last executing test programs: 3m42.761780213s ago: executing program 32 (id=156): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) write$eventfd(r0, &(0x7f0000000640)=0x9, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) 2m25.398663616s ago: executing program 3 (id=646): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="86", 0x1, 0x20000100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0x3}, 0x8) 2m24.038208644s ago: executing program 3 (id=653): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000d00)='./file2\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="0d772162455e1a51d624f8d8357f21d78bfc90e3ed32a9a245806694af127d9747d414832bcbcca884d56cec6795324de91fc9e4e245db8d4e973d02ae985de9b61807605921ac2d3eca09881179e0b64872106eae24d99523b3d05b69a59c323d692953953d57c5"], 0x1, 0x318, &(0x7f0000000780)="$eJzs3c9rE1sUwPEzaX62ry9dPB6Px3twqSCKdGgC7lxYpAUxoLSNYAVhaqcaMk1KJhQiYrMQ3Lp20YVLEURw50bEbTf+Bf7addOdBYsjM5NM02RM02rtD7+fRXM6c87MnbkzzfSW3qyde7hQnLf1L05UPDERcXzL/hKpy+k3K+//n3r9h/+9UhNj05msUhERuX736fCr6sDVF3++TMjq0I219eyn1f+mRb5O35aIKtiq5G5LzZbLVc0tnivYRV2pK5Zp2KYqlGyzUlWGt96YtUw1b5UXF2vKKM0N9i9WTNtWRqmmimZNVcuqWqkp45ZRKCld19Vgv0BEhoIo0rFO61aYf7LhOLLudlCi7nZ7SHa9GcQar4kfaywOk7b+75rbcXH07WfL8CtsONGg/+M79D+OH//+//Col/sfx8/UtZlLY7nc+KRSSZGFB0v5pbz/6q9/NyAFscSUlckzM5vBo6F7qWju14mLufFR5RmSkwvLjfrlpbz/5jA236jPSNp9Tmmpl2Z9xq9X2+tj0t9an5W0/BVen1XiPZWKRFrq43LqREu9Lml5e1PKWl3mvEfcrfp7GaUuXM617T/l5bXjLQ8AAAAAAAAAcBToKrA1fq8Ff+pN6XrCG1sP1qfcxW6enxCMr49KWjbDx+dHQ8f3o/Jv9AAPHAAAAACA34hdu1M0LMus7D6QHnL6Hqe67CImIm4gcn/YbUzXDf7daHHbKncbIVVxEencTl8vbW4EqbP+/p5NNhomez1R+xhERKR1if/PGu7BW8+bOamw82NHdnUBjMRDzrxlJX/OUUjbUXwnaM0Rx3FCkyW5tws70XmAPQbaZnPJP6E5jtalXIv6OYYV85c0b8yd9n4+/HboMXB73wuS7Sdq5KO/XavLD43PwRAfAAAAgCOk5RcnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwQHqYM6xzbrbmvP3bk6XxEfGdU7K1f2gu8/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOIS+BQAA//+8NrDx") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m23.453501898s ago: executing program 3 (id=658): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r4}, 0x20) 2m23.297194887s ago: executing program 3 (id=660): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x111240, 0xa) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 2m20.371476397s ago: executing program 3 (id=672): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x4) 2m12.294742325s ago: executing program 3 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m12.150105893s ago: executing program 33 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m5.572226684s ago: executing program 6 (id=700): syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x198, &(0x7f0000000000)="$eJzs0L9rE3EYx/H38/1e0kapcioOEWzEYrxQTe6qDk7BqUIOHFwcgpb0bIoXNZ5LSwtdpCDV/gs66eYP0EnEgnNwEBzkXLqJGYqDYySXb/R/KN8X3H14HjjueZ520k0mgPzeWos6Gc0hviA4wLSMekqN8r2pf5rcHgVXTL1l8qXJg8nK6p2FOI4elC6XcKH4vwH8znrjFskbjiv6Qh35trfWKnErZFCnoxZD3AaVJ+gmXe8pRWeKYzfRDMpbXFV0pdyAw9WHnfvVZGX13HJnYSlaiu4Gwdyl2oVa7WJQvb0cR7V3iPdYFM9YxwuZeEXBWyfX5FHPOcCsIF5bpVoqffJNtnv67OnZPsr7xQDpZSsJ7ZK6zhmzIRwVnqNDZhoUFA7Zj+aRa+qt+M5X509OMbmh9fnWvXhx80Z2V2BS/F1yZZ+g4jPnnqLIEXbYTJlJmU95kbL7g2n5MDzR+K7OxvD92lQnOAkFM0YePks5JBg+Lkx9gh1UNpcLH80347G//5vfsizLsizLsizL2v/+BgAA//99vVu0") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m5.008325437s ago: executing program 6 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m3.75484377s ago: executing program 6 (id=716): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x111240, 0xa) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 2m2.960258416s ago: executing program 6 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) 1m58.358665692s ago: executing program 6 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x807bff) 1m58.21803872s ago: executing program 34 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x807bff) 1m56.066802935s ago: executing program 5 (id=759): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x10}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0xd9b2794f6a139537, 0x70bd2b, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfed8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1m55.971806141s ago: executing program 5 (id=760): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 1m55.747287453s ago: executing program 5 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000008c0)={0x0, 0x6e, "3101bed1aea8736547fa7d43a70e6334e68e15acad10ae1288e4369b4a8f623c46c333e0c021a3bcc97ef4e18391124b26d8a4a7203d994fd936cd67b9a97936ac43eb161166d79d4b2aff0ee92fcc9b3c399acfe9b35db5f203d6aa5f7977149c3a1271a6bdd01771c29efc8e1b"}, &(0x7f0000000700)=0x76) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x19, @rand_addr=0x3}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x82, &(0x7f0000000440), &(0x7f0000000480)=0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000006c0)=0x208858, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r2], 0x38}}, 0x10) 1m55.622848641s ago: executing program 5 (id=763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}}}, &(0x7f0000000240)=0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) 1m54.438450339s ago: executing program 5 (id=768): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x5d) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x578410e9) shutdown(r5, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1m53.961018707s ago: executing program 5 (id=781): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000840)={0xff83, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x9, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0xffeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xe}}, 0x30) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr/keycreate\x00') 1m38.877579341s ago: executing program 35 (id=781): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000840)={0xff83, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x9, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0xffeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xe}}, 0x30) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr/keycreate\x00') 1m12.567165755s ago: executing program 0 (id=920): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x104) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.469416951s ago: executing program 0 (id=921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "10f5ff00"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) read$hiddev(r2, &(0x7f0000000400)=""/209, 0xd1) close_range(r0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_socket_connect_nvme_tcp() 1m12.13373375s ago: executing program 8 (id=926): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r2, 0x100000000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000005c0)={0x1, &(0x7f0000001dc0)=[{@none}]}) 1m11.588452232s ago: executing program 8 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a000100717565"], 0x84}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000280)={{0x9, 0x80}, {0x4, 0x7}, 0x1}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m11.337156627s ago: executing program 8 (id=935): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980), 0xfe, 0x799, &(0x7f00000001c0)="$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") setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x1f, 0xc5, 0xda4bda4, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x7c88]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) 1m10.880014643s ago: executing program 8 (id=938): mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16], 0x6, 0x2ae, &(0x7f0000001180)="$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") mkdir(&(0x7f0000001940)='./file0\x00', 0x40) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m8.304425852s ago: executing program 0 (id=947): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)=ANY=[], 0x48) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m8.127245792s ago: executing program 8 (id=948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1m7.614637132s ago: executing program 0 (id=953): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDvTOIkm6ZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBrdeygGpwAq0QeJgNP6RzW7sJOw6tmp/PtJo5s0bz/e9teY97zeJXwBj63pEHEbEVES8HRHz7fNJe4vXW1t23f17d9eO791dS6LReOsfSbM+OxenXpN5qn3PmYj4/ncifpScjVvbP9haLZdLu+1yoV7ZKdT2D25tVlY3Shul7WJxeWl58dXbrxT71tcXKr/55Nubb/zgg9996eM/HX7zJ1mz5tp1p/vRT62u507iZCYj4o2rCDYEE+3+TA27ITyWNCI+ExEvNp//+ZhovpuX0+WxBgA+BRqN+WjMny4DAKMubebAkjTfzgXMRZrm860c3nMxm5artfrNO9W97fVWrmwhcumdzXJpsZ0rXIhckpWX3suOH5SL8XD5dkQ8GxE/nb7WLOfXLp9nAAD666lH5v9/T7fmfwBgxM1cdMHKYNoBAAzOhfM/ADByzP8AMH7M/wAwfsz/ADB+zP8AMG4+6sz/E8NuCQAwEN97881saxy3v/96/Z39va3qO7fWS7WtfGVvLb9W3d3Jb1SrG+VSfq1aueh+5Wp1Z+nl2Hu3UC/V6oXa/sFKpbq3XV9pfq/3Sik3kF4BAOd59oUP/5JExOFr15pbnFrLwVwNoy0ddgOAoZHzh/HlW7hhfPk/PnDRWp49f0X4/ccI1njvMV4E9NuNz8v/w7jqkv+XEoAxIf8P48tkD+Or0Uh6rfmfnlwCAIwUOX5goD//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBEx19wWTpXTNJ+PeDoiFiKX3NkslxYj4pmI+PN0bjorLw21xQDAk0v/lrTX/7ox/9Lco7VTyX+uNfcR8eOfv/Wzd1fr9d2l7Pw/pzvn6++3zxeH0X4A4CKdebozj3fcv3d3rbMNsj2ffKu1uGgW97i9tWomYzLb/XEmchEx+6+kVW7LPq9M9CH+4VFEfK5b/5NmbmShvfLpo/Gz2E8PNH76UPy0WdfaZ/8Wnz1z5+meMS9a6xXGxYfZ+PN6t+cvjevN/UzXxY9nmiPUk+uMf8dnxr/O8z7THGu6jX/XLxvj5d9/t2fdUcQXJrvFT07iJz3iv3RSmjo3/kdf/PKLveoav4y4Ed3jn45VqFd2CrX9g1ubldWN0kZpu1hcXlpefPX2K8VCM0dd6GSqz/r7azef6dn/X0fM9og/c0H/v3ZurxsnA/Cv/vv2D7/SK/5RxDe+2v39f+6c+Nmc+PVz4z+wOvvbnst3Z/HXW/0/+n/f/5uXjP/xXw/WL3kpADAAtf2DrdVyubTb14NcdKma7k+I5Ira7GDED7LP4096n+fbKbOu1/zhFx88n1UOvad9ORjywARcuQcP/bBbAgAAAAAAAAAAAAAA9HLlf06UDruHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjLL/BQAA//8SwcrQ") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000000004000000"], 0x60}}, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x40000000) 1m7.378833996s ago: executing program 8 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a81000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1m7.083787533s ago: executing program 36 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a81000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1m6.818102019s ago: executing program 0 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x7fff, 0x8001, 0x5, 0xc1}}]}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m3.626819553s ago: executing program 0 (id=969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 1m3.441196084s ago: executing program 37 (id=969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 8.670441797s ago: executing program 7 (id=1177): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd2(0x1f920, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xc, 0x3, 0x0, 0x2, 0x7, 0xa1, 0xa6, 0xff, 0x2, 0xd, 0xb, 0xb4, 0x8, 0x0, 0x5, 0x3}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x218, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0x6, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@cpu={{0x28}, {0xfff, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@ip={@multicast2, @rand_addr=0x64010104, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9f7ffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x9, 0x1000, 0xee, 0x1000004, 0x7fffffffffffb, 0x3, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4315}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.639241059s ago: executing program 1 (id=1178): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x44880}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf092000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800003fb704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.355860306s ago: executing program 7 (id=1181): pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6901d000) 8.141218318s ago: executing program 1 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 7.010831774s ago: executing program 1 (id=1185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 6.979128566s ago: executing program 9 (id=1186): r0 = syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x800842, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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") openat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x15) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x4480, &(0x7f0000000100)=ANY=[@ANYBLOB="0096397bb229f118b1f6c334ff95e9d57079d2a61ef7526c03c3a0d9cd515719956a0e5922340c97beade3e691744c236c61868da817036b0bab4516cc735ee856ef073c7b0b540347b358404ebe8e0c22e3a8a3caad47889d996a07d6988b211450783f4fdfbb8ae60572ea3bb70fb29560525b"], 0x83, 0x23b, &(0x7f0000000300)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x460d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 6.887885001s ago: executing program 2 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 6.617174846s ago: executing program 7 (id=1189): socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.595284745s ago: executing program 7 (id=1191): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 5.551014618s ago: executing program 2 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xb5, 0x29, 0x91, 0x10, 0x4dd, 0x9032, 0x4346, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x16, 0x2, 0x60, 0x40, [{{0x9, 0x4, 0x74, 0xa, 0x1, 0x2, 0x6, 0x0, 0x7, [], [{{0x9, 0x5, 0xdd7221554e5ebcc3, 0x0, 0x400, 0x4, 0x4, 0x2}}]}}]}}]}}, 0x0) 5.474950532s ago: executing program 9 (id=1193): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5.474691453s ago: executing program 1 (id=1194): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], &(0x7f0000000d80)=""/129, 0x53, 0x81, 0x1}, 0x28) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619}, 0x38) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.468467769s ago: executing program 9 (id=1195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) 3.328934647s ago: executing program 1 (id=1196): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x6, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3.279375349s ago: executing program 9 (id=1197): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) getdents64(r2, 0x0, 0x0) 3.230831183s ago: executing program 4 (id=1198): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) r1 = inotify_init1(0x800) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f00000027c0)) inotify_add_watch(r1, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x56000140) setxattr$security_capability(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r2) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) wait4(r0, 0x0, 0xa0000009, 0x0) 3.144293957s ago: executing program 7 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r3, 0x1, 0xd7, 0x6, @multicast}, 0x14) 3.072804142s ago: executing program 9 (id=1200): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3) 2.970695338s ago: executing program 4 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') pread64(r3, &(0x7f0000001140)=""/228, 0xe4, 0x8) 2.037463282s ago: executing program 2 (id=1202): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200898, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c40)=ANY=[@ANYBLOB="b000000000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.934283638s ago: executing program 4 (id=1203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 1.694425052s ago: executing program 9 (id=1204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3095b90b396cd8ec", "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "0cf02f56bec1eb9e"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 1.693882002s ago: executing program 2 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r1, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) 1.661150993s ago: executing program 4 (id=1206): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) unshare(0x22020400) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) fchown(r0, 0x0, 0x0) 1.591199087s ago: executing program 7 (id=1207): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000977000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x8000100000007ff, 0x1, 0x0, 0x3, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x40000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.589910588s ago: executing program 1 (id=1208): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1.476838854s ago: executing program 4 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(r0) 1.048871069s ago: executing program 2 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 753.844126ms ago: executing program 4 (id=1211): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x1, 0x0, 0xee00, 0x0, 0x0, 0xc, 0x6}, 0xffffffff, 0x0, 0x3, 0x2e2, r0, r0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x40}, 0x28) 0s ago: executing program 2 (id=1212): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): rent NTFS' sector size (4096) and media sector size (512) [ 134.312362][ T5793] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.323772][ T4342] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 134.744399][ T4342] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 135.291096][ T4342] usb 1-1: USB disconnect, device number 3 [ 135.299582][ T4342] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 135.385154][ T5797] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 135.439736][ T5797] ntfs3: loop5: Failed to load $Extend. [ 135.968710][ T5833] loop4: detected capacity change from 0 to 1024 [ 135.999281][ T4342] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.048461][ T5833] EXT4-fs (loop4): Ignoring removed orlov option [ 136.094088][ T5833] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.117163][ T5833] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.134492][ T5833] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.417: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.152008][ T5833] EXT4-fs (loop4): 1 orphan inode deleted [ 136.158254][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000008001,max_batch_time=0x000000004a460f54,data_err=abort,orlov,barrier,init_itable=0x0000000000000004,nolazytime,dax=never,nodiscard,,errors=continue. Quota mode: writeback. [ 136.246141][ T5843] loop3: detected capacity change from 0 to 64 [ 136.328738][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.419'. [ 136.415601][ T4342] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.452388][ T4342] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.475809][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.511341][ T4342] usb 1-1: config 0 descriptor?? [ 137.184920][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.294844][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.871582][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.912399][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.924114][ T5881] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.357054][ T5900] loop5: detected capacity change from 0 to 1024 [ 138.450514][ T5900] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.539175][ T5118] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 138.578392][ T5118] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #14: comm syz-executor: mark_inode_dirty error [ 138.776675][ T5918] loop5: detected capacity change from 0 to 512 [ 138.830490][ T5918] EXT4-fs (loop5): Ignoring removed bh option [ 138.866996][ T5918] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 138.893604][ T5922] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 138.942728][ T5918] EXT4-fs (loop5): 1 truncate cleaned up [ 138.955307][ T5918] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 139.057554][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.076924][ T5926] bond2: (slave batadv1): making interface the new active one [ 139.088153][ T5926] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 139.110403][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 139.162565][ T5922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.199737][ T5931] netlink: 'syz.4.440': attribute type 27 has an invalid length. [ 139.794537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 139.803893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 139.832213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 139.841380][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 139.850500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 139.859614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 139.868735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 139.877848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 139.886972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 139.896082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 140.640445][ T4175] usb 1-1: USB disconnect, device number 4 [ 141.048099][ T5950] x_tables: duplicate underflow at hook 3 [ 141.376821][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.384651][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.470342][ T5955] block device autoloading is deprecated and will be removed. [ 141.516788][ T5956] block device autoloading is deprecated and will be removed. [ 143.564459][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.749514][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.674277][ T4375] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.691495][ T6000] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 144.899126][ T5931] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.908648][ T5931] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.918023][ T5931] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.927986][ T5931] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.036637][ T5931] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 145.055568][ T6003] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 145.117634][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 145.134498][ T5970] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 145.165689][ T5931] syz.4.440 (5931) used greatest stack depth: 20144 bytes left [ 145.224595][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 145.533578][ T6018] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 146.755216][ T4175] Bluetooth: hci5: command 0x1003 tx timeout [ 146.773894][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 148.185972][ T6067] binder: 6066:6067 ioctl c0306201 2000000003c0 returned -14 [ 148.617748][ T5335] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.822210][ T4175] Bluetooth: hci5: command 0x1001 tx timeout [ 148.830544][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 148.982639][ T5335] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 149.008291][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.034685][ T5335] usb 5-1: config 0 descriptor?? [ 149.094818][ T5335] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 149.441661][ T6099] loop5: detected capacity change from 0 to 1024 [ 149.486936][ T6099] EXT4-fs (loop5): Ignoring removed bh option [ 149.511325][ T6099] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.607781][ T6099] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,noinit_itable,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 149.934154][ T6099] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.479: Allocating blocks 497-513 which overlap fs metadata [ 149.992941][ T6099] EXT4-fs (loop5): pa ffff888074d89620: logic 128, phys. 385, len 8 [ 150.001008][ T6099] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 150.131347][ T6099] EXT4-fs error (device loop5): mb_free_blocks:1876: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 150.794608][ T5335] gspca_stv06xx: HDCS-1020 sensor detected [ 150.912275][ T5973] Bluetooth: hci5: command 0x1009 tx timeout [ 151.662403][ T5335] STV06xx: probe of 5-1:0.0 failed with error -71 [ 151.671981][ T5335] usb 5-1: USB disconnect, device number 2 [ 152.162724][ T5973] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.812317][ T5973] usb 6-1: Using ep0 maxpacket: 32 [ 152.821945][ T6164] tipc: Failed to remove unknown binding: 66,0,0/0:3549553439/3549553441 [ 152.831187][ T6164] tipc: Failed to remove unknown binding: 66,0,0/0:3549553439/3549553440 [ 152.915831][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 152.972437][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.983962][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.004538][ T5973] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 153.033184][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.067512][ T5973] usb 6-1: config 0 descriptor?? [ 153.368271][ T6159] udc-core: couldn't find an available UDC or it's busy [ 153.387789][ T6159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 154.582109][ C1] sched: RT throttling activated [ 154.776378][ T6200] kexec: Could not allocate control_code_buffer [ 154.832346][ T5973] usbhid 6-1:0.0: can't add hid device: -71 [ 154.838731][ T5973] usbhid: probe of 6-1:0.0 failed with error -71 [ 154.869988][ T5973] usb 6-1: USB disconnect, device number 2 [ 155.551631][ T6229] loop0: detected capacity change from 0 to 128 [ 157.101251][ T6248] loop5: detected capacity change from 0 to 1024 [ 157.300867][ T6248] hfsplus: invalid btree flag [ 157.309821][ T6248] hfsplus: failed to load extents file [ 157.602401][ T6265] ptrace attach of "./syz-executor exec"[4188] was attempted by "./syz-executor exec"[6265] [ 158.168499][ T6248] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 158.421178][ T6280] loop5: detected capacity change from 0 to 128 [ 159.066880][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 161.473589][ T6376] loop0: detected capacity change from 0 to 512 [ 161.875386][ T6380] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 163.153614][ T6376] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.181757][ T6376] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.532: corrupted inode contents [ 163.297785][ T6376] EXT4-fs (loop0): Remounting filesystem read-only [ 163.311867][ T6376] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 163.371109][ T6376] EXT4-fs (loop0): Remounting filesystem read-only [ 163.405349][ T6376] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.532: corrupted inode contents [ 163.471824][ T6376] EXT4-fs (loop0): Remounting filesystem read-only [ 163.478483][ T6376] EXT4-fs error (device loop0): ext4_evict_inode:330: inode #15: comm syz.0.532: mark_inode_dirty error [ 163.492826][ T6376] EXT4-fs (loop0): Remounting filesystem read-only [ 163.531389][ T6376] EXT4-fs (loop0): 1 orphan inode deleted [ 163.540896][ T6376] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x0000000000010000,errors=remount-ro,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 163.689536][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.745009][ T6392] net_ratelimit: 10 callbacks suppressed [ 163.745020][ T6392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.989860][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 164.712403][ T6419] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 165.579626][ T6425] loop3: detected capacity change from 0 to 64 [ 165.736910][ T6430] loop0: detected capacity change from 0 to 128 [ 166.340206][ T6430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.572484][ T6430] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.130581][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.138148][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.799321][ T6481] loop4: detected capacity change from 0 to 40427 [ 169.898497][ T6481] F2FS-fs (loop4): invalid crc value [ 169.927467][ T6481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.972023][ T6481] F2FS-fs (loop4): Start checkpoint disabled! [ 169.993229][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.028279][ T6481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 170.387269][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.468880][ T4394] attempt to access beyond end of device [ 170.468880][ T4394] loop4: rw=2049, want=40984, limit=40427 [ 170.991303][ T6433] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.001274][ T6433] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.011152][ T6433] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.022860][ T6433] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.185131][ T6433] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.194251][ T6433] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.203200][ T6433] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.212147][ T6433] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.246015][ T6457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.270675][ T6457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.345174][ T6488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.369811][ T6489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.404144][ T6489] bond1: (slave macvlan2): making interface the new active one [ 171.419802][ T6489] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 171.436265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 172.244737][ T6506] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.820308][ T6517] loop5: detected capacity change from 0 to 128 [ 172.842963][ T6517] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.854509][ T6517] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.896310][ T6517] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.573: Logical block already allocated [ 173.735742][ T6542] x_tables: ip_tables: osf match: only valid for protocol 6 [ 174.173649][ T26] audit: type=1326 audit(2000000068.260:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7fc00000 [ 174.696223][ T6547] loop5: detected capacity change from 0 to 128 [ 174.729648][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.779565][ T6550] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 174.805962][ T6550] loop3: detected capacity