop2: detected capacity change from 0 to 16 [ 229.811871][ T5885] erofs: (device loop2): mounted with root inode @ nid 36. [ 230.153108][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.297539][ T5895] loop3: detected capacity change from 0 to 16 [ 231.311669][ T5895] erofs: (device loop3): mounted with root inode @ nid 36. [ 231.355609][ T5717] team0: Port device team_slave_0 added [ 231.672637][ T5907] loop2: detected capacity change from 0 to 16 [ 231.709908][ T5907] erofs: (device loop2): mounted with root inode @ nid 36. [ 232.142435][ T5717] team0: Port device team_slave_1 added [ 233.421214][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.431020][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.837015][ T5919] loop2: detected capacity change from 0 to 16 [ 234.891035][ T5921] loop1: detected capacity change from 0 to 16 [ 235.009140][ T5921] erofs: (device loop1): mounted with root inode @ nid 36. [ 235.021483][ T5919] erofs: (device loop2): mounted with root inode @ nid 36. [ 235.548932][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.607602][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.625229][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.778419][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.080674][ T26] audit: type=1326 audit(1764081008.047:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 236.214787][ T26] audit: type=1326 audit(1764081008.047:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 236.256801][ T26] audit: type=1326 audit(1764081008.047:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 236.324952][ T26] audit: type=1326 audit(1764081008.047:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 236.395363][ T26] audit: type=1326 audit(1764081008.047:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 236.640604][ T5936] tmpfs: Bad value for 'huge' [ 237.407228][ T5717] device hsr_slave_0 entered promiscuous mode [ 237.457855][ T5717] device hsr_slave_1 entered promiscuous mode [ 237.484199][ T5717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.511267][ T5717] Cannot create hsr debugfs directory [ 238.250281][ T5958] loop1: detected capacity change from 0 to 16 [ 238.269168][ T5958] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.181421][ T5962] loop2: detected capacity change from 0 to 128 [ 239.395000][ T5966] loop3: detected capacity change from 0 to 16 [ 239.425625][ T5966] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.712565][ T5968] loop1: detected capacity change from 0 to 16 [ 240.726841][ T5968] erofs: (device loop1): mounted with root inode @ nid 36. [ 241.128578][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.138517][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.148542][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.159525][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.167490][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.174903][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.170541][ T5982] loop1: detected capacity change from 0 to 16 [ 242.464826][ T5982] erofs: (device loop1): mounted with root inode @ nid 36. [ 242.744254][ T5970] lo speed is unknown, defaulting to 1000 [ 243.582204][ T5990] loop3: detected capacity change from 0 to 16 [ 243.931369][ T56] device hsr_slave_0 left promiscuous mode [ 243.994991][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 244.009272][ T26] audit: type=1326 audit(1764081016.027:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 244.101189][ T5990] erofs: (device loop3): mounted with root inode @ nid 36. [ 244.194850][ T26] audit: type=1326 audit(1764081016.027:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 244.270910][ T56] device hsr_slave_1 left promiscuous mode [ 244.305595][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.343931][ T26] audit: type=1326 audit(1764081016.027:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 244.369295][ T26] audit: type=1326 audit(1764081016.027:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 244.410543][ T26] audit: type=1326 audit(1764081016.027:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb814f8f749 code=0x7ffc0000 [ 244.439476][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.485283][ T56] device bridge_slave_1 left promiscuous mode [ 244.495135][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.695749][ T56] device bridge_slave_0 left promiscuous mode [ 244.703604][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.812132][ T6003] tmpfs: Bad value for 'huge' [ 247.162937][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 247.226120][ T6012] loop2: detected capacity change from 0 to 16 [ 247.237314][ T6010] loop1: detected capacity change from 0 to 16 [ 247.265733][ T6010] erofs: (device loop1): mounted with root inode @ nid 36. [ 247.279197][ T6012] erofs: (device loop2): mounted with root inode @ nid 36. [ 248.842031][ T6021] loop2: detected capacity change from 0 to 16 [ 249.001830][ T6021] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.210395][ T6026] loop1: detected capacity change from 0 to 128 [ 249.230939][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 249.342930][ T56] team0 (unregistering): Port device team_slave_1 removed [ 249.476848][ T56] team0 (unregistering): Port device team_slave_0 removed [ 249.618330][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.667810][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.450694][ T6038] loop2: detected capacity change from 0 to 16 [ 250.491048][ T26] audit: type=1326 audit(1764081022.417:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 250.616486][ T6038] erofs: (device loop2): mounted with root inode @ nid 36. [ 251.023377][ T26] audit: type=1326 audit(1764081022.417:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 251.046186][ T26] audit: type=1326 audit(1764081022.417:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 251.076765][ T26] audit: type=1326 audit(1764081022.417:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 251.150206][ T26] audit: type=1326 audit(1764081022.417:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 251.280234][ T6043] loop3: detected capacity change from 0 to 16 [ 251.300801][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 251.337868][ T6043] erofs: (device loop3): mounted with root inode @ nid 36. [ 