last executing test programs: 12m15.051753555s ago: executing program 1 (id=19): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x14, 0x0, 0x0) 12m14.713884143s ago: executing program 1 (id=21): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0xa905d000) 12m14.646582414s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 12m14.335867921s ago: executing program 1 (id=26): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 12m13.610355668s ago: executing program 1 (id=34): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @rand_addr=0x64010101}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 12m12.809800816s ago: executing program 1 (id=38): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8402) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) 12m12.399642676s ago: executing program 32 (id=38): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8402) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) 11m48.405305688s ago: executing program 3 (id=156): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000c00)='0x4', 0x3) close(r1) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') 11m46.736067736s ago: executing program 3 (id=163): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) 11m45.622890042s ago: executing program 3 (id=165): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) 2m59.221063368s ago: executing program 4 (id=2513): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m58.858983797s ago: executing program 4 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="0009000100"}) 2m58.110402734s ago: executing program 4 (id=2516): syz_read_part_table(0x107d, &(0x7f0000000000)="$eJzszrFNLDEUBdC7a3t2Vj/5XVAgBewiUQEpxZCS0wxCQg/ZGmogOSew7Of7pBv+1PVtPCSpW+p0jPakJ7kkeUkykm2OW/JZ85Wqqpzz8b9atu3Yqnn05Dp6jdTjJfmuqrHnkupzpdrK3b6q73la4ZbtPoenf+vvPfe8tuS5J2P89kk75bwuM3s+Kq5+qw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxoFQx4AAgAA//9cvSFn") 2m57.730671362s ago: executing program 4 (id=2521): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000004000085000000010000008500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc) 2m36.596974819s ago: executing program 4 (id=2523): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x200000000000020c, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 2m21.413006148s ago: executing program 34 (id=2523): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x200000000000020c, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 9.205866918s ago: executing program 2 (id=3038): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x10c}}, 0x0) 8.156500303s ago: executing program 2 (id=3041): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.597825889s ago: executing program 5 (id=3049): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x10c}}, 0x0) 5.907245364s ago: executing program 5 (id=3051): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x97d5, &(0x7f00000097c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) 5.193851051s ago: executing program 6 (id=3055): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 4.991449065s ago: executing program 6 (id=3057): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4004004) 4.865926828s ago: executing program 0 (id=3058): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc0000000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 4.708045622s ago: executing program 2 (id=3059): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x10c}}, 0x0) 4.695958012s ago: executing program 0 (id=3060): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x7dfc9a88bbf6917f, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xf, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503222ed3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.961886689s ago: executing program 2 (id=3061): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000080)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@usrjquota}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 3.783912533s ago: executing program 6 (id=3062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.389283592s ago: executing program 0 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 3.06577522s ago: executing program 6 (id=3064): sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.06560484s ago: executing program 2 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.889586334s ago: executing program 5 (id=3066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@cgroup=r2, r2, 0x2f, 0x14, 0x4, @void, @value=r1, @void, @void, r3}, 0x20) 2.834253985s ago: executing program 0 (id=3067): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() waitid(0x0, r3, &(0x7f0000000280), 0x8, &(0x7f0000000900)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000e00)={0x17c04, r4, 0x299f25fd, 0x4000003, 0x10001, 0xfd}) 2.815009556s ago: executing program 2 (id=3068): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.743349897s ago: executing program 6 (id=3069): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x10c}}, 0x0) 1.437626357s ago: executing program 0 (id=3070): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4004004) 1.173880863s ago: executing program 5 (id=3071): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001080)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@user_xattr}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodioread_nolock}]}, 0x4, 0xbce, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103602, 0x49) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 556.228757ms ago: executing program 5 (id=3072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 217.507245ms ago: executing program 0 (id=3073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 145.890937ms ago: executing program 5 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x8054) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) kernel console output (not intermixed with test programs): 183.896549][ T7431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.028572][ T7431] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.990206][ T28] audit: type=1804 audit(1784998196.029:9): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.409" name="/newroot/26/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 185.106434][ T7431] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 185.252147][ T6529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.713593][ T7495] netlink: 'syz.4.428': attribute type 21 has an invalid length. [ 187.730337][ T7495] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.759470][ T7495] IPv6: Can't replace route, no match found [ 188.152193][ T7505] loop5: detected capacity change from 0 to 1024 [ 188.175019][ T7505] EXT4-fs: Ignoring removed bh option [ 188.253923][ T7505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 188.522565][ T6529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 189.336657][ T7549] loop5: detected capacity change from 0 to 128 [ 189.404440][ T7549] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 189.573103][ T1073] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 189.624217][ T7549] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 190.118853][ T7573] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.452'. [ 194.446195][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453043][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.231316][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 198.343429][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 200.892150][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 202.377435][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.565'. [ 210.151723][ T8065] hsr0: VLAN not yet supported [ 211.884751][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.896032][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 217.118206][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'. [ 217.149354][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.658'. [ 217.159754][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'. [ 217.169062][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.658'. [ 222.443331][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 226.899330][ T8391] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 232.432144][ T8443] infiniband syz1: set active [ 232.457715][ T8443] team0: Port device bridge0 removed [ 232.481999][ T8443] bridge_slave_0: left allmulticast mode [ 232.487769][ T8443] bridge_slave_0: left promiscuous mode [ 232.493878][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.523729][ T8443] bridge_slave_1: left allmulticast mode [ 232.543043][ T8443] bridge_slave_1: left promiscuous mode [ 232.549013][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.569445][ T8443] bond0: (slave bond_slave_0): Releasing backup interface [ 232.629292][ T8443] bond0: (slave bond_slave_1): Releasing backup interface [ 232.687382][ T8443] team0: Port device team_slave_0 removed [ 232.765051][ T8443] team0: Port device team_slave_1 removed [ 232.791534][ T8443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.802653][ T8443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.814781][ T8443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.832506][ T8443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.899425][ T8444] team0: Mode changed to "loadbalance" [ 232.985314][ T8453] team0: Port device xfrm0 added [ 233.267183][ T5101] libceph: connect (1)[c::]:6789 error -101 [ 233.281375][ T5101] libceph: mon0 (1)[c::]:6789 connect error [ 233.466218][ T8468] ceph: No mds server is up or the cluster is laggy [ 234.580622][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 234.604851][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.847838][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.836528][ T8556] bridge1: entered promiscuous mode [ 240.688938][ T8563] syz_tun: entered allmulticast mode [ 240.737010][ T8562] syz_tun: left allmulticast mode [ 244.331930][ T8603] syz_tun: entered allmulticast mode [ 245.117024][ T8596] syz_tun: left allmulticast mode [ 245.314217][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 249.290836][ T27] IPVS: starting estimator thread 0... [ 249.327362][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 249.400347][ T8653] IPVS: using max 17 ests per chain, 40800 per kthread [ 252.073099][ T8684] bridge_slave_0: left allmulticast mode [ 252.078856][ T8684] bridge_slave_0: left promiscuous mode [ 252.120692][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.174879][ T8684] bridge_slave_1: left allmulticast mode [ 252.194866][ T8684] bridge_slave_1: left promiscuous mode [ 252.213844][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.243961][ T8684] bond0: (slave bond_slave_0): Releasing backup interface [ 252.266302][ T8684] bond_slave_0: left promiscuous mode [ 252.281815][ T8684] bond_slave_0: left allmulticast mode [ 252.311716][ T8684] bond0: (slave bond_slave_1): Releasing backup interface [ 252.326625][ T8684] bond_slave_1: left promiscuous mode [ 252.350002][ T8684] bond_slave_1: left allmulticast mode [ 252.428400][ T8684] team0: Port device team_slave_0 removed [ 252.456962][ T8684] team0: Port device team_slave_1 removed [ 252.490873][ T8684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.508566][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.566646][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 252.584307][ T8692] team0: Mode changed to "loadbalance" [ 253.083826][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 254.276144][ T8725] bridge_slave_0: left allmulticast mode [ 254.410814][ T8725] bridge_slave_0: left promiscuous mode [ 254.613321][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.685414][ T8725] bridge_slave_1: left allmulticast mode [ 254.694049][ T8725] bridge_slave_1: left promiscuous mode [ 254.699976][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.788034][ T8725] bond0: (slave bond_slave_0): Releasing backup interface [ 254.808851][ T8725] bond_slave_0: left promiscuous mode [ 254.848433][ T8725] bond_slave_0: left allmulticast mode [ 254.893863][ T8725] bond0: (slave bond_slave_1): Releasing backup interface [ 254.942027][ T8725] bond_slave_1: left promiscuous mode [ 254.947696][ T8725] bond_slave_1: left allmulticast mode [ 255.047229][ T8725] team0: Port device team_slave_0 removed [ 255.092407][ T8725] team0: Port device team_slave_1 removed [ 255.117733][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.135832][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.151074][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.175248][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.391913][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 255.914908][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.921391][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.143575][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.154253][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.164168][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.181362][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.203757][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.346856][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.356379][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 256.365960][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 257.588107][ T8790] team0: Mode changed to "loadbalance" [ 259.473606][ T8796] __nla_validate_parse: 130 callbacks suppressed [ 259.473624][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 259.898954][ T8829] infiniband syz1: set active [ 260.309886][ T8829] team0: Port device xfrm0 removed [ 260.941105][ T8846] mmap: syz.4.858 (8846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.304479][ T8853] syz_tun: entered allmulticast mode [ 261.901992][ T8848] syz_tun: left allmulticast mode [ 263.120838][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.863'. [ 264.052765][ T8892] syz_tun: entered allmulticast mode [ 264.556352][ T8883] syz_tun: left allmulticast mode [ 267.417018][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 267.989299][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'. [ 269.621045][ T8946] overlayfs: failed to clone upperpath [ 270.049906][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 272.716093][ T8979] infiniband syz1: set active [ 273.416880][ T8989] team0: Port device xfrm0 added [ 273.453745][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'. [ 274.569377][ T9006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 274.598432][ T9006] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 277.046582][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 277.258902][ T9034] vlan2: entered promiscuous mode [ 277.274185][ T9034] bridge0: entered promiscuous mode [ 283.092585][ T9139] overlayfs: failed to clone upperpath [ 283.236749][ T5086] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 286.420646][ T5086] Bluetooth: Frame is too long (len 18, expected len 4) [ 288.473747][ T9251] team0: Port device xfrm0 added [ 289.978382][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1020'. [ 290.470294][ T5086] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 293.507722][ T9315] syz_tun: entered allmulticast mode [ 293.700843][ T9312] syz_tun: left allmulticast mode [ 296.418764][ T9353] syz_tun: entered allmulticast mode [ 296.967542][ T9348] syz_tun: left allmulticast mode [ 303.196184][ T5086] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 304.147125][ T5086] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 304.666924][ T9472] netlink: 'syz.5.1095': attribute type 1 has an invalid length. [ 304.723055][ T9472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.759078][ T9475] team0: Port device xfrm0 added [ 304.811716][ T9476] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 305.168693][ T9472] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 305.201322][ T9472] bond1 (unregistering): Released all slaves [ 305.238126][ T9481] tipc: Started in network mode [ 305.254139][ T9481] tipc: Node identity 4, cluster identity 4711 [ 305.267937][ T9481] tipc: Node number set to 4 [ 305.555909][ T5086] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 307.730877][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 309.570733][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 309.584778][ T5781] Bluetooth: hci3: Injecting HCI hardware error event [ 309.595264][ T5086] Bluetooth: hci3: hardware error 0x00 [ 309.801757][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 310.123987][ T9555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1127'. [ 310.192184][ T9541] 9pnet_virtio: no channels available for device syz [ 310.227061][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1123'. [ 311.731191][ T5086] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 312.576234][ T9595] netlink: 'syz.5.1138': attribute type 1 has an invalid length. [ 312.808916][ T9595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.858382][ T9597] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.897575][ T9597] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.909811][ T9597] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.927853][ T9597] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 312.952892][ T9597] bond1: (slave geneve2): making interface the new active one [ 312.987395][ T9597] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 314.750494][ T9618] warning: `syz.0.1146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.974591][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 316.309682][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 316.319909][ T5086] CPU: 1 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 316.327531][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.337656][ T5086] Workqueue: hci0 hci_rx_work [ 316.342444][ T5086] Call Trace: [ 316.345772][ T5086] [ 316.348751][ T5086] dump_stack_lvl+0x18c/0x250 [ 316.353500][ T5086] ? show_regs_print_info+0x20/0x20 [ 316.358770][ T5086] ? load_image+0x420/0x420 [ 316.363366][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 316.368635][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 316.373723][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 316.378460][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 316.383733][ T5086] kobject_add_internal+0x617/0xc90 [ 316.389002][ T5086] kobject_add+0x164/0x240 [ 316.393487][ T5086] ? kobject_init+0x1d0/0x1d0 [ 316.398237][ T5086] ? get_device_parent+0x366/0x390 [ 316.403493][ T5086] device_add+0x3fa/0xc40 [ 316.407880][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 316.412878][ T5086] le_conn_complete_evt+0xe9f/0x1480 [ 316.418277][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 