change from 0 to 8 [ 174.858600][ T6547] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.869511][ T6547] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.950512][ T6550] SQUASHFS error: zlib decompression failed, data probably corrupt [ 174.995172][ T6550] SQUASHFS error: Failed to read block 0x9b: -5 [ 175.001486][ T6550] SQUASHFS error: Unable to read metadata cache entry [99] [ 175.081832][ T6550] SQUASHFS error: Unable to read inode 0x127 [ 175.806988][ T6565] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.532957][ T6604] loop4: detected capacity change from 0 to 64 [ 178.576674][ T6605] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 180.190419][ T5069] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.477756][ T5069] usb 1-1: Using ep0 maxpacket: 32 [ 181.502447][ T5069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.521695][ T5069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.531558][ T5069] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 181.540880][ T5069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.570544][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.578009][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.586932][ T5069] usb 1-1: config 0 descriptor?? [ 181.670934][ T6644] loop4: detected capacity change from 0 to 2048 [ 181.695902][ T6619] batman_adv: batadv0: Interface deactivated: dummy0 [ 181.766188][ T6644] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.780018][ T4860] udevd[4860]: incorrect nilfs2 checksum on /dev/loop4 [ 181.849947][ T6646] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.876550][ T6623] udc-core: couldn't find an available UDC or it's busy [ 181.893626][ T6623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.075887][ T5069] usbhid 1-1:0.0: can't add hid device: -71 [ 182.081935][ T5069] usbhid: probe of 1-1:0.0 failed with error -71 [ 182.147359][ T5069] usb 1-1: USB disconnect, device number 5 [ 183.556004][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.673188][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.246765][ T6619] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.255871][ T6619] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.265079][ T6619] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.275506][ T6619] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.362273][ T6681] bond0: Device is already in use. [ 184.487939][ T6687] loop0: detected capacity change from 0 to 256 [ 185.615912][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 185.662533][ T6705] loop3: detected capacity change from 0 to 1024 [ 185.732420][ T6705] EXT4-fs (loop3): inline encryption not supported [ 185.739281][ T6705] EXT4-fs (loop3): Ignoring removed nobh option [ 185.784632][ T6705] EXT4-fs (loop3): Ignoring removed bh option [ 185.790797][ T6705] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.860683][ T6711] loop5: detected capacity change from 0 to 1024 [ 185.912869][ T6715] overlayfs: failed to clone upperpath [ 185.920038][ T6705] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 185.986517][ T26] audit: type=1326 audit(2000000080.080:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.011792][ T6711] EXT4-fs (loop5): Ignoring removed orlov option [ 186.102297][ T26] audit: type=1326 audit(2000000080.130:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.135840][ T6711] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 186.168784][ T6711] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.632: Allocating blocks 385-513 which overlap fs metadata [ 186.187893][ T6711] EXT4-fs (loop5): pa ffff888074f002a0: logic 16, phys. 129, len 24 [ 186.196665][ T6711] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 186.270438][ T5118] Trying to write to read-only block-device loop5 [ 186.277840][ T26] audit: type=1326 audit(2000000080.130:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.286170][ T5118] Trying to write to read-only block-device loop5 [ 186.314137][ T6705] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.631: Allocating blocks 257-513 which overlap fs metadata [ 186.329878][ T26] audit: type=1326 audit(2000000080.130:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.377628][ T26] audit: type=1326 audit(2000000080.130:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.382457][ T5118] Trying to write to read-only block-device loop5 [ 186.415270][ T5118] Trying to write to read-only block-device loop5 [ 186.421801][ T5118] Trying to write to read-only block-device loop5 [ 186.441275][ T5118] Trying to write to read-only block-device loop5 [ 186.448327][ T5118] Trying to write to read-only block-device loop5 [ 186.464886][ T26] audit: type=1326 audit(2000000080.130:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.480945][ T5118] Trying to write to read-only block-device loop5 [ 186.526236][ T5118] Trying to write to read-only block-device loop5 [ 186.532363][ T26] audit: type=1326 audit(2000000080.130:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.539961][ T5118] Trying to write to read-only block-device loop5 [ 186.595899][ T26] audit: type=1326 audit(2000000080.130:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.682212][ T26] audit: type=1326 audit(2000000080.130:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 186.771953][ T26] audit: type=1326 audit(2000000080.130:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.0.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2e404f79 code=0x7ffc0000 [ 188.527793][ T6756] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 188.599320][ T6756] team0: Port device dummy0 added [ 188.625182][ T6758] device geneve2 entered promiscuous mode [ 188.998003][ T6767] netlink: 'syz.4.650': attribute type 15 has an invalid length. [ 189.007329][ T6738] loop5: detected capacity change from 0 to 40427 [ 189.251359][ T6773] loop3: detected capacity change from 0 to 128 [ 189.266257][ T6771] loop0: detected capacity change from 0 to 4096 [ 189.335544][ T6773] FAT-fs (loop3): bogus number of reserved sectors [ 189.383049][ T6773] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 189.413014][ T6773] FAT-fs (loop3): Can't find a valid FAT filesystem [ 189.434498][ T6777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.889273][ T6789] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.945203][ T6789] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.039733][ T6795] loop3: detected capacity change from 0 to 1024 [ 190.106888][ T6795] EXT4-fs (loop3): Ignoring removed bh option [ 190.144248][ T6789] syz.1.657 (6789) used greatest stack depth: 18320 bytes left [ 190.210006][ T6795] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 191.260454][ T5069] Bluetooth: hci1: command 0x0406 tx timeout [ 191.302384][ T5069] Bluetooth: hci2: command 0x0406 tx timeout [ 191.343406][ T5069] Bluetooth: hci4: command 0x0406 tx timeout [ 191.445829][ T6802] kexec: Could not allocate control_code_buffer [ 191.561576][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'. [ 191.848670][ T6818] overlayfs: bad index found (index=index/00fb2100015f5a5c203797480f90ecb034b0d869c834eeed0cab01000000000000, ftype=2000, origin ftype=a000). [ 193.338997][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.184847][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.191215][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.316989][ T4193] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 195.043074][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 195.322660][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 195.907401][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 196.051661][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.062400][ T4193] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 196.137927][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.182141][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 196.217397][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 196.240040][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 196.240059][ T26] audit: type=1326 audit(2000000090.310:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0b03c8f79 code=0x0 [ 196.289310][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.298805][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 196.341907][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.353688][ T26] audit: type=1326 audit(2000000090.450:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0b03c8f79 code=0x0 [ 196.390202][ T4193] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 196.456019][ T26] audit: type=1326 audit(2000000090.510:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b03c8f79 code=0x7ffc0000 [ 196.489286][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.499423][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 196.508433][ T6859] overlayfs: failed to clone upperpath [ 196.543565][ T26] audit: type=1326 audit(2000000090.510:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b03c8f79 code=0x7ffc0000 [ 196.566599][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 196.610767][ T26] audit: type=1326 audit(2000000090.610:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b03c8f79 code=0x7ffc0000 [ 196.650765][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.674532][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 196.745638][ T26] audit: type=1326 audit(2000000090.610:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0b03c8ce2 code=0x7ffc0000 [ 196.815962][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.848163][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 196.858669][ T4193] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 196.888859][ T26] audit: type=1326 audit(2000000090.610:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd0b03c8d77 code=0x7ffc0000 [ 196.928842][ T26] audit: type=1326 audit(2000000090.610:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd0b0385d11 code=0x7ffc0000 [ 196.957839][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 196.972535][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 196.989406][ T6869] bridge5: port 1(veth0_to_bond) entered blocking state [ 196.997240][ T26] audit: type=1326 audit(2000000090.610:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd0b03c9d89 code=0x7ffc0000 [ 197.137063][ T6869] bridge5: port 1(veth0_to_bond) entered disabled state [ 197.210905][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /136/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 197.368135][ T6869] device veth0_to_bond entered promiscuous mode [ 197.405009][ T26] audit: type=1326 audit(2000000090.610:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.5.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd0b0385d7b code=0x7ffc0000 [ 197.540908][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 197.586496][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 197.681941][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 197.791933][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 197.836183][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 198.097898][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 198.974291][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.128949][ T6882] pit: kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 199.160865][ T6886] loop5: detected capacity change from 0 to 256 [ 199.194723][ T6886] /dev/loop5: Can't open blockdev [ 199.327488][ T4193] EXT4-fs warning: 51 callbacks suppressed [ 199.327505][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.394126][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.417882][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.440524][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.462708][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.486673][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.507826][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.550033][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.608461][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 199.660239][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 200.713028][ T6908] overlayfs: './file0' not a directory [ 200.855366][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.698'. [ 201.250409][ T6918] loop5: detected capacity change from 0 to 2048 [ 201.419295][ T4371] bond1: (slave ip6gretap1): Releasing backup interface [ 201.517576][ T4180] udevd[4180]: incorrect nilfs2 checksum on /dev/loop5 [ 201.721834][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'. [ 202.215930][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 203.591444][ T5973] Bluetooth: hci4: command 0x0409 tx timeout [ 203.850907][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.941407][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.950758][ T6924] device bridge_slave_0 entered promiscuous mode [ 203.959612][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.967159][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.975645][ T6924] device bridge_slave_1 entered promiscuous mode [ 204.048400][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.084574][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.191191][ T6924] team0: Port device team_slave_0 added [ 204.274946][ T4371] device hsr_slave_0 left promiscuous mode [ 204.289423][ T4371] device hsr_slave_1 left promiscuous mode [ 204.300254][ T4371] batman_adv: batadv0: Removing interface: dummy0 [ 204.325216][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.337628][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.352912][ T4371] device bridge_slave_1 left promiscuous mode [ 204.359255][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.393452][ T4371] device bridge_slave_0 left promiscuous mode [ 204.399730][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.444486][ T4371] bond2 (unregistering): (slave batadv1): Releasing active interface [ 204.503076][ T4371] bond2 (unregistering): Released all slaves [ 204.591562][ T4371] bond1 (unregistering): Released all slaves [ 204.958913][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 205.002045][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 205.029632][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.072650][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.206301][ T4371] bond0 (unregistering): Released all slaves [ 205.268315][ T6924] team0: Port device team_slave_1 added [ 205.419822][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.431502][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.465483][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.480517][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.491347][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.522993][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.620667][ T6924] device hsr_slave_0 entered promiscuous