252.726987][ T6054] loop3: detected capacity change from 0 to 16 [ 252.765423][ T6054] erofs: (device loop3): mounted with root inode @ nid 36. [ 253.631842][ T6060] loop2: detected capacity change from 0 to 16 [ 253.645386][ T6060] erofs: (device loop2): mounted with root inode @ nid 36. [ 254.243320][ T4371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.820001][ T6068] loop2: detected capacity change from 0 to 16 [ 254.842179][ T6068] erofs: (device loop2): mounted with root inode @ nid 36. [ 255.543850][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550304][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.675491][ T26] audit: type=1326 audit(1764081028.687:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 256.886632][ T26] audit: type=1326 audit(1764081028.687:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 256.919290][ T26] audit: type=1326 audit(1764081028.687:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 256.985470][ T26] audit: type=1326 audit(1764081028.687:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 257.017724][ T26] audit: type=1326 audit(1764081028.697:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 257.133577][ T6085] loop2: detected capacity change from 0 to 128 [ 257.308354][ T6087] loop1: detected capacity change from 0 to 16 [ 257.331166][ T6087] erofs: (device loop1): mounted with root inode @ nid 36. [ 257.619751][ T4371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.686997][ T56] bond0 (unregistering): Released all slaves [ 257.809715][ T6091] loop2: detected capacity change from 0 to 16 [ 257.892951][ T6091] erofs: (device loop2): mounted with root inode @ nid 36. [ 259.781665][ T6105] loop3: detected capacity change from 0 to 16 [ 259.841183][ T6105] erofs: (device loop3): mounted with root inode @ nid 36. [ 260.435318][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 260.871030][ T6119] loop1: detected capacity change from 0 to 16 [ 260.889165][ T6119] erofs: (device loop1): mounted with root inode @ nid 36. [ 261.035193][ T4371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.757989][ T6124] loop3: detected capacity change from 0 to 16 [ 261.777757][ T6124] erofs: (device loop3): mounted with root inode @ nid 36. [ 262.006995][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.050614][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.100980][ T5970] device bridge_slave_0 entered promiscuous mode [ 262.154508][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.243975][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.461989][ T5970] device bridge_slave_1 entered promiscuous mode [ 263.137382][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.153773][ T6136] loop1: detected capacity change from 0 to 128 [ 263.352317][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.601098][ T26] audit: type=1326 audit(1764081035.617:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 263.758595][ T26] audit: type=1326 audit(1764081035.617:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 263.840606][ T26] audit: type=1326 audit(1764081035.617:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 263.886005][ T26] audit: type=1326 audit(1764081035.617:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 264.060887][ T6147] loop1: detected capacity change from 0 to 16 [ 264.550657][ T6147] erofs: (device loop1): mounted with root inode @ nid 36. [ 264.721631][ T26] audit: type=1326 audit(1764081035.617:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 264.845958][ T5970] team0: Port device team_slave_0 added [ 264.862803][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.874816][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.884081][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.894680][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.902678][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.911862][ T5970] team0: Port device team_slave_1 added [ 264.917512][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.077822][ T6159] loop3: detected capacity change from 0 to 16 [ 265.107645][ T6159] erofs: (device loop3): mounted with root inode @ nid 36. [ 265.786312][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.848600][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.878450][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.124954][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 267.220218][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.734788][ T6149] lo speed is unknown, defaulting to 1000 [ 267.742285][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.753004][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.779323][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.133178][ T6187] loop2: detected capacity change from 0 to 16 [ 269.191782][ T6189] loop3: detected capacity change from 0 to 16 [ 269.203351][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 269.248724][ T6187] erofs: (device loop2): mounted with root inode @ nid 36. [ 269.262155][ T6189] erofs: (device loop3): mounted with root inode @ nid 36. [ 269.872377][ T4371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.883987][ T4409] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.898863][ T5970] device hsr_slave_0 entered promiscuous mode [ 270.998118][ T5970] device hsr_slave_1 entered promiscuous mode [ 271.030622][ T5970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.038264][ T5970] Cannot create hsr debugfs directory [ 271.048282][ T6200] loop3: detected capacity change from 0 to 128 [ 271.261019][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 272.116715][ T6212] loop3: detected capacity change from 0 to 16 [ 272.128951][ T26] audit: type=1326 audit(1764081044.087:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 272.223033][ T6212] erofs: (device loop3): mounted with root inode @ nid 36. [ 272.643356][ T26] audit: type=1326 audit(1764081044.087:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 272.758994][ T26] audit: type=1326 audit(1764081044.087:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 272.941383][ T6218] loop2: detected capacity change from 0 to 16 [ 272.976462][ T6218] erofs: (device loop2): mounted with root inode @ nid 36. [ 273.150014][ T26] audit: type=1326 audit(1764081044.087:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 