316.424624][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 316.430323][ T5086] ? mutex_unlock+0x10/0x10 [ 316.434882][ T5086] ? skb_pull_data+0xf0/0x1f0 [ 316.439602][ T5086] hci_le_enh_conn_complete_evt+0x189/0x460 [ 316.445661][ T5086] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 316.452134][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 316.458246][ T5086] hci_event_packet+0x7b4/0x1280 [ 316.463232][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 316.468303][ T5086] ? lock_chain_count+0x20/0x20 [ 316.473189][ T5086] ? bis_list+0x290/0x290 [ 316.477552][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 316.482791][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 316.488025][ T5086] hci_rx_work+0x43a/0xd60 [ 316.492479][ T5086] ? process_scheduled_works+0x975/0x1600 [ 316.498240][ T5086] process_scheduled_works+0xa60/0x1600 [ 316.503851][ T5086] ? worker_attach_to_pool+0x370/0x370 [ 316.509350][ T5086] ? assign_work+0x3cc/0x5d0 [ 316.513979][ T5086] worker_thread+0xa5e/0xfe0 [ 316.518625][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 316.523511][ T5086] ? __kthread_parkme+0x71/0x1c0 [ 316.528491][ T5086] kthread+0x2fa/0x390 [ 316.532617][ T5086] ? pr_cont_work+0x550/0x550 [ 316.537335][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 316.541951][ T5086] ret_from_fork+0x48/0x80 [ 316.546412][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 316.551038][ T5086] ret_from_fork_asm+0x11/0x20 [ 316.555850][ T5086] [ 316.564233][ T5086] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 316.578376][ T5086] Bluetooth: hci0: failed to register connection device [ 316.808796][ T9659] 9pnet_fd: Insufficient options for proto=fd [ 317.325269][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332222][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.729172][ T9662] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1156'. [ 317.811269][ T9664] fuse: Bad value for 'fd' [ 318.012124][ T5086] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 318.032208][ T5086] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 318.925400][ T9687] overlayfs: failed to clone upperpath [ 322.040367][ T5086] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 322.050932][ T5086] Bluetooth: hci2: Injecting HCI hardware error event [ 322.059967][ T5086] Bluetooth: hci2: hardware error 0x00 [ 322.328913][ T9756] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 322.435119][ T9756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.484008][ T9758] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 323.314174][ T9759] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 323.338388][ T9759] bond1 (unregistering): Released all slaves [ 324.120222][ T5086] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 325.555992][ T9772] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.580509][ T9772] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.595938][ T9772] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.606764][ T9772] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.163374][ T9808] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 326.381786][ T9808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.563989][ T9811] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 326.582505][ T1130] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.412806][ T9812] bond1 (unregistering): (slave gretap2): Removing an active aggregator [ 327.429347][ T9812] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 327.450520][ T9812] bond1 (unregistering): Released all slaves [ 327.533931][ T9829] team0: Device xfrm0 is of different type [ 328.202950][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 328.368749][ T9855] team0: Device xfrm0 is of different type [ 328.618629][ T9860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1226'. [ 329.566243][ T9881] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1234'. [ 331.287644][ T9909] infiniband syz1: set active [ 331.593804][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1245'. [ 332.656820][ T9922] ip6gre1: entered promiscuous mode [ 332.662265][ T9922] ip6gre1: entered allmulticast mode [ 332.675485][ T1073] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.691299][ T9922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.704941][ T9796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.713364][ T1073] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.920339][ T9796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.270648][ T9797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.477152][ T9961] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 335.592671][ T9961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.802024][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 337.000336][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.914232][T10054] fuse: Bad value for 'fd' [ 344.193709][T10087] fuse: Bad value for 'fd' [ 345.480343][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.657633][T10113] fuse: Bad value for 'fd' [ 349.070870][T10183] team0: Port device xfrm0 removed [ 350.838157][T10204] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 350.853063][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 350.945827][T10204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.280530][T10223] capability: warning: `syz.2.1356' uses deprecated v2 capabilities in a way that may be insecure [ 351.423951][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 351.558809][T10241] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 351.606973][T10241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.660189][T10279] netlink: 'syz.5.1374': attribute type 1 has an invalid length. [ 353.714271][T10279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.493870][T10305] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 355.639559][T10305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.694537][T10332] netlink: 'syz.5.1390': attribute type 1 has an invalid length. [ 356.751810][T10332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.425835][T10347] xt_hashlimit: size too large, truncated to 1048576 [ 357.456355][T10332] bond3 (unregistering): Released all slaves [ 359.279177][T10369] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 359.375461][T10369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.480265][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.675795][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.683822][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.252381][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.306883][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.747186][T10399] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.756426][T10399] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.766050][T10399] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.775247][T10399] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.933681][T10399] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 362.943385][T10399] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 362.952505][T10399] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 362.961708][T10399] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 363.001613][T10402] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 363.024577][T10402] team0: Device netdevsim0 is of different type [ 366.618197][T10474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 367.578933][T10492] netlink: 'syz.5.1436': attribute type 16 has an invalid length. [ 367.589361][T10492] netlink: 'syz.5.1436': attribute type 17 has an invalid length. [ 367.665776][T10492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.676705][T10492] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.690912][T10492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.561756][T10512] lo: entered allmulticast mode [ 369.144973][T10504] lo: left allmulticast mode [ 370.025650][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 370.247295][ T5086] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 370.658403][T10539] lo: entered allmulticast mode [ 371.231839][T10533] lo: left allmulticast mode [ 371.577527][T10543] futex_wake_op: syz.4.1455 tries to shift op by -1; fix this program [ 373.580128][ T28] audit: type=1326 audit(1784998384.599:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 373.617992][ T28] audit: type=1326 audit(1784998384.599:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 373.643052][ T28] audit: type=1326 audit(1784998384.609:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 373.911279][ T28] audit: type=1326 audit(1784998384.609:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 374.060423][ T28] audit: type=1326 audit(1784998384.609:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 374.144856][T10573] lo: entered allmulticast mode [ 374.401604][T10566] lo: left allmulticast mode [ 374.474650][ T28] audit: type=1326 audit(1784998384.609:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 374.602492][ T28] audit: type=1326 audit(1784998384.609:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 374.748097][ T28] audit: type=1326 audit(1784998384.609:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 374.797278][ T28] audit: type=1326 audit(1784998384.609:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.0.1466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f733619de99 