mode [ 205.635313][ T5069] Bluetooth: hci4: command 0x041b tx timeout [ 205.649613][ T6924] device hsr_slave_1 entered promiscuous mode [ 205.816552][ T6924] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.837490][ T6924] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.848901][ T6924] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.859056][ T6924] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.963102][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.986581][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.019252][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.041691][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.075726][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.085893][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.098177][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.105316][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.125171][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.139825][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.148683][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.163595][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.170693][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.191883][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.204607][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.219955][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.236136][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.248613][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.268058][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.281931][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.291172][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.311982][ T6924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.329556][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.339798][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.599868][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.608345][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.620307][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.859051][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.873518][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.919999][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.942912][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.951494][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.973258][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.987821][ T6924] device veth0_vlan entered promiscuous mode [ 207.022792][ T6924] device veth1_vlan entered promiscuous mode [ 207.051536][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.065726][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.078053][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.089306][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.104836][ T6924] device veth0_macvtap entered promiscuous mode [ 207.121786][ T6924] device veth1_macvtap entered promiscuous mode [ 207.139980][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.156567][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.169989][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.181793][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.195843][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.205323][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.218625][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.250109][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.261456][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.290951][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.302916][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.314044][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.325133][ T6924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.338782][ T6924] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.348925][ T6924] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.361920][ T6924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.476934][ T6328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.494683][ T6328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.522621][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.572911][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.580797][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.594850][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.702244][ T5971] Bluetooth: hci4: command 0x040f tx timeout [ 207.740894][ T7048] loop6: detected capacity change from 0 to 8 [ 207.793577][ T7048] SQUASHFS error: lzo decompression failed, data probably corrupt [ 207.818313][ T7048] SQUASHFS error: Failed to read block 0x91: -5 [ 207.825662][ T7050] netlink: 'syz.5.720': attribute type 15 has an invalid length. [ 207.855033][ T7048] SQUASHFS error: Unable to read metadata cache entry [8f] [ 207.873790][ T7048] SQUASHFS error: Unable to read inode 0x11f [ 207.951985][ T7050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.096076][ T7053] netlink: 'syz.6.700': attribute type 4 has an invalid length. [ 208.141815][ T7048] netlink: 'syz.6.700': attribute type 4 has an invalid length. [ 209.571024][ T7080] loop6: detected capacity change from 0 to 1024 [ 209.633026][ T7080] EXT4-fs (loop6): Ignoring removed bh option [ 209.696064][ T7080] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 209.828905][ T5973] Bluetooth: hci4: command 0x0419 tx timeout [ 209.865972][ T7084] team0: Port device team_slave_0 removed [ 210.337672][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 210.397358][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 210.894870][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.232367][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.239699][ T6924] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 211.354207][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.361545][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 211.397132][ T7121] 9pnet: Insufficient options for proto=fd [ 211.416231][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.493940][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.500594][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.544520][ T7130] bridge0: port 3(syz_tun) entered blocking state [ 211.577557][ T7130] bridge0: port 3(syz_tun) entered disabled state [ 211.608448][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.623513][ T6924] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 211.652485][ T7130] device syz_tun entered promiscuous mode [ 211.676634][ T7130] bridge0: port 3(syz_tun) entered blocking state [ 211.683782][ T7130] bridge0: port 3(syz_tun) entered forwarding state [ 211.705569][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.717022][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 211.734665][ T7131] netlink: 'syz.1.728': attribute type 15 has an invalid length. [ 211.747793][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.794537][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.804834][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.830325][ T7133] bridge0: port 3(syz_tun) entered learning state [ 211.844632][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.853163][ T7139] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 211.872519][ T6924] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 211.933934][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 211.970575][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.022874][ T6924] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.085593][ T6924] EXT4-fs (loop6): Remounting filesystem read-only [ 212.103452][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.143983][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.437556][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.510689][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.601835][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.701977][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.769773][ T6924] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 214.657449][ T4401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.859768][ T4401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.903336][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 214.951875][ T4401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.044138][ T4401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.700434][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 216.951115][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.970188][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.984574][ T7255] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 216.997583][ T7222] device bridge_slave_0 entered promiscuous mode [ 217.065349][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.079855][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.105261][ T7222] device bridge_slave_1 entered promiscuous mode [ 217.206408][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.236016][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.427881][ T7222] team0: Port device team_slave_0 added [ 217.475455][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 217.500418][ T7222] team0: Port device team_slave_1 added [ 217.687177][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.711754][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.759392][ T7278] loop0: detected capacity change from 0 to 2048 [ 217.771516][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.948811][ T7278] loop0: p1 < > p4 [ 218.088114][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.143096][ T7278] loop0: p4 size 8388608 extends beyond EOD, truncated [ 218.199766][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.564156][ T5971] Bluetooth: hci4: command 0x0409 tx timeout [ 218.571787][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.605970][ T7282] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 218.664452][ T7282] EXT4-fs (loop1): unable to read superblock [ 218.737965][ T7222] device hsr_slave_0 entered promiscuous mode [ 218.755229][ T7222] device hsr_slave_1 entered promiscuous mode [ 218.785875][ T7222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.833562][ T7222] Cannot create hsr debugfs directory [ 218.973986][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 218.991248][ T4860] udevd[4860]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 219.096884][ T4860] udevd[4860]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 219.157243][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 219.183166][ T4401] device hsr_slave_0 left promiscuous mode [ 219.189850][ T4401] device hsr_slave_1 left promiscuous mode [ 219.197160][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.205285][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.973218][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.980784][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.120206][ T4401] device bridge_slave_1 left promiscuous mode [ 220.144540][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.154228][ T4401] device bridge_slave_0 left promiscuous mode [ 220.160751][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.205523][ T4401] device veth1_macvtap left promiscuous mode [ 220.237484][ T4401] device veth0_macvtap left promiscuous mode [ 220.277086][ T4401] device veth1_vlan left promiscuous mode [ 220.312344][ T4401] device veth0_vlan left promiscuous mode [ 220.662425][ T5974] Bluetooth: hci4: command 0x041b tx timeout [ 220.908393][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 220.923770][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 220.937027][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.952332][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.027399][ T4401] bond0 (unregistering): Released all slaves [ 221.289957][ T7348] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 221.350366][ T7348] EXT4-fs (loop3): unable to read superblock [ 221.862408][ T5971] Bluetooth: hci0: command 0x0406 tx timeout [ 222.305239][ T7222] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.362649][ T7222] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.425392][ T7222] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.451707][ T7222] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.755071][ T5971] Bluetooth: hci4: command 0x040f tx timeout [ 223.754882][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.790829][ T7384] loop0: detected capacity change from 0 to 256 [ 223.817882][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.829221][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.912841][ T7384] FAT-fs (loop0): Directory bread(block 64) failed [ 223.944654][ T7389] fuse: Bad value for 'fd' [ 223.949443][ T7384] FAT-fs (loop0): Directory bread(block 65) failed [ 224.000190][ T7384] FAT-fs (loop0): Directory bread(block 66) failed [ 224.058292][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.082221][ T7384] FAT-fs (loop0): Directory bread(block 67) failed [ 224.088984][ T7384] FAT-fs (loop0): Directory bread(block 68) failed [ 224.203195][ T7384] FAT-fs (loop0): Directory bread(block 69) failed [ 224.473961][ T7384] FAT-fs (loop0): Directory bread(block 70) failed [ 224.560061][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.688154][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.727688][ T7384] FAT-fs (loop0): Directory bread(block 71) failed [ 224.741335][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.748520][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.805458][ T7384] FAT-fs (loop0): Directory bread(block 72) failed [ 224.830794][ T5973] Bluetooth: hci4: command 0x0419 tx timeout [ 224.840461][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.849160][ T7384] FAT-fs (loop0): Directory bread(block 73) failed [ 224.928439][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 225.008481][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.033006][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.063638][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.070904][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.128414][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.149599][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.208339][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.228940][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.263981][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.324582][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.355380][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.382620][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.418476][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.438626][ T7406] netlink: 'syz.0.790': attribute type 3 has an invalid length. [ 226.448936][ T7406] netlink: 72 bytes leftover after parsing attributes in process `syz.0.790'. [ 226.473306][ T7222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.624651][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.742339][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.750949][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.824460][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 228.284933][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.363761][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.382357][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.409598][ T7434] loop0: detected capacity change from 0 to 4096 [ 229.600397][ T7434] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=1) [ 229.761349][ T7449] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 229.889878][ T7434] loop0: detected capacity change from 0 to 2048 [ 229.951514][ T7434] UDF-fs: bad mount option "uid@" or missing value [ 229.974613][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.997651][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.102602][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.111967][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.147986][ T7222] device veth0_vlan entered promiscuous mode [ 230.186870][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.206535][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.257767][ T7434] loop0: detected capacity change from 0 to 4096 [ 230.277080][ T7222] device veth1_vlan entered promiscuous mode [ 230.339238][ T7434] ntfs3: Unknown parameter 'nfig configfs rw' [ 230.456996][ T7222] device veth0_macvtap entered promiscuous mode [ 230.582939][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.593254][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.611286][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.660071][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.684963][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.711781][ T7222] device veth1_macvtap entered promiscuous mode [ 230.854712][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.892244][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.949339][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.986550][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.013039][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.057765][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.099861][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.141529][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.185946][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.232207][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.255855][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.304217][ T7222] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.335979][ T7222] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.360900][ T7222] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.370363][ T7484] fuse: Bad value for 'fd' [ 231.380244][ T7222] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.622340][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 232.622357][ T26] audit: type=1326 audit(2000000126.670:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 232.846262][ T26] audit: type=1326 audit(2000000126.670:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 232.922351][ T26] audit: type=1326 audit(2000000126.670:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 233.023518][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.058429][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.131690][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.170658][ T26] audit: type=1326 audit(2000000126.680:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 233.193749][ T26] audit: type=1326 audit(2000000126.680:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f537669684e code=0x7ffc0000 [ 233.244105][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.283536][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.268446][ T26] audit: type=1326 audit(2000000126.680:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 234.381063][ T7514] loop0: detected capacity change from 0 to 256 [ 234.389731][ T26] audit: type=1326 audit(2000000126.680:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 234.414543][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.498367][ T26] audit: type=1326 audit(2000000126.680:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 234.612183][ T26] audit: type=1326 audit(2000000126.680:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 234.762147][ T26] audit: type=1326 audit(2000000126.680:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 235.098166][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.815'. [ 235.168021][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.815'. [ 237.054813][ T7307] bridge0: port 3(syz_tun) entered disabled state [ 237.076707][ T5335] Bluetooth: hci5: command 0x0409 tx timeout [ 237.117007][ T7307] device syz_tun left promiscuous mode [ 237.122901][ T7307] bridge0: port 3(syz_tun) entered disabled state [ 237.150922][ T7545] lo speed is unknown, defaulting to 1000 [ 237.157344][ T7545] lo speed is unknown, defaulting to 1000 [ 237.166362][ T7545] lo speed is unknown, defaulting to 1000 [ 237.178315][ T7545] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 237.192427][ T7545] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 237.238323][ T7545] lo speed is unknown, defaulting to 1000 [ 237.245915][ T7545] lo speed is unknown, defaulting to 1000 [ 237.252769][ T7545] lo speed is unknown, defaulting to 1000 [ 237.259551][ T7545] lo speed is unknown, defaulting to 1000 [ 237.266453][ T7545] lo speed is unknown, defaulting to 1000 [ 237.274174][ T7545] lo speed is unknown, defaulting to 1000 [ 237.471162][ T4399] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.526486][ T7523] chnl_net:caif_netlink_parms(): no params data found [ 237.699467][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.729092][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.782384][ T7523] device bridge_slave_0 entered promiscuous mode [ 237.790866][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.798879][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.807374][ T7523] device bridge_slave_1 entered promiscuous mode [ 237.955078][ T4399] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.068600][ T4399] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.112338][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.157693][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.218903][ T4399] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.290663][ T7523] team0: Port device team_slave_0 added [ 238.350626][ T7523] team0: Port device team_slave_1 added [ 238.510235][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.522176][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.592612][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.651210][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.672167][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.761733][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.968100][ T7523] device hsr_slave_0 entered promiscuous mode [ 238.989034][ T7523] device hsr_slave_1 entered promiscuous mode [ 239.142235][ T5973] Bluetooth: hci5: command 0x041b tx timeout [ 240.541524][ T7597] mmap: syz.0.834 (7597) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 240.605409][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.681352][ T7610] bond2: (slave batadv_slave_1): Enslaving as a backup interface with a down link [ 241.828525][ T5973] Bluetooth: hci5: command 0x040f tx timeout [ 242.023395][ T7625] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 242.119998][ T7523] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.807921][ T7523] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 242.839281][ T7523] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 242.904423][ T7523] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.102505][ T7651] netlink: 'syz.7.839': attribute type 1 has an invalid length. [ 243.231063][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.279702][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.296456][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.354817][ T7523] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.413244][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.431644][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.494056][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.501167][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.554164][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.600171][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.639355][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.646642][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.684077][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.733841][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.789133][ T4399] device hsr_slave_0 left promiscuous mode [ 243.847310][ T4399] device hsr_slave_1 left promiscuous mode [ 243.861377][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.872182][ T5069] Bluetooth: hci5: command 0x0419 tx timeout [ 243.908549][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.928341][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.981967][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.007915][ T4399] device bridge_slave_1 left promiscuous mode [ 244.035036][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.066305][ T4399] device bridge_slave_0 left promiscuous mode [ 244.085806][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.181736][ T4399] device veth1_macvtap left promiscuous mode [ 244.207789][ T4399] device veth0_macvtap left promiscuous mode [ 244.236851][ T4399] device veth1_vlan left promiscuous mode [ 244.264423][ T4399] device veth0_vlan left promiscuous mode [ 244.511183][ T7674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.561340][ T7675] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.046618][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 245.101302][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.187369][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.504042][ T4399] bond0 (unregistering): Released all slaves [ 245.579238][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.599147][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.665272][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.693492][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.752911][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.798612][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.817117][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.856996][ T7523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.889643][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.937220][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.975480][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.984679][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.146963][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.166221][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.181287][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.524491][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.538826][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.561653][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.575587][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.594674][ T7523] device veth0_vlan entered promiscuous mode [ 246.609244][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.617511][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.630919][ T7523] device veth1_vlan entered promiscuous mode [ 246.661436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.682940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.701576][ T7523] device veth0_macvtap entered promiscuous mode [ 246.716464][ T7523] device veth1_macvtap entered promiscuous mode [ 246.756644][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.782673][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.803668][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.811165][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.828369][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.837408][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.851887][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.866025][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.877650][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.891297][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.901668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.915577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.933946][ T7523] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.947560][ T7523] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.957212][ T7523] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.973766][ T7523] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.084575][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.097202][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.107479][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.133753][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.141642][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.162039][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.328677][ T7721] loop8: detected capacity change from 0 to 1024 [ 248.212783][ T7754] raw_sendmsg: syz.0.858 forgot to set AF_INET. Fix it! [ 250.814275][ T7792] syz.7.851 (7792): drop_caches: 2 [ 251.354671][ T7806] overlayfs: failed to clone upperpath [ 253.411622][ T7838] netlink: 'syz.1.871': attribute type 16 has an invalid length. [ 253.419893][ T7838] netlink: 'syz.1.871': attribute type 17 has an invalid length. [ 253.428804][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 253.437637][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 253.446804][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 253.471296][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 253.510837][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 253.561138][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 253.582368][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 253.611506][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 253.653747][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 253.676582][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 253.695575][ T7838] device syz_tun left promiscuous mode [ 253.702624][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 253.711883][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 253.736513][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.744412][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.766873][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.791511][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 253.819037][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.856960][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 253.900329][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 253.928639][ T7838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.048003][ T7855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.089038][ T7855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.118053][ T7855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.142266][ T7855] device bridge_slave_0 left promiscuous mode [ 254.148773][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.269984][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.276486][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.289901][ T7855] device bridge_slave_1 left promiscuous mode [ 256.330658][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.363363][ T7855] bond0: (slave bond_slave_0): Releasing backup interface [ 256.381640][ T7855] bond0: (slave bond_slave_1): Releasing backup interface [ 256.482997][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.507446][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 256.617380][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.697842][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.743134][ T7898] sock: sock_set_timeout: `syz.1.887' (pid 7898) tries to set negative timeout [ 256.791843][ T7894] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 256.840975][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.7.888'. [ 257.327964][ T7925] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 258.091761][ T7930] loop8: detected capacity change from 0 to 1024 [ 258.226255][ T7929] lo speed is unknown, defaulting to 1000 [ 258.239122][ T7935] loop0: detected capacity change from 0 to 16 [ 258.309762][ T7930] hfsplus: invalid file type 0120411 for inode 2 [ 258.328873][ T7935] erofs: (device loop0): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 258.348812][ T7930] hfsplus: failed to load root directory [ 258.414951][ T5972] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 258.703756][ T7952] binder_alloc: 7950: binder_alloc_buf, no vma [ 258.837085][ T7961] loop0: detected capacity change from 0 to 128 [ 258.875759][ T5972] usb 8-1: config 0 has no interfaces? [ 259.079099][ T7961] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.135966][ T7961] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.840069][ T7976] netlink: 'syz.8.910': attribute type 1 has an invalid length. [ 259.879115][ T5972] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 259.890115][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.909965][ T5972] usb 8-1: Product: syz [ 259.914374][ T5972] usb 8-1: Manufacturer: syz [ 259.919021][ T5972] usb 8-1: SerialNumber: syz [ 259.934204][ T5972] usb 8-1: config 0 descriptor?? [ 259.967745][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.8.910'. [ 260.249997][ T7976] team0: Port device team_slave_1 removed [ 260.537357][ T7929] device veth0_vlan left promiscuous mode [ 260.544580][ T7929] device veth0_vlan entered promiscuous mode [ 260.613907][ T4262] usb 8-1: USB disconnect, device number 2 [ 261.102219][ T4271] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.255974][ T8047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 261.438243][ T6328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.472684][ T6328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.522337][ T4271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.577385][ T4271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.626131][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.652011][ T4271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.691186][ T8062] netlink: 'syz.7.931': attribute type 1 has an invalid length. [ 261.709696][ T4271] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.729153][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.759630][ T4271] usb 1-1: config 0 descriptor?? [ 261.780194][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.931'. [ 261.978583][ T8075] loop7: detected capacity change from 0 to 512 [ 262.021060][ T8076] loop8: detected capacity change from 0 to 2048 [ 262.089948][ T8075] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.137455][ T8076] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.147223][ T8075] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.246363][ T8075] EXT4-fs error (device loop7): ext4_ext_remove_space:2929: inode #15: comm syz.7.934: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 262.280197][ T4271] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 262.288226][ T8075] EXT4-fs error (device loop7): ext4_evict_inode:293: comm syz.7.934: couldn't truncate inode 15 (err -117) [ 262.341105][ T8084] netlink: 182 bytes leftover after parsing attributes in process `syz.4.936'. [ 262.467389][ T8075] overlayfs: failed to resolve './file0': -2 [ 262.506317][ T4271] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 262.599208][ T4271] usb 1-1: USB disconnect, device number 6 [ 263.649876][ T8107] fido_id[8107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.755520][ T8117] loop8: detected capacity change from 0 to 256 [ 265.010630][ T8140] loop7: detected capacity change from 0 to 256 [ 265.103589][ T7523] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 265.111927][ T7523] FAT-fs (loop8): Filesystem has been set read-only [ 265.170464][ T7523] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 265.199953][ T8129] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 265.299741][ T8144] device veth0 entered promiscuous mode [ 265.318194][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 265.731140][ T8165] loop0: detected capacity change from 0 to 512 [ 265.891905][ T8165] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.930821][ T8165] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.075184][ T8165] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.953: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 266.202247][ T8165] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.953: couldn't truncate inode 15 (err -117) [ 266.419565][ T4188] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 266.531355][ T4188] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 266.768663][ T8191] lo speed is unknown, defaulting to 1000 [ 266.939980][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 267.489375][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.552237][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.597922][ T8191] device bridge_slave_0 entered promiscuous mode [ 267.637380][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.682322][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.725038][ T8191] device bridge_slave_1 entered promiscuous mode [ 267.830914][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.899800][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.071645][ T8191] team0: Port device team_slave_0 added [ 268.108524][ T8191] team0: Port device team_slave_1 added [ 268.313898][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.593649][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.752225][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 269.076959][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.090377][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.097404][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.135071][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.320614][ T8191] device hsr_slave_0 entered promiscuous mode [ 269.344493][ T8191] device hsr_slave_1 entered promiscuous mode [ 269.367826][ T8191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.404408][ T8191] Cannot create hsr debugfs directory [ 269.796238][ T8191] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 269.824300][ T8191] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 269.863578][ T8191] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 269.905340][ T8191] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 270.015043][ T4399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.136826][ T4399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.245529][ T4399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.265230][ T8276] lo speed is unknown, defaulting to 1000 [ 270.281973][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.296552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.315386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.359542][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.384889][ T4399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.445140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.463086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.486309][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.493499][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.511665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.535243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.552904][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.560072][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.631547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.644306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.681478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.757096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.780427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.819114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.827687][ T5335] Bluetooth: hci3: command 0x041b tx timeout [ 270.848193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.889929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.903364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.923265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.942953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.951572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.994025][ T4399] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.025712][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.099337][ T4399] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.446784][ T4399] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.731135][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 272.000270][ T4399] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.168761][ T8305] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 272.193324][ T5334] Bluetooth: hci2: command 0x0409 tx timeout [ 272.214685][ T8305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.235906][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.243707][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.251877][ T8276] device bridge_slave_0 entered promiscuous mode [ 272.323547][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.341514][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.350545][ T8276] device bridge_slave_1 entered promiscuous mode [ 272.371061][ T8305] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 272.430054][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.454945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.472603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.507773][ T8322] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 272.524405][ T8317] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 272.533770][ T8317] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 272.655752][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.674161][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.806169][ T8337] tipc: Enabling of bearer rejected, failed to enable media [ 272.846011][ T8276] team0: Port device team_slave_0 added [ 272.905294][ T8276] team0: Port device team_slave_1 added [ 272.919655][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 272.998323][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.032629][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.081631][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.100747][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.122159][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.184515][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.384957][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.401025][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.483048][ T8276] device hsr_slave_0 entered promiscuous mode [ 273.491780][ T8276] device hsr_slave_1 entered promiscuous mode [ 273.512483][ T8276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.520349][ T8276] Cannot create hsr debugfs directory [ 273.550190][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.586840][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.643277][ T8191] device veth0_vlan entered promiscuous mode [ 273.674970][ T8191] device veth1_vlan entered promiscuous mode [ 273.756021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.802958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.100059][ T8191] device veth0_macvtap entered promiscuous mode [ 274.135737][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.164024][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.183754][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.211197][ T8191] device veth1_macvtap entered promiscuous mode [ 274.262466][ T5334] Bluetooth: hci2: command 0x041b tx timeout [ 274.303591][ T8391] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 274.490824][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.511040][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.530750][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.557414][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.576193][ T8403] tipc: Failed to remove unknown binding: 66,0,0/0:3321423267/3321423269 [ 274.597993][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.607973][ T8403] tipc: Failed to remove unknown binding: 66,0,0/0:3321423267/3321423268 [ 274.645243][ T8406] tipc: Failed to remove unknown binding: 66,0,0/0:3321423267/3321423269 [ 274.689616][ T8406] tipc: Failed to remove unknown binding: 66,0,0/0:3321423267/3321423268 [ 274.808154][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.822953][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.839187][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.569625][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 275.599394][ T8417] loop7: detected capacity change from 0 to 128 [ 275.667391][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 275.667406][ T26] audit: type=1800 audit(2000000169.760:176): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.996" name="bus" dev="loop7" ino=1048623 res=0 errno=0 [ 275.717653][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.739907][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.760695][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.779074][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.799170][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.870958][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 