273.301022][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 273.779032][ T26] audit: type=1326 audit(1764081044.087:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 275.610531][ T6243] loop2: detected capacity change from 0 to 16 [ 275.635729][ T6243] erofs: (device loop2): mounted with root inode @ nid 36. [ 275.703470][ T6149] chnl_net:caif_netlink_parms(): no params data found [ 276.555763][ T6247] loop2: detected capacity change from 0 to 128 [ 276.667348][ T6250] loop1: detected capacity change from 0 to 16 [ 276.682421][ T6250] erofs: (device loop1): mounted with root inode @ nid 36. [ 277.716587][ T4371] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.797682][ T26] audit: type=1326 audit(1764081051.817:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 279.797731][ T26] audit: type=1326 audit(1764081051.817:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 279.797767][ T26] audit: type=1326 audit(1764081051.817:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 279.797803][ T26] audit: type=1326 audit(1764081051.817:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 279.797838][ T26] audit: type=1326 audit(1764081051.817:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 280.033764][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.050644][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.058830][ T6149] device bridge_slave_0 entered promiscuous mode [ 280.170803][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.177938][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.187420][ T6149] device bridge_slave_1 entered promiscuous mode [ 280.249899][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.278626][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.442318][ T6149] team0: Port device team_slave_0 added [ 280.529045][ T6149] team0: Port device team_slave_1 added [ 281.269518][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.310643][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.395172][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.479210][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.488687][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.878416][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.082927][ T5970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.190170][ T5970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.209463][ T5970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.223111][ T6149] device hsr_slave_0 entered promiscuous mode [ 282.231086][ T6149] device hsr_slave_1 entered promiscuous mode [ 282.240768][ T6149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.248362][ T6149] Cannot create hsr debugfs directory [ 282.254841][ T5970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.328850][ T6286] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 282.591555][ T6297] loop3: detected capacity change from 0 to 128 [ 282.617323][ T56] device hsr_slave_0 left promiscuous mode [ 282.647695][ T56] device hsr_slave_1 left promiscuous mode [ 282.664757][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.695119][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.721556][ T56] device bridge_slave_1 left promiscuous mode [ 282.734561][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.760213][ T56] device bridge_slave_0 left promiscuous mode [ 282.768301][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.956914][ T56] device hsr_slave_0 left promiscuous mode [ 282.986825][ T56] device hsr_slave_1 left promiscuous mode [ 283.070248][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.180270][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.268916][ T56] device bridge_slave_1 left promiscuous mode [ 283.333984][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.919867][ T26] audit: type=1326 audit(1764081055.937:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 283.959198][ T56] device bridge_slave_0 left promiscuous mode [ 284.067260][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.231422][ T26] audit: type=1326 audit(1764081055.937:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 284.253750][ T26] audit: type=1326 audit(1764081055.937:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 284.369632][ T26] audit: type=1326 audit(1764081055.937:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 284.392090][ T26] audit: type=1326 audit(1764081055.937:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1150b8f749 code=0x7ffc0000 [ 285.801808][ T56] team0 (unregistering): Port device team_slave_1 removed [ 286.014276][ T56] team0 (unregistering): Port device team_slave_0 removed [ 286.756790][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.887898][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.936800][ T6346] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 287.076065][ T56] bond0 (unregistering): Released all slaves [ 287.348887][ T56] team0 (unregistering): Port device team_slave_1 removed [ 287.409613][ T56] team0 (unregistering): Port device team_slave_0 removed [ 287.651900][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.874808][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.214794][ T56] bond0 (unregistering): Released all slaves [ 289.248443][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.308577][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.329931][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.421616][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.498645][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.513653][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.531098][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.538273][ T5749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.021703][ T6372] loop3: detected capacity change from 0 to 16 [ 292.081464][ T6372] erofs: (device loop3): mounted with root inode @ nid 36. [ 292.146443][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.155469][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.164897][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.172100][ T5749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.253653][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.292054][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.359718][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.412415][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.461234][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.479058][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.490613][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.499621][ T6149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.578059][ T5970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.614684][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.631427][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.662254][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.888974][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.998611][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.178374][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.348226][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.451285][ T6149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.476175][ T6149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.528579][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 293.560742][ T6384] netem: change failed [ 293.579681][ T6149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.672126][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 293.736577][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 293.796776][ T6405] loop1: detected capacity change from 0 to 512 [ 293.843101][ T6405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.908622][ T6405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 293.940371][ T6405] EXT4-fs (loop1): 1 truncate cleaned up [ 293.991111][ T6405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 294.148830][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.166556][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 294.209127][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 294.246036][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 294.300853][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.308771][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.353850][ T6418] loop2: detected capacity change from 0 to 256 [ 294.363253][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.414498][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.453183][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.512339][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.519530][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.575193][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.669307][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.690106][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.730635][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.737806][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.746415][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.755294][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.968103][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.085458][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.797082][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.847715][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.860946][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.869816][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.878758][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.913755][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.979394][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.154157][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.284142][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.721188][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.729681][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.811198][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.533'. [ 296.840582][ T6440] netem: change failed [ 297.059197][ T6448] loop1: detected capacity change from 0 to 764 [ 297.149271][ T6448] rock: directory entry would overflow storage [ 297.173650][ T6448] rock: sig=0x5245, size=8, remaining=5 [ 297.764365][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.790080][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.836120][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.975992][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.998297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.083112][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.161352][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.181691][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.225999][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.256151][ T6149] device veth0_vlan entered promiscuous mode [ 298.304071][ T6149] device veth1_vlan entered promiscuous mode [ 298.421729][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.437439][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.498349][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.523298][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.554772][ T6149] device veth0_macvtap entered promiscuous mode [ 299.655814][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.664914][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.673347][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.682508][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.691444][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.698726][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.722295][ T6149] device veth1_macvtap entered promiscuous mode [ 299.732616][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.742362][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.827007][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.900517][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.932122][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.975512][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.004170][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.016884][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.109892][ T6495] loop3: detected capacity change from 0 to 16 [ 301.161949][ T6495] erofs: (device loop3): mounted with root inode @ nid 36. [ 301.427556][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.630817][ T6482] lo speed is unknown, defaulting to 1000 [ 301.732525][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.916592][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 301.925436][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.939057][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.939701][ T4371] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.949907][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.949922][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.949938][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.951795][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.034458][ T6501] loop2: detected capacity change from 0 to 512 [ 302.039223][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 302.069043][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.094650][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.111673][ T6501] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.548: inode has both inline data and extents flags [ 302.151942][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.160979][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.214285][ T6501] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.548: couldn't read orphan inode 15 (err -117) [ 302.239036][ T6149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.241812][ T6501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.257289][ T6149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.267125][ T6149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.287876][ T6149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.349827][ T6505] loop3: detected capacity change from 0 to 128 [ 302.372936][ T6501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 302.503307][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 302.817715][ T6516] loop3: detected capacity change from 0 to 16 [ 302.846094][ T6516] erofs: (device loop3): mounted with root inode @ nid 36. [ 303.619375][ T6521] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 303.628388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.670480][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.682683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.813045][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.842086][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.943304][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 304.001633][ T6529] loop1: detected capacity change from 0 to 16 [ 304.088447][ T6529] erofs: (device loop1): mounted with root inode @ nid 36. [ 304.204264][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.718825][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 305.157801][ T6532] netlink: 'syz.2.556': attribute type 12 has an invalid length. [ 306.202807][ T6549] loop3: detected capacity change from 0 to 16 [ 306.312001][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 306.395064][ T6549] erofs: (device loop3): mounted with root inode @ nid 36. [ 306.889331][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 306.901790][ T6556] loop2: detected capacity change from 0 to 128 [ 306.973875][ T6544] 8021q: VLANs not supported on gre0 [ 307.279364][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.291444][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.350937][ T6482] device bridge_slave_0 entered promiscuous mode [ 308.350735][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 309.550761][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.558126][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.600633][ T6482] device bridge_slave_1 entered promiscuous mode [ 309.634105][ T6583] device wg2 entered promiscuous mode [ 309.644369][ T6584] lo speed is unknown, defaulting to 1000 [ 310.177865][ T6594] loop3: detected capacity change from 0 to 16 [ 310.193410][ T6594] erofs: (device loop3): mounted with root inode @ nid 36. [ 310.890443][ T6597] loop2: detected capacity change from 0 to 16 [ 310.906516][ T6597] erofs: (device loop2): mounted with root inode @ nid 36. [ 311.205046][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.474715][ T4371] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.492440][ T4409] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.505028][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.137166][ T26] audit: type=1326 audit(1764081084.157:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 312.266890][ T6610] loop3: detected capacity change from 0 to 16 [ 312.287488][ T6610] erofs: (device loop3): mounted with root inode @ nid 36. [ 312.473153][ T6608] loop0: detected capacity change from 0 to 128 [ 312.801942][ T26] audit: type=1326 audit(1764081084.157:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.131015][ T26] audit: type=1326 audit(1764081084.187:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.213032][ T26] audit: type=1326 audit(1764081084.237:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.235470][ T26] audit: type=1326 audit(1764081084.237:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.258079][ T26] audit: type=1326 audit(1764081084.237:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.300682][ T26] audit: type=1326 audit(1764081084.237:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.351405][ T6482] team0: Port device team_slave_0 added [ 313.378811][ T6482] team0: Port device team_slave_1 added [ 313.412089][ T26] audit: type=1326 audit(1764081084.377:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.488272][ T26] audit: type=1326 audit(1764081084.397:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.518272][ T26] audit: type=1326 audit(1764081084.427:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063118f749 code=0x7ffc0000 [ 313.618366][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.634479][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.690138][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.729254][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.739769][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.771866][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.817108][ T4419] device hsr_slave_0 left promiscuous mode [ 313.839240][ T4419] device hsr_slave_1 left promiscuous mode [ 313.850291][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.873337][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.894379][ T4419] device bridge_slave_1 left promiscuous mode [ 313.912827][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.934187][ T4419] device bridge_slave_0 left promiscuous mode [ 313.954168][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.536370][ T6655] loop3: detected