code=0x7ffc0000 [ 375.586755][T10599] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1478'. [ 375.615455][T10599] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1478'. [ 375.640778][T10599] netlink: 'syz.2.1478': attribute type 6 has an invalid length. [ 375.662734][T10599] netlink: 'syz.2.1478': attribute type 5 has an invalid length. [ 375.694763][T10599] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1478'. [ 376.143902][T10608] lo: entered allmulticast mode [ 376.575594][T10619] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 376.691877][T10619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.719811][T10604] lo: left allmulticast mode [ 378.348437][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1488'. [ 378.778645][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.785099][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.624603][T10661] lo: entered allmulticast mode [ 380.812456][T10665] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 381.165350][T10665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.177763][T10652] lo: left allmulticast mode [ 382.504029][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 383.254007][T10703] lo: entered allmulticast mode [ 383.900711][T10695] lo: left allmulticast mode [ 384.971472][T10720] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 385.054043][T10720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.767970][T10740] lo: entered allmulticast mode [ 386.360526][T10734] lo: left allmulticast mode [ 387.329231][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 387.401911][T10754] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1524'. [ 387.961533][T10766] fuse: Bad value for 'fd' [ 388.325994][T10769] lo: entered allmulticast mode [ 388.862553][T10767] lo: left allmulticast mode [ 389.991999][T10795] fuse: Bad value for 'fd' [ 391.898753][T10815] lo: entered allmulticast mode [ 392.425422][T10810] lo: left allmulticast mode [ 393.345683][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 394.897515][T10850] lo: entered allmulticast mode [ 395.224014][T10847] lo: left allmulticast mode [ 398.212965][T10880] lo: entered allmulticast mode [ 398.346732][T10876] lo: left allmulticast mode [ 400.478290][T10920] lo: entered allmulticast mode [ 400.993699][T10913] lo: left allmulticast mode [ 402.000107][ T28] audit: type=1326 audit(1784998413.039:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.2.1581" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1fc59de99 code=0x0 [ 404.292779][T10955] lo: entered allmulticast mode [ 404.301235][T10954] lo: left allmulticast mode [ 407.560061][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 408.244389][T10976] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.256021][T10976] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.267966][T10976] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.282478][T10976] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.460925][T10982] netlink: 'syz.5.1592': attribute type 1 has an invalid length. [ 408.532643][T10982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.596799][T10996] lo: entered allmulticast mode [ 408.602462][T10996] lo: left allmulticast mode [ 411.823503][T11043] lo: entered allmulticast mode [ 411.835368][T11042] lo: left allmulticast mode [ 414.472386][ T28] audit: type=1326 audit(1784998425.519:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11046 comm="syz.4.1610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3159de99 code=0x7fc00000 [ 416.181768][T11078] lo: entered allmulticast mode [ 416.190535][T11077] lo: left allmulticast mode [ 416.514039][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1620'. [ 416.710289][ T28] audit: type=1326 audit(1784998427.689:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.2.1621" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1fc59de99 code=0x0 [ 421.390454][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1630'. [ 424.954024][T11159] fuse: Bad value for 'fd' [ 425.064658][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 429.703718][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 431.605308][T11235] infiniband syz1: set down [ 433.988127][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1672'. [ 434.778928][T11266] 9pnet_fd: Insufficient options for proto=fd [ 434.980669][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 435.102881][T11235] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.112364][T11235] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.121869][T11235] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.133734][T11235] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.210973][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1675'. [ 437.066386][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 439.216476][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 441.178971][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.185984][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.255487][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1705'. [ 447.363684][T11389] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 447.379767][T11389] team0: Port device netdevsim0 added [ 447.885743][T11401] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 454.990856][T11472] netlink: 'syz.4.1747': attribute type 12 has an invalid length. [ 457.149084][T11480] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 457.170984][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 457.903328][T11491] fuse: Bad value for 'fd' [ 461.407316][T11511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.469461][T11515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.514751][T11515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.533441][T11515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.551182][T11515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.577225][T11515] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 461.624872][T11519] fuse: Bad value for 'fd' [ 463.751204][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1767'. [ 466.905991][T11582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 469.536195][T11613] syz.5.1779 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 471.416094][T11632] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 476.401489][T11667] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 481.350363][T11715] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 485.821520][T11757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 487.969351][T11789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1842'. [ 488.788642][T11802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 491.460850][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 491.846737][T11852] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 501.649227][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.655997][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.065087][ T5823] IPVS: starting estimator thread 0... [ 502.190261][T11978] IPVS: using max 15 ests per chain, 36000 per kthread [ 504.632119][ T5086] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 505.269000][T12011] netlink: 'syz.5.1918': attribute type 10 has an invalid length. [ 505.283252][T12011] team0: Port device netdevsim0 added [ 508.108028][ T5086] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 511.898301][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1945'. [ 511.925453][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1945'. [ 512.674068][T12109] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 512.689110][T12109] team0: Device netdevsim0 is of different type [ 514.583960][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1953'. [ 516.287556][T12144] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 516.615161][ T5086] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 516.832466][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 518.388344][T12170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 518.509376][T12173] netlink: 'syz.0.1975': attribute type 10 has an invalid length. [ 518.522468][T12173] team0: Device netdevsim0 is of different type [ 520.161922][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 521.988610][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 527.644224][T12253] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2005'. [ 529.344462][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2013'. [ 529.627921][T12282] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2016'. [ 532.350582][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2023'. [ 533.149542][T12309] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2025'. [ 534.559103][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'. [ 536.030138][T12341] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2035'. [ 536.477840][T12348] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 536.488304][T12348] team0: Device netdevsim0 is of different type [ 537.001898][T12359] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 537.054766][T12359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.010972][T12365] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2044'. [ 538.629673][T12367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2045'. [ 540.136578][T12394] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2054'. [ 541.753558][T12424] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2064'. [ 541.950106][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 543.779316][T12457] netlink: 424 bytes leftover after parsing attributes in process `syz.4.2076'. [ 546.547430][T12483] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2085'. [ 548.341514][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2083'. [ 549.135308][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 549.278104][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2093'. [ 552.289127][T12540] netlink: 'syz.4.2102': attribute type 10 has an invalid length. [ 552.450975][T12540] team0: Device netdevsim0 is of different type [ 552.886185][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 553.590579][T12546] sctp: failed to load transform for md5: -4 [ 554.040884][T12577] overlayfs: failed to clone upperpath [ 554.068880][T12577] overlayfs: failed to clone lowerpath [ 557.516513][T12609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.539584][T12609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.550217][T12609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.571779][T12609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.582028][T12609] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 557.609758][T12609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.642648][T12606] tipc: Enabling of bearer rejected, failed to enable media [ 557.825394][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 558.682794][ T59] team0: Port device netdevsim0 removed [ 559.730446][ T5086] Bluetooth: hci0: command tx timeout [ 559.746499][ T59] tipc: Left network mode [ 560.790394][T12607] chnl_net:caif_netlink_parms(): no params data found [ 561.800209][ T5086] Bluetooth: hci0: command tx timeout [ 561.814634][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 562.305039][T12607] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.323190][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.356581][T12607] bridge_slave_0: entered allmulticast mode [ 562.410922][T12607] bridge_slave_0: entered promiscuous mode [ 562.455752][T12607] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.525923][T12607] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.545936][T12607] bridge_slave_1: entered allmulticast mode [ 562.621830][T12607] bridge_slave_1: entered promiscuous mode [ 563.110684][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.117281][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.275609][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 564.117895][T12609] Bluetooth: hci0: command tx timeout [ 564.894783][T12607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.008632][T12607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.146101][T12712] tipc: Enabling of bearer rejected, failed to enable media [ 565.202817][T12607] team0: Port device team_slave_0 added [ 565.245799][T12607] team0: Port device team_slave_1 added [ 565.552423][T12607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.559452][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.118007][T12607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.207377][T12609] Bluetooth: hci0: command tx timeout [ 566.533575][T12607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.600262][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.696483][T12607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.940161][ T59] hsr_slave_0: left promiscuous mode [ 566.980136][ T59] hsr_slave_1: left promiscuous mode [ 568.652609][ T59] bond4 (unregistering): Released all slaves [ 570.243785][T12758] overlayfs: failed to clone upperpath [ 571.085852][ T59] bond3 (unregistering): Released all slaves [ 572.934801][ T59] bond2 (unregistering): Released all slaves [ 573.560040][ T59] bond1 (unregistering): Released all slaves [ 575.435758][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2161'. [ 583.262397][ T59] bond0 (unregistering): Released all slaves [ 583.294613][T12609] Bluetooth: Unexpected continuation frame (len 16) [ 583.536155][T12607] hsr_slave_0: entered promiscuous mode [ 583.587043][T12607] hsr_slave_1: entered promiscuous mode [ 583.652120][T12847] netlink: 'syz.4.2178': attribute type 1 has an invalid length. [ 583.732597][T12847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.776050][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2179'. [ 586.289577][T12896] netlink: 'syz.5.2187': attribute type 1 has an invalid length. [ 586.428279][T12896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.607022][T12607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.718013][T12607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.737045][T12607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.764378][T12607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.981472][T12607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.937782][T12607] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.985833][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.993100][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.056254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.063558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.309203][T12607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.350437][T12923] netlink: 'syz.4.2192': attribute type 10 has an invalid length. [ 589.369809][T12923] bridge0: entered promiscuous mode [ 589.380174][T12923] bridge0: entered allmulticast mode [ 589.411737][T12923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 589.729115][T12936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 589.738502][T12936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 591.222555][T12607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.242975][T12954] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 591.340396][T12954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.582368][T12607] veth0_vlan: entered promiscuous mode [ 591.637390][T12607] veth1_vlan: entered promiscuous mode [ 591.759219][T12607] veth0_macvtap: entered promiscuous mode [ 591.842606][T12607] veth1_macvtap: entered promiscuous mode [ 591.896395][T12607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.934212][T12607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.965020][T12607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.091106][T12607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.129058][T12607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.145995][T12607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.302823][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.353218][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.487204][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.510128][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.586261][T12995] bond5: Unable to set up delay as MII monitoring is disabled [ 593.618169][T12995] bond5 (unregistering): Released all slaves [ 593.688935][T13001] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 593.769984][T13003] lo: entered allmulticast mode [ 593.904015][T12996] lo: left allmulticast mode [ 595.172347][T13023] configfs-gadget.g1 gadget.0: HOST MAC 36:45:c0:71:77:1f [ 595.189708][T13023] configfs-gadget.g1 gadget.0: MAC ca:a1:a0:10:a8:96 [ 595.232242][ T28] audit: type=1326 audit(1784998606.279:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f733619de99 code=0x0 [ 595.337181][T13034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 595.346524][T13034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 596.467141][T13050] lo: entered allmulticast mode [ 596.475952][T13045] lo: left allmulticast mode [ 596.521021][ T9795] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 596.789044][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2222'. [ 596.836956][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2222'. [ 596.865965][T13062] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2222'. [ 596.876894][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2222'. [ 597.010327][ T9795] usb 1-1: Dual-Role OTG device on HNP port [ 597.162390][ T9795] usb 1-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 6.06 [ 597.392692][ T9795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.569996][ T9795] usb 1-1: Product: ACMESynth [ 597.840524][T13070] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 597.849609][T13070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 597.982248][ T9795] cdc_ncm 1-1:1.0: MAC-Address: 36:45:c0:71:77:1f [ 598.557774][ T9795] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 36:45:c0:71:77:1f [ 598.776684][ T9795] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 598.800631][T13083] lo: entered allmulticast mode [ 598.812311][T13078] lo: left allmulticast mode [ 601.260052][T13116] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2237'. [ 602.263282][T13123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 602.272554][T13123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.887639][T13138] syz_tun: entered allmulticast mode [ 603.917384][T13136] syz_tun: left allmulticast mode [ 605.332752][T13167] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2253'. [ 605.911415][T13175] lo: entered allmulticast mode [ 605.926760][T13172] lo: left allmulticast mode [ 607.667452][T13208] lo: entered allmulticast mode [ 607.679033][T13207] lo: left allmulticast mode [ 607.712566][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2267'. [ 609.415312][T13239] lo: entered allmulticast mode [ 609.424433][T13237] lo: left allmulticast mode [ 610.022333][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 610.807496][T13269] lo: entered allmulticast mode [ 610.821065][T13268] lo: left allmulticast mode [ 610.940016][T13272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 610.949525][T13272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.137329][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 613.855683][T13315] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 613.864959][T13315] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.841214][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 616.030200][T13299] lo: entered allmulticast mode [ 616.035453][T13299] lo: left allmulticast mode [ 616.636610][T13352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 616.646243][T13352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 618.155575][T13369] loop2: detected capacity change from 0 to 32768 [ 618.307035][T13369] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 618.612554][T12607] ocfs2: Unmounting device (7,2) on (node local) [ 618.810016][T13389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 618.921062][T13389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 618.960687][T13393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 619.030552][T13394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 619.272050][T13404] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.281074][T13404] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.595356][T13405] loop2: detected capacity change from 0 to 4096 [ 619.852288][T13405] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 622.470729][T13428] loop2: detected capacity change from 0 to 32768 [ 622.622330][T13428] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 622.893292][T12607] ocfs2: Unmounting device (7,2) on (node local) [ 622.951263][T13475] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 623.732241][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2353'. [ 623.770019][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2353'. [ 624.530644][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.537111][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.068344][T13509] loop2: detected capacity change from 0 to 32768 [ 625.155547][T13509] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 625.406130][T12607] ocfs2: Unmounting device (7,2) on (node local) [ 632.043838][T13653] loop2: detected capacity change from 0 to 512 [ 632.164523][T13653] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2409: invalid indirect mapped block 4294967295 (level 1) [ 632.286574][T13653] EXT4-fs (loop2): Remounting filesystem read-only [ 632.295814][T13653] EXT4-fs (loop2): 2 truncates cleaned up [ 632.307956][T13653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.393042][T12607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.478874][T13686] Invalid option length (1048432) for dns_resolver key [ 638.333542][T13739] infiniband syz1: set active [ 638.361360][T13739] infiniband syz1: set active [ 638.444657][T13739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.504876][T13739] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.566632][T13739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.018614][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2447'. [ 639.038061][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2447'. [ 641.468962][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2457'. [ 641.538594][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2457'. [ 643.914273][T13823] syz_tun: entered allmulticast mode [ 644.105474][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2468'. [ 644.135240][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2468'. [ 644.742253][T13822] syz_tun: left allmulticast mode [ 645.666642][T13846] syz.4.2473: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 645.749929][T13846] CPU: 0 PID: 13846 Comm: syz.4.2473 Not tainted syzkaller #0 [ 645.757491][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 645.767602][T13846] Call Trace: [ 645.771015][T13846] [ 645.774078][T13846] dump_stack_lvl+0x18c/0x250 [ 645.778989][T13846] ? show_regs_print_info+0x20/0x20 [ 645.784303][T13846] ? load_image+0x420/0x420 [ 645.788908][T13846] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 645.795446][T13846] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 645.802114][T13846] warn_alloc+0x246/0x340 [ 645.806550][T13846] ? zone_watermark_ok_safe+0x230/0x230 [ 645.812160][T13846] ? _raw_spin_unlock+0x28/0x40 [ 645.817171][T13846] ? memset_orig+0x46/0xac [ 645.821663][T13846] __vmalloc_node_range+0x661/0x1320 [ 645.827043][T13846] ? __alloc_pages+0xae/0x460 [ 645.831777][T13846] ? free_vm_area+0x50/0x50 [ 645.836445][T13846] ? packet_set_ring+0x717/0x23e0 [ 645.841592][T13846] vzalloc+0x79/0x90 [ 645.845556][T13846] ? packet_set_ring+0x717/0x23e0 [ 645.850660][T13846] packet_set_ring+0x717/0x23e0 [ 645.855592][T13846] ? packet_mmap+0x510/0x510 [ 645.860236][T13846] ? __lock_acquire+0x7d80/0x7d80 [ 645.865327][T13846] ? __local_bh_enable_ip+0x13a/0x1c0 [ 645.870755][T13846] ? lockdep_hardirqs_on+0x98/0x150 [ 645.875999][T13846] ? __might_fault+0xaa/0x120 [ 645.880710][T13846] ? __might_fault+0xc6/0x120 [ 645.885502][T13846] ? __might_fault+0xaa/0x120 [ 645.890210][T13846] ? _copy_from_user+0xa5/0xe0 [ 645.895041][T13846] packet_setsockopt+0xdb0/0x1500 [ 645.900097][T13846] ? packet_ioctl+0x350/0x350 [ 645.904827][T13846] ? aa_sk_perm+0x83c/0x970 [ 645.909397][T13846] ? __fget_files+0x28/0x460 [ 645.914051][T13846] ? aa_af_perm+0x330/0x330 [ 645.918590][T13846] ? __fget_files+0x28/0x460 [ 645.923214][T13846] ? aa_sock_opt_perm+0x74/0x100 [ 645.928179][T13846] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 645.933776][T13846] ? security_socket_setsockopt+0x7e/0xa0 [ 645.939531][T13846] ? packet_ioctl+0x350/0x350 [ 645.944253][T13846] do_sock_setsockopt+0x175/0x1a0 [ 645.949379][T13846] ? __fdget+0x180/0x210 [ 645.953674][T13846] __x64_sys_setsockopt+0x182/0x200 [ 645.958912][T13846] do_syscall_64+0x55/0xb0 [ 645.963395][T13846] ? clear_bhb_loop+0x40/0x90 [ 645.968193][T13846] ? clear_bhb_loop+0x40/0x90 [ 645.972995][T13846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.978928][T13846] RIP: 0033:0x7efd3159de99 [ 645.983437][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.003126][T13846] RSP: 002b:00007efd323e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 646.011621][T13846] RAX: ffffffffffffffda RBX: 00007efd31825fa0 RCX: 00007efd3159de99 [ 646.019627][T13846] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 646.027627][T13846] RBP: 00007efd31633eaf R08: 000000000000001c R09: 0000000000000000 [ 646.035631][T13846] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 646.043629][T13846] R13: 00007efd31826038 R14: 00007efd31825fa0 R15: 00007fffba905578 [ 646.051758][T13846] [ 646.157775][T13846] Mem-Info: [ 646.181773][T13846] active_anon:8356 inactive_anon:0 isolated_anon:0 [ 646.181773][T13846] active_file:17342 inactive_file:40466 isolated_file:0 [ 646.181773][T13846] unevictable:768 dirty:81 writeback:0 [ 646.181773][T13846] slab_reclaimable:11142 slab_unreclaimable:114051 [ 646.181773][T13846] mapped:24417 shmem:3186 pagetables:714 [ 646.181773][T13846] sec_pagetables:0 bounce:0 [ 646.181773][T13846] kernel_misc_reclaimable:0 [ 646.181773][T13846] free:1307809 free_pcp:10955 free_cma:0 [ 646.284035][T13846] Node 0 active_anon:26624kB inactive_anon:0kB active_file:69368kB inactive_file:161664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97668kB dirty:324kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12008kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no [ 646.344453][T13846] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 646.448082][T13846] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 646.499233][T13846] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 646.509387][T13846] Node 0 DMA32 free:1321296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27688kB inactive_anon:0kB active_file:69368kB inactive_file:160840kB unevictable:1536kB writepending:324kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:30312kB local_pcp:14016kB free_cma:0kB [ 646.596037][T13846] lowmem_reserve[]: 0 0 0 0 0 [ 646.616434][T13846] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 646.659231][T13846] lowmem_reserve[]: 0 0 0 0 0 [ 646.666115][T13846] Node 1 Normal free:3894580kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19672kB local_pcp:8480kB free_cma:0kB [ 646.709521][T13846] lowmem_reserve[]: 0 0 0 0 0 [ 646.714971][T13846] Node 0 DMA: 0*4kB [ 646.715098][T13870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2478'. [ 646.715122][T13870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2478'. [ 646.719074][T13846] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 646.832539][T13846] Node 0 DMA32: 2*4kB (ME) 389*8kB (ME) 544*16kB (UME) 489*32kB (ME) 276*64kB (ME) 102*128kB (UME) 48*256kB (ME) 33*512kB (UM) 15*1024kB (ME) 19*2048kB (UME) 288*4096kB (UM) = 1321296kB [ 646.910014][T13846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 646.929625][T13873] netlink: 424 bytes leftover after parsing attributes in process `syz.5.2479'. [ 646.959428][T13846] Node 1 Normal: 171*4kB (UME) 65*8kB (UME) 34*16kB (UME) 57*32kB (UME) 21*64kB (UE) 6*128kB (UME) 1*256kB (U) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894580kB [ 647.024131][T13846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.060028][T13846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.089791][T13846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.129993][T13846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.139499][T13846] 61474 total pagecache pages [ 647.161462][T13846] 0 pages in swap cache [ 647.165756][T13846] Free swap = 124728kB [ 647.196695][T13846] Total swap = 124996kB [ 647.206846][T13846] 2097051 pages RAM [ 647.230077][T13846] 0 pages HighMem/MovableOnly [ 647.234872][T13846] 416955 pages reserved [ 647.274668][T13846] 0 pages cma reserved [ 647.836978][T13888] lo: entered allmulticast mode [ 648.712127][T13887] lo: left allmulticast mode [ 649.364458][T13910] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2488'. [ 650.767417][T13942] lo: entered allmulticast mode [ 651.569649][T13940] lo: left allmulticast mode [ 651.973630][T13973] overlayfs: failed to clone upperpath [ 653.233095][T13989] syz_tun: entered allmulticast mode [ 654.033991][T13987] syz_tun: left allmulticast mode [ 655.950816][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.963317][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.972304][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.984084][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.992075][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 655.999683][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 656.128607][T14032] lo: entered allmulticast mode [ 656.818794][T14029] lo: left allmulticast mode [ 658.050198][T12609] Bluetooth: hci1: command tx timeout [ 658.766977][T14056] netlink: 'syz.0.2537': attribute type 39 has an invalid length. [ 659.127800][ T2974] team0: Port device xfrm0 removed [ 660.122904][T12609] Bluetooth: hci1: command tx timeout [ 660.280255][T14073] lo: entered allmulticast mode [ 660.348429][T14028] chnl_net:caif_netlink_parms(): no params data found [ 660.416798][T14071] lo: left allmulticast mode [ 661.813446][T14028] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.860649][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.899098][T14028] bridge_slave_0: entered allmulticast mode [ 661.931733][T14028] bridge_slave_0: entered promiscuous mode [ 662.090097][T14028] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.106217][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.124115][T14028] bridge_slave_1: entered allmulticast mode [ 662.142269][T14028] bridge_slave_1: entered promiscuous mode [ 662.202613][T12609] Bluetooth: hci1: command tx timeout [ 662.221059][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2548'. [ 662.270936][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2548'. [ 662.453046][T14028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.536836][T14028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.892581][T14114] lo: entered allmulticast mode [ 662.931444][T14028] team0: Port device team_slave_0 added [ 662.987553][T14028] team0: Port device team_slave_1 added [ 663.147118][T14028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.170000][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.250134][T14028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.276929][ T2974] hsr_slave_0: left promiscuous mode [ 663.299490][ T2974] hsr_slave_1: left promiscuous mode [ 664.280662][T12609] Bluetooth: hci1: command tx timeout [ 664.415344][ T2974] bond5 (unregistering): Released all slaves [ 664.782929][ T2974] bond4 (unregistering): Released all slaves [ 664.968671][ T2974] bond3 (unregistering): Released all slaves [ 665.091448][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805c625800: rx timeout, send abort [ 665.100926][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805c625800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 665.285026][ T2974] bond2 (unregistering): Released all slaves [ 665.508576][ T2974] bond1 (unregistering): Released all slaves [ 666.857938][ T2974] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 666.868279][ T2974] bridge0 (unregistering): left promiscuous mode [ 666.875077][ T2974] bridge0 (unregistering): left allmulticast mode [ 666.884591][ T2974] bond0 (unregistering): Released all slaves [ 667.029232][T14028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.036459][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.063186][T14028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.107700][T14112] lo: left allmulticast mode [ 667.152219][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2558'. [ 667.162225][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2558'. [ 667.392433][T14028] hsr_slave_0: entered promiscuous mode [ 667.417575][T14028] hsr_slave_1: entered promiscuous mode [ 667.467461][T14028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.490064][T14028] Cannot create hsr debugfs directory [ 667.846936][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 667.971649][T14169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 668.116162][ T2974] IPVS: stop unused estimator thread 0... [ 668.190151][ T5826] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 668.406338][ T5826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.438209][ T5826] usb 3-1: config 0 has no interfaces? [ 668.452338][ T5826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.507890][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.552687][ T5826] usb 3-1: config 0 descriptor?? [ 669.012151][ T9] usb 3-1: USB disconnect, device number 2 [ 669.459782][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2567'. [ 669.476551][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2567'. [ 669.701158][T14028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 669.759647][T14028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 669.797147][T14197] syz_tun: entered allmulticast mode [ 669.808594][T14028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 669.822322][T14028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 670.012253][T14202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2572'. [ 670.101816][T14028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.163699][T14028] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.218297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.225642][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.269433][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.276785][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.627466][T14195] syz_tun: left allmulticast mode [ 670.898286][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 670.927935][T14214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 671.240629][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 671.443308][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.489033][ T9] usb 3-1: config 0 has no interfaces? [ 671.509258][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.533533][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.553904][T14028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.584522][ T9] usb 3-1: config 0 descriptor?? [ 671.889168][ T23] usb 3-1: USB disconnect, device number 3 [ 672.003276][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2578'. [ 672.022613][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2578'. [ 672.612725][T14028] veth0_vlan: entered promiscuous mode [ 672.806971][T14028] veth1_vlan: entered promiscuous mode [ 673.125652][T14028] veth0_macvtap: entered promiscuous mode [ 673.182707][T14028] veth1_macvtap: entered promiscuous mode [ 673.306952][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.349025][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.399222][T14028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.478501][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.514717][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.557410][T14028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.625641][T14028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.659221][T14028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.698664][T14028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.721938][T14028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.051921][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.079609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.219826][T14284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 674.259651][T14284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 674.305131][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.337469][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.515357][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2588'. [ 676.010831][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 676.026078][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 676.035053][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 676.048702][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 676.058766][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 676.071820][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.172455][ T5786] infiniband syz1: set down [ 676.187297][ T23] syz1: rxe_query_port: returned err = -19 [ 676.257464][ T23] infiniband syz1: ib_query_port failed (-19) [ 676.313714][ T23] syz1: rxe_query_port: returned err = -19 [ 676.338901][T12985] smc: removing ib device syz1 [ 677.791037][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2594'. [ 677.826670][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2594'. [ 678.212437][T14338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 678.222470][T12609] Bluetooth: hci4: command tx timeout [ 678.514148][T14311] chnl_net:caif_netlink_parms(): no params data found [ 678.946831][ T5786] syz-executor (5786) used greatest stack depth: 20376 bytes left [ 679.472103][T14311] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.500177][T14311] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.507599][T14311] bridge_slave_0: entered allmulticast mode [ 679.532092][T14311] bridge_slave_0: entered promiscuous mode [ 679.552414][T14311] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.578416][T14311] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.602510][T14311] bridge_slave_1: entered allmulticast mode [ 679.641866][T14311] bridge_slave_1: entered promiscuous mode [ 679.773022][T14311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.811608][T14311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.984948][T14311] team0: Port device team_slave_0 added [ 680.040682][T14311] team0: Port device team_slave_1 added [ 680.157501][T14311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.200834][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.269933][T14311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.281041][T12609] Bluetooth: hci4: command tx timeout [ 680.332484][T14311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.339506][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.451090][T14311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.697996][T14311] hsr_slave_0: entered promiscuous mode [ 680.756524][T14311] hsr_slave_1: entered promiscuous mode [ 680.787166][T14311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.799975][T14311] Cannot create hsr debugfs directory [ 681.117438][T14311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 681.245676][T14311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 681.433873][T14311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 681.737778][T14311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.291532][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2606'. [ 682.360133][T12609] Bluetooth: hci4: command tx timeout [ 682.406103][T14311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 682.480041][T14311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 682.528372][T14311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.563912][T14311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 682.966453][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 683.712939][T14311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.795908][T14311] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.837836][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.845150][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.894898][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.902181][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.456515][ T5086] Bluetooth: hci4: command tx timeout [ 685.571213][T14416] syzkaller0: entered promiscuous mode [ 685.587011][T14416] syzkaller0: entered allmulticast mode [ 685.698660][T14311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.812818][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2616'. [ 685.841789][T14311] veth0_vlan: entered promiscuous mode [ 685.885724][T14311] veth1_vlan: entered promiscuous mode [ 685.966697][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.973200][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.987438][T14311] veth0_macvtap: entered promiscuous mode [ 685.999150][T14311] veth1_macvtap: entered promiscuous mode [ 686.026226][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.055918][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.066649][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.077832][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.096457][T14311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.242592][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.310174][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.337092][T14311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.347742][T14311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.359323][T14311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.411417][T14311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.429052][T14311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.525135][T14311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.575295][T14311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.370154][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.378093][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.502946][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.518024][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.846240][T14442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2589'. [ 687.903513][T14441] syzkaller0: entered promiscuous mode [ 687.921468][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.931902][T14441] syzkaller0: entered allmulticast mode [ 687.950527][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.147044][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 689.180830][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 690.275398][T14472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 690.284732][T14472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 690.648976][T14474] loop0: detected capacity change from 0 to 4096 [ 691.432225][T14474] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 691.904780][T12609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 691.917795][T12609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 691.927015][T12609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 691.936979][T12609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 691.945207][T12609] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 691.960345][T12609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 692.367757][T12609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.382019][T12609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.392074][T12609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.415073][T12609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.430409][T12609] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 692.439187][T12609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.860801][ T2949] team0: Port device netdevsim0 removed [ 692.962448][T14500] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 692.971663][T14500] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 693.264142][T14502] loop2: detected capacity change from 0 to 4096 [ 693.768258][T14498] tipc: Enabling of bearer rejected, failed to enable media [ 693.939013][T14502] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 694.041032][T12609] Bluetooth: hci2: command tx timeout [ 694.524161][T12609] Bluetooth: hci3: command tx timeout [ 694.903069][T14479] chnl_net:caif_netlink_parms(): no params data found [ 695.382201][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 695.787899][T14535] loop2: detected capacity change from 0 to 4096 [ 696.150522][T12609] Bluetooth: hci2: command tx timeout [ 696.508757][T14535] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 696.599956][T12609] Bluetooth: hci3: command tx timeout [ 697.698970][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.706470][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.718163][T14479] bridge_slave_0: entered allmulticast mode [ 697.727247][T14479] bridge_slave_0: entered promiscuous mode [ 697.880015][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.895805][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.913394][T14479] bridge_slave_1: entered allmulticast mode [ 697.921749][T14479] bridge_slave_1: entered promiscuous mode [ 697.945835][T14488] chnl_net:caif_netlink_parms(): no params data found [ 698.201861][T12609] Bluetooth: hci2: command tx timeout [ 698.286909][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.497218][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.851468][T14572] loop0: detected capacity change from 0 to 4096 [ 698.887995][T12609] Bluetooth: hci3: command tx timeout [ 699.621331][T14572] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 699.718904][T14479] team0: Port device team_slave_0 added [ 699.763804][T14479] team0: Port device team_slave_1 added [ 700.156732][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.169030][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.250091][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.318511][T12609] Bluetooth: hci2: command tx timeout [ 700.905514][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.926439][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.953271][T12609] Bluetooth: hci3: command tx timeout [ 700.964312][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.072349][T14479] hsr_slave_0: entered promiscuous mode [ 701.121863][T14479] hsr_slave_1: entered promiscuous mode [ 701.150409][T14479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.158390][T14479] Cannot create hsr debugfs