276.983659][ T8191] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.993443][ T8191] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.003102][ T8191] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.013218][ T8191] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.280861][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1003'. [ 277.349874][ T8447] netlink: 'syz.7.1003': attribute type 5 has an invalid length. [ 277.383175][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1003'. [ 277.456729][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.499814][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.538854][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.609082][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.611314][ T8276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.633030][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.815514][ T8276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.825217][ T8276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.835282][ T8276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.852308][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.927263][ T8482] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 278.933411][ T5335] Bluetooth: hci2: command 0x0419 tx timeout [ 278.952576][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.998402][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.010672][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.055146][ T8484] tipc: Failed to remove unknown binding: 66,0,0/0:2719955934/2719955936 [ 279.066790][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.077198][ T8484] tipc: Failed to remove unknown binding: 66,0,0/0:2719955934/2719955935 [ 279.094900][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.111091][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.121435][ T8484] tipc: Failed to remove unknown binding: 66,0,0/0:2719955934/2719955936 [ 279.137580][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.144771][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.159983][ T8484] tipc: Failed to remove unknown binding: 66,0,0/0:2719955934/2719955935 [ 279.179951][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.246228][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.280667][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.322777][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.330043][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.356873][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.368627][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.387676][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.415053][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.428948][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.457471][ T4399] device hsr_slave_0 left promiscuous mode [ 279.470040][ T4399] device hsr_slave_1 left promiscuous mode [ 279.498404][ T4399] device hsr_slave_0 left promiscuous mode [ 279.511796][ T4399] device hsr_slave_1 left promiscuous mode [ 279.526992][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.544554][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.561689][ T4399] device bridge_slave_1 left promiscuous mode [ 279.576219][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.609656][ T4399] device bridge_slave_0 left promiscuous mode [ 279.617225][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.669566][ T4399] device veth1_macvtap left promiscuous mode [ 279.687325][ T4399] device veth0_macvtap left promiscuous mode [ 279.706149][ T4399] device veth1_vlan left promiscuous mode [ 279.720033][ T4399] device veth0_vlan left promiscuous mode [ 279.741137][ T4399] device veth1_macvtap left promiscuous mode [ 279.749633][ T4399] device veth0_macvtap left promiscuous mode [ 279.762596][ T4399] device veth1_vlan left promiscuous mode [ 279.775334][ T4399] device veth0_vlan left promiscuous mode [ 280.399705][ T8501] loop7: detected capacity change from 0 to 4096 [ 280.453345][ T8501] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 280.786516][ T4399] bond0 (unregistering): Released all slaves [ 280.884397][ T4399] bond1 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 280.918342][ T4399] bond1 (unregistering): Released all slaves [ 281.937043][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 281.953141][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.984248][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.193194][ T4399] bond0 (unregistering): Released all slaves [ 282.270521][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.293063][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.302023][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.322817][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.348242][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.372868][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.395524][ T8276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.414081][ T4271] lo speed is unknown, defaulting to 1000 [ 282.426298][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1020'. [ 282.986250][ T8533] overlayfs: failed to resolve './file1': -2 [ 283.498257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.512337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.556382][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.660880][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.681971][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.752647][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.776359][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.812832][ T8276] device veth0_vlan entered promiscuous mode [ 283.856616][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.288227][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.361822][ T8554] binder: 8553:8554 ioctl c0306201 200000000480 returned -14 [ 285.918020][ T8276] device veth1_vlan entered promiscuous mode [ 286.075638][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1031'. [ 286.108988][ T8560] device ip6gre1 entered promiscuous mode [ 286.161325][ T8276] device veth0_macvtap entered promiscuous mode [ 286.196496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.229056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.267539][ T8276] device veth1_macvtap entered promiscuous mode [ 286.304191][ T8563] netlink: 'syz.7.1031': attribute type 6 has an invalid length. [ 286.323419][ T8563] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1031'. [ 286.365692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.390862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.449372][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.571455][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.591812][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.614563][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.642864][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.664057][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.681102][ T6328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.701341][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.724128][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.736577][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.753602][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.770889][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.796629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.811927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.884658][ T8276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.905638][ T8276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.925228][ T8276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.942179][ T8276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.114195][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.138609][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.164425][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.179270][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.266695][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.336892][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.537669][ T8600] loop7: detected capacity change from 0 to 128 [ 288.698348][ T8600] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.709155][ T8600] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.953265][ T8661] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.154817][ T8701] loop7: detected capacity change from 0 to 128 [ 294.465190][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1075'. [ 294.593289][ T8720] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.602192][ T8720] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.610936][ T8720] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.619733][ T8720] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.858736][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 294.876906][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.890037][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.004240][ T8728] netlink: 'syz.7.1076': attribute type 16 has an invalid length. [ 295.038432][ T8728] netlink: 'syz.7.1076': attribute type 17 has an invalid length. [ 295.129705][ T8728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.147264][ T8728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.190337][ T8728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.258178][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1077'. [ 295.305089][ T8731] device ip6gre1 entered promiscuous mode [ 295.373333][ T8737] netlink: 'syz.1.1077': attribute type 6 has an invalid length. [ 295.401987][ T8737] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1077'. [ 295.435175][ T8748] device syzkaller0 entered promiscuous mode [ 295.822423][ T8760] loop7: detected capacity change from 0 to 32768 [ 295.888504][ T8760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1082 (8760) [ 296.843397][ T8760] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 296.852908][ T8760] BTRFS info (device loop7): using free space tree [ 296.859483][ T8760] BTRFS info (device loop7): has skinny extents [ 296.920348][ T26] audit: type=1326 audit(2000000191.010:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 296.972113][ T26] audit: type=1326 audit(2000000191.040:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 297.002124][ T26] audit: type=1326 audit(2000000191.040:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 297.053060][ T26] audit: type=1326 audit(2000000191.040:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 297.145148][ T26] audit: type=1326 audit(2000000191.040:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 297.185031][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1089'. [ 297.324641][ T26] audit: type=1326 audit(2000000191.040:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537669684e code=0x7ffc0000 [ 297.369202][ T26] audit: type=1326 audit(2000000191.040:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f537669684e code=0x7ffc0000 [ 297.393541][ T26] audit: type=1326 audit(2000000191.040:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 297.416567][ T26] audit: type=1326 audit(2000000191.040:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 298.476423][ T26] audit: type=1326 audit(2000000191.040:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8776 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f53766d5f79 code=0x7ffc0000 [ 298.552153][ T8792] device veth3 entered promiscuous mode [ 298.587172][ T8760] BTRFS error (device loop7): open_ctree failed: -22 [ 298.657735][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1092'. [ 301.574291][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (4180) [ 301.859613][ T8845] loop2: detected capacity change from 0 to 16 [ 302.019855][ T8845] erofs: (device loop2): mounted with root inode @ nid 36. [ 302.122241][ T4271] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 303.093155][ T4271] usb 8-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 303.106169][ T4271] usb 8-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 303.122093][ T4271] usb 8-1: Product: syz [ 303.142577][ T4271] usb 8-1: Manufacturer: syz [ 303.147232][ T4271] usb 8-1: SerialNumber: syz [ 303.228998][ T4271] usb 8-1: config 0 descriptor?? [ 304.554780][ T8843] syz.7.1097 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 304.796046][ T8838] usb 8-1: USB disconnect, device number 3 [ 307.062183][ T4342] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.480443][ T4342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.619048][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1120'. [ 308.474436][ T4342] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 308.513471][ T4342] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 308.558849][ T4342] usb 3-1: config 63 has no interface number 0 [ 309.422833][ T4342] usb 3-1: config 63 interface 66 has no altsetting 0 [ 309.652379][ T4342] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 309.671717][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.690908][ T4342] usb 3-1: Product: syz [ 309.709415][ T4342] usb 3-1: Manufacturer: syz [ 309.721104][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1125'. [ 309.740430][ T4342] usb 3-1: SerialNumber: syz [ 309.802233][ T4342] usb 3-1: can't set config #63, error -71 [ 309.811810][ T4342] usb 3-1: USB disconnect, device number 4 [ 310.142208][ T4262] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 310.512396][ T4262] usb 8-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 310.528228][ T4262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.548181][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'. [ 310.562390][ T4262] usb 8-1: config 0 descriptor?? [ 310.611021][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.000965][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.249920][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.398772][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.408726][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.419607][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.430239][ T9009] device macvlan2 entered promiscuous mode [ 311.652546][ T9020] loop2: detected capacity change from 0 to 256 [ 311.663730][ T9022] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1130'. [ 311.690147][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.697784][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.722774][ T9020] exfat: Deprecated parameter 'namecase' [ 311.760489][ T9027] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1130'. [ 311.780270][ T9020] exfat: Deprecated parameter 'namecase' [ 312.317734][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.324928][ T9027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.332516][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.339626][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.363919][ T9027] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1130'. [ 312.402230][ T4262] usbhid 8-1:0.0: can't add hid device: -71 [ 312.419165][ T4262] usbhid: probe of 8-1:0.0 failed with error -71 [ 312.442146][ T9020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 312.476787][ T4262] usb 8-1: USB disconnect, device number 4 [ 312.566546][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.573832][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.914615][ T9059] 9pnet: p9_client_clunk (9059): Trying to clunk with invalid fid [ 314.965836][ T9059] CPU: 0 PID: 9059 Comm: syz.2.1138 Not tainted syzkaller #0 [ 314.973282][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 314.983499][ T9059] Call Trace: [ 314.986827][ T9059] [ 314.989796][ T9059] dump_stack_lvl+0x188/0x250 [ 314.994683][ T9059] ? __rwlock_init+0x140/0x140 [ 314.999498][ T9059] ? show_regs_print_info+0x20/0x20 [ 315.004752][ T9059] ? load_image+0x400/0x400 [ 315.009310][ T9059] ? v9fs_fid_find+0x2d1/0x320 [ 315.014129][ T9059] p9_client_clunk+0x2b3/0x380 [ 315.018944][ T9059] v9fs_statfs+0x1b7/0x380 [ 315.023407][ T9059] ? v9fs_drop_inode+0x130/0x130 [ 315.028385][ T9059] ? ovl_mount_dir+0x1f6/0x2b0 [ 315.033186][ T9059] ? kfree+0xef/0x2a0 [ 315.037206][ T9059] vfs_statfs+0x13d/0x2c0 [ 315.041593][ T9059] ovl_get_upper+0x1c0/0x600 [ 315.046236][ T9059] ? ovl_fill_super+0x2a30/0x2a30 [ 315.051359][ T9059] ovl_fill_super+0x160c/0x2a30 [ 315.056334][ T9059] ? ovl_mount+0x30/0x30 [ 315.060636][ T9059] ? sget+0x427/0x440 [ 315.064675][ T9059] ? free_anon_bdev+0x20/0x20 [ 315.069394][ T9059] ? ovl_mount+0x30/0x30 [ 315.073679][ T9059] mount_nodev+0x52/0xe0 [ 315.078007][ T9059] legacy_get_tree+0xe6/0x180 [ 315.082730][ T9059] ? virtio_fs_zero_page_range+0x120/0x120 [ 315.088582][ T9059] vfs_get_tree+0x88/0x270 [ 315.093047][ T9059] do_new_mount+0x24a/0xa40 [ 315.097599][ T9059] __se_sys_mount+0x2e3/0x3d0 [ 315.102320][ T9059] ? __x64_sys_mount+0xc0/0xc0 [ 315.107151][ T9059] ? lockdep_hardirqs_on+0x94/0x140 [ 315.112395][ T9059] ? __x64_sys_mount+0x1c/0xc0 [ 315.117214][ T9059] do_syscall_64+0x4c/0xa0 [ 315.121674][ T9059] ? clear_bhb_loop+0x30/0x80 [ 315.126392][ T9059] ? clear_bhb_loop+0x30/0x80 [ 315.131110][ T9059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.137058][ T9059] RIP: 0033:0x7f97ce511f79 [ 315.141514][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.161274][ T9059] RSP: 002b:00007f97cc76c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.169754][ T9059] RAX: ffffffffffffffda RBX: 00007f97ce78bfa0 RCX: 00007f97ce511f79 [ 315.177780][ T9059] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 315.185792][ T9059] RBP: 00007f97ce5a87e0 R08: 0000200000000680 R09: 0000000000000000 [ 315.193808][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.201823][ T9059] R13: 00007f97ce78c038 R14: 00007f97ce78bfa0 R15: 00007ffcae1977e8 [ 315.209851][ T9059] [ 315.241526][ T9067] netlink: 'syz.9.1140': attribute type 1 has an invalid length. [ 315.289053][ T9059] overlayfs: statfs failed on './file0' [ 315.918397][ T9072] bond1: (slave gretap1): making interface the new active one [ 315.928648][ T9077] overlayfs: failed to clone upperpath [ 315.934951][ T9072] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 315.957508][ T9077] overlayfs: failed to clone upperpath [ 316.220598][ T9067] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 317.053620][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1147'. [ 317.066189][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066299][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.211488][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1147'. [ 317.322128][ T9097] netlink: 'syz.7.1148': attribute type 21 has an invalid length. [ 317.330295][ T9097] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1148'. [ 317.419135][ T9097] netlink: 'syz.7.1148': attribute type 1 has an invalid length. [ 317.578491][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1148'. [ 318.264805][ T9108] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 319.737823][ T9127] syz.7.1152 (9127): drop_caches: 2 [ 322.326515][ T9156] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 322.866384][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.903413][ T9156] device bridge_slave_1 left promiscuous mode [ 322.912457][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.930091][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 322.930107][ T26] audit: type=1800 audit(2000000217.020:201): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1158" name="bus" dev="ramfs" ino=51134 res=0 errno=0 [ 322.997634][ T9156] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 323.119901][ T9183] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 323.148546][ T9183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.188616][ T9186] bond4: (slave gretap1): making interface the new active one [ 323.210818][ T9186] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 323.222829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 324.560104][ T4240] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 324.730410][ T9216] xt_hashlimit: size too large, truncated to 1048576 [ 324.749970][ T9216] xt_hashlimit: invalid rate [ 325.002381][ T4240] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 325.028978][ T4240] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.432438][ T4240] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.534383][ T4240] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.668516][ T4240] usb 3-1: Product: syz [ 325.733994][ T4240] usb 3-1: Manufacturer: syz [ 325.795300][ T4240] usb 3-1: SerialNumber: syz [ 326.044710][ T4240] usb 3-1: config 0 descriptor?? [ 326.105967][ T4240] usb 3-1: selecting invalid altsetting 0 [ 326.376502][ T4240] usb 3-1: USB disconnect, device number 5 [ 326.418688][ T9257] loop9: detected capacity change from 0 to 1024 [ 326.678868][ T9257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.694498][ T9273] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1190'. [ 327.755971][ T9273] .30ªX¹¦D: renamed from gretap0 [ 327.974291][ T9273] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 329.527620][ T4240] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 330.121081][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 330.573570][ T9312] team0: Port device syz_tun removed [ 331.022443][ T4240] usb 3-1: unable to get BOS descriptor or descriptor too short [ 331.292295][ T4240] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 331.323521][ T4240] usb 3-1: can't read configurations, error -71 [ 331.582770][ T9340] netlink: 'syz.9.1204': attribute type 39 has an invalid length. [ 378.507741][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514161][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.272020][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 438.279066][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1214/1:b..l [ 438.287850][ C1] (detected by 1, t=10502 jiffies, g=36093, q=291) [ 438.294466][ C1] task:kworker/u4:4 state:R running task stack:22736 pid: 1214 ppid: 2 flags:0x00004000 [ 438.307241][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 438.315104][ C1] Call Trace: [ 438.318414][ C1] [ 438.321378][ C1] __schedule+0x11ef/0x43c0 [ 438.325950][ C1] ? release_firmware_map_entry+0x190/0x190 [ 438.331884][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 438.337204][ C1] preempt_schedule_irq+0xbb/0x160 [ 438.342366][ C1] ? __cond_resched+0xd0/0xd0 [ 438.347077][ C1] ? rcu_is_watching+0x11/0xa0 [ 438.351878][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 438.357949][ C1] irqentry_exit+0x63/0x70 [ 438.362418][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 438.368440][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 438.373769][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 438.393417][ C1] RSP: 0018:ffffc90004db7900 EFLAGS: 00000206 [ 438.399520][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7a7e30e1f723b700 [ 438.407617][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f740 [ 438.415619][ C1] RBP: ffffc90004db7a20 R08: dffffc0000000000 R09: 1ffffffff203a418 [ 438.423630][ C1] R10: dffffc0000000000 R11: fffffbfff203a419 R12: ffffffff8c31eaa0 [ 438.431632][ C1] R13: 1ffff920009b6f2c R14: 0000000000000246 R15: dffffc0000000000 [ 438.439664][ C1] ? rcu_lock_release+0x5/0x20 [ 438.444463][ C1] ? read_lock_is_recursive+0x10/0x10 [ 438.449962][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 438.455023][ C1] ? batadv_iv_ogm_queue_add+0xcf0/0xcf0 [ 438.460694][ C1] rcu_lock_acquire+0x2a/0x30 [ 438.465400][ C1] ? rcu_lock_acquire+0x5/0x30 [ 438.470199][ C1] batadv_iv_ogm_schedule+0x432/0xec0 [ 438.475620][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 438.482938][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 438.488523][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 438.495591][ C1] process_one_work+0x85f/0x1010 [ 438.500590][ C1] ? worker_detach_from_pool+0x240/0x240 [ 438.506259][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 438.511580][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 438.516749][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 438.522334][ C1] ? wq_worker_running+0x97/0x170 [ 438.527394][ C1] worker_thread+0xaa6/0x1290 [ 438.532133][ C1] kthread+0x436/0x520 [ 438.536229][ C1] ? rcu_lock_release+0x20/0x20 [ 438.541106][ C1] ? kthread_blkcg+0xd0/0xd0 [ 438.545734][ C1] ret_from_fork+0x1f/0x30 [ 438.550207][ C1] [ 438.553252][ C1] rcu: rcu_preempt kthread starved for 9723 jiffies! g36093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 438.564388][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 438.574381][ C1] rcu: RCU grace-period kthread stack dump: [ 438.580284][ C1] task:rcu_preempt state:R running task stack:27024 pid: 15 ppid: 2 flags:0x00004000 [ 438.591090][ C1] Call Trace: [ 438.594431][ C1] [ 438.597395][ C1] __schedule+0x11ef/0x43c0 [ 438.601963][ C1] ? release_firmware_map_entry+0x190/0x190 [ 438.607891][ C1] ? __mod_timer+0x91e/0xd00 [ 438.612517][ C1] schedule+0x11b/0x1e0 [ 438.616704][ C1] schedule_timeout+0x184/0x2d0 [ 438.621587][ C1] ? console_conditional_schedule+0x40/0x40 [ 438.627506][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 438.633423][ C1] ? update_process_times+0x200/0x200 [ 438.638832][ C1] ? prepare_to_swait_event+0x331/0x350 [ 438.644417][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 438.649306][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 438.654535][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 438.660721][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 438.665529][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 438.670758][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 438.675997][ C1] rcu_gp_kthread+0x9b/0x370 [ 438.680621][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 438.686656][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 438.691806][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 438.697811][ C1] ? __kthread_parkme+0x157/0x1b0 [ 438.702886][ C1] kthread+0x436/0x520 [ 438.707012][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 438.712160][ C1] ? kthread_blkcg+0xd0/0xd0 [ 438.716781][ C1] ret_from_fork+0x1f/0x30 [ 438.721244][ C1] [ 438.724287][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 438.730629][ C1] NMI backtrace for cpu 1 [ 438.734975][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 438.742124][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 438.752195][ C1] Call Trace: [ 438.755508][ C1] [ 438.758380][ C1] dump_stack_lvl+0x188/0x250 [ 438.763111][ C1] ? show_regs_print_info+0x20/0x20 [ 438.768345][ C1] ? load_image+0x400/0x400 [ 438.772883][ C1] ? irq_work_queue+0xbf/0x140 [ 438.777680][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 438.782659][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 438.788844][ C1] ? _printk+0xda/0x130 [ 438.793039][ C1] ? cpu_online+0x1d/0x30 [ 438.797399][ C1] ? load_image+0x400/0x400 [ 438.801933][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 438.808162][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 438.814172][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 438.820359][ C1] print_other_cpu_stall+0x1110/0x1270 [ 438.825853][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 438.830819][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 438.836147][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 438.841377][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 438.846258][ C1] ? account_process_tick+0x22a/0x3a0 [ 438.851661][ C1] update_process_times+0x193/0x200 [ 438.856895][ C1] tick_sched_timer+0x37d/0x560 [ 438.861775][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 438.867349][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 438.872597][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 438.877744][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 438.883855][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 438.888848][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 438.894862][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 438.900538][ C1] [ 438.903515][ C1] [ 438.906474][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 438.912486][ C1] RIP: 0010:default_idle+0xb/0x10 [ 438.917546][ C1] Code: b7 48 89 df e8 16 c5 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 77 66 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 438.937178][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 438.943274][ C1] RAX: 773705b57f885e00 RBX: ffff88813fe68000 RCX: 773705b57f885e00 [ 438.951268][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f740 [ 438.959265][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 438.967348][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff11027fcd000 [ 438.975344][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920001acfb4 [ 438.983368][ C1] default_idle_call+0x81/0xc0 [ 438.988173][ C1] do_idle+0x21f/0x580 [ 438.992282][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 438.997512][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 439.002741][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 439.008933][ C1] ? schedule_idle+0x57/0x90 [ 439.013556][ C1] cpu_startup_entry+0x14/0x20 [ 439.018347][ C1] start_secondary+0x330/0x430 [ 439.023143][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 439.028551][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 439.034485][ C1] [ 439.945484][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.951832][ T1423] ieee802154 phy1 wpan1: encryption failed: -22