capacity change from 0 to 128 [ 315.667264][ T6655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 315.716918][ T6655] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.973066][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 316.163747][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 316.301858][ T6646] mmap: syz.2.579 (6646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 316.377159][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 316.467044][ T6646] [ 316.469432][ T6646] ====================================================== [ 316.476479][ T6646] WARNING: possible circular locking dependency detected [ 316.483540][ T6646] syzkaller #0 Not tainted [ 316.487976][ T6646] ------------------------------------------------------ [ 316.495017][ T6646] syz.2.579/6646 is trying to acquire lock: [ 316.500931][ T6646] ffff888064512ec0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 316.511716][ T6646] [ 316.511716][ T6646] but task is already holding lock: [ 316.519101][ T6646] ffff888076c408d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 316.529153][ T6646] [ 316.529153][ T6646] which lock already depends on the new lock. [ 316.529153][ T6646] [ 316.539576][ T6646] [ 316.539576][ T6646] the existing dependency chain (in reverse order) is: [ 316.548608][ T6646] [ 316.548608][ T6646] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 316.556200][ T6646] down_read_killable+0x4c/0x340 [ 316.561693][ T6646] mmap_read_lock_killable+0x1d/0x60 [ 316.567517][ T6646] lock_mm_and_find_vma+0x2b1/0x2f0 [ 316.573281][ T6646] do_user_addr_fault+0x2db/0xb10 [ 316.578858][ T6646] exc_page_fault+0x60/0x100 [ 316.584047][ T6646] asm_exc_page_fault+0x22/0x30 [ 316.589700][ T6646] fault_in_readable+0x13e/0x1f0 [ 316.595202][ T6646] fault_in_iov_iter_readable+0xbb/0x2e0 [ 316.601391][ T6646] generic_perform_write+0x1d2/0x560 [ 316.607229][ T6646] __generic_file_write_iter+0x172/0x430 [ 316.613411][ T6646] generic_file_write_iter+0xab/0x2e0 [ 316.619338][ T6646] vfs_write+0x44c/0x960 [ 316.624131][ T6646] ksys_write+0x143/0x240 [ 316.629021][ T6646] do_syscall_64+0x4c/0xa0 [ 316.633983][ T6646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.640423][ T6646] [ 316.640423][ T6646] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 316.649142][ T6646] __lock_acquire+0x2cf8/0x7c50 [ 316.654543][ T6646] lock_acquire+0x1b4/0x490 [ 316.659604][ T6646] down_write+0x36/0x60 [ 316.664309][ T6646] process_measurement+0x33c/0x1a10 [ 316.670064][ T6646] ima_file_mmap+0x104/0x150 [ 316.675199][ T6646] __se_sys_remap_file_pages+0x53e/0x770 [ 316.681363][ T6646] do_syscall_64+0x4c/0xa0 [ 316.686311][ T6646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.692734][ T6646] [ 316.692734][ T6646] other info that might help us debug this: [ 316.692734][ T6646] [ 316.702965][ T6646] Possible unsafe locking scenario: [ 316.702965][ T6646] [ 316.710418][ T6646] CPU0 CPU1 [ 316.715789][ T6646] ---- ---- [ 316.721156][ T6646] lock(&mm->mmap_lock); [ 316.725496][ T6646] lock(&sb->s_type->i_mutex_key#12); [ 316.733484][ T6646] lock(&mm->mmap_lock); [ 316.740336][ T6646] lock(&sb->s_type->i_mutex_key#12); [ 316.745806][ T6646] [ 316.745806][ T6646] *** DEADLOCK *** [ 316.745806][ T6646] [ 316.753952][ T6646] 1 lock held by syz.2.579/6646: [ 316.758889][ T6646] #0: ffff888076c408d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 316.769349][ T6646] [ 316.769349][ T6646] stack backtrace: [ 316.775254][ T6646] CPU: 1 PID: 6646 Comm: syz.2.579 Not tainted syzkaller #0 [ 316.782560][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.792644][ T6646] Call Trace: [ 316.795929][ T6646] [ 316.798873][ T6646] dump_stack_lvl+0x168/0x22e [ 316.803561][ T6646] ? load_image+0x3b0/0x3b0 [ 316.808082][ T6646] ? show_regs_print_info+0x12/0x12 [ 316.813294][ T6646] ? print_circular_bug+0x12b/0x1a0 [ 316.818507][ T6646] check_noncircular+0x274/0x310 [ 316.823459][ T6646] ? add_chain_block+0x940/0x940 [ 316.828408][ T6646] ? lockdep_lock+0xdc/0x1e0 [ 316.833016][ T6646] ? _find_first_zero_bit+0xcf/0x100 [ 316.838326][ T6646] __lock_acquire+0x2cf8/0x7c50 [ 316.843209][ T6646] ? ima_match_policy+0x104/0x2100 [ 316.848327][ T6646] ? __lock_acquire+0x13c0/0x7c50 [ 316.853362][ T6646] ? verify_lock_unused+0x140/0x140 [ 316.858574][ T6646] ? ima_match_policy+0x207a/0x2100 [ 316.863781][ T6646] lock_acquire+0x1b4/0x490 [ 316.868295][ T6646] ? process_measurement+0x33c/0x1a10 [ 316.873704][ T6646] ? __might_sleep+0xd0/0xd0 [ 316.878303][ T6646] ? read_lock_is_recursive+0x10/0x10 [ 316.883688][ T6646] ? ima_get_action+0x71/0xa0 [ 316.888381][ T6646] down_write+0x36/0x60 [ 316.892547][ T6646] ? process_measurement+0x33c/0x1a10 [ 316.897949][ T6646] process_measurement+0x33c/0x1a10 [ 316.903185][ T6646] ? ima_file_mmap+0x150/0x150 [ 316.907982][ T6646] ? aa_file_perm+0x117/0xec0 [ 316.912688][ T6646] ? mtree_load+0xeb/0xa40 [ 316.917122][ T6646] ? mtree_load+0x90a/0xa40 [ 316.921640][ T6646] ? aa_get_current_label+0x110/0x1d0 [ 316.927031][ T6646] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 316.933307][ T6646] ima_file_mmap+0x104/0x150 [ 316.937929][ T6646] ? ima_file_free+0x3e0/0x3e0 [ 316.942726][ T6646] ? common_file_perm+0x171/0x1c0 [ 316.947778][ T6646] ? bpf_lsm_mmap_file+0x5/0x10 [ 316.952662][ T6646] ? security_mmap_file+0x11b/0x180 [ 316.957881][ T6646] __se_sys_remap_file_pages+0x53e/0x770 [ 316.963559][ T6646] ? __se_sys_futex+0x14a/0x440 [ 316.968437][ T6646] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 316.974194][ T6646] ? lock_chain_count+0x20/0x20 [ 316.979069][ T6646] ? lockdep_hardirqs_on+0x94/0x140 [ 316.984284][ T6646] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 316.990015][ T6646] do_syscall_64+0x4c/0xa0 [ 316.994445][ T6646] ? clear_bhb_loop+0x60/0xb0 [ 316.999133][ T6646] ? clear_bhb_loop+0x60/0xb0 [ 317.003826][ T6646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.009726][ T6646] RIP: 0033:0x7f063118f749 [ 317.014156][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.033825][ T6646] RSP: 002b:00007f0631f5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 317.042265][ T6646] RAX: ffffffffffffffda RBX: 00007f06313e6540 RCX: 00007f063118f749 [ 317.050246][ T6646] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 317.058228][ T6646] RBP: 00007f0631213f91 R08: 0000000000000000 R09: 0000000000000000 [ 317.066210][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.074197][ T6646] R13: 00007f06313e65d8 R14: 00007f06313e6540 R15: 00007fffcafe73a8 [ 317.082187][ T6646] [ 317.101167][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.109307][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.173535][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.233135][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.746016][ T4419] bond0 (unregistering): Released all slaves [ 317.843027][ T6630] tipc: Started in network mode [ 317.848021][ T6630] tipc: Node identity 1aa65c4152db, cluster identity 4711 [ 317.855533][ T6630] tipc: Enabled bearer , priority 0 [ 317.865186][ T6632] device syzkaller0 entered promiscuous mode [ 317.873651][ T6641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.579'. [ 317.885253][ T6645] tipc: Resetting bearer [ 317.908884][ T6482] device hsr_slave_0 entered promiscuous mode [ 317.922919][ T6482] device hsr_slave_1 entered promiscuous mode [ 317.929589][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.937244][ T6482] Cannot create hsr debugfs directory [ 317.954236][ T6645] tipc: Resetting bearer [ 317.969830][ T6645] tipc: Disabling bearer [ 318.439339][ T6482] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.448912][ T6482] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.460818][ T6482] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.469850][ T6482] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.534257][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.548982][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.558770][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.569381][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.579584][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.589007][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.598252][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.605398][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.614256][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.626756][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.636965][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.645647][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.652771][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.666400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.685230][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.703614][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.712868][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.723539][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.733500][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.745785][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.754546][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.769725][ T6482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.783880][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.793406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.998699][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.007286][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.019253][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.306640][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.315810][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.337553][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.346462][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.358675][ T6482] device veth0_vlan entered promiscuous mode [ 319.366159][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.376031][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.388232][ T6482] device veth1_vlan entered promiscuous mode [ 319.410164][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.418371][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.426547][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.435607][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.446515][ T6482] device veth0_macvtap entered promiscuous mode [ 319.461715][ T6482] device veth1_macvtap entered promiscuous mode [ 319.479475][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.492539][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.503873][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.516451][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.527033][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.537761][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.548275][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.560045][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.571505][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.578822][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.587594][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.595677][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.604946][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.616417][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.627494][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.637589][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.648203][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.658895][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.669388][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.679229][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.689719][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.700907][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.709929][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.719201][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.731851][ T6482] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.741324][ T6482] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.750052][ T6482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.759324][ T6482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.787264][ T6482] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 319.811467][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.812656][ T6482] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 319.819299][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.843138][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.864836][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.875110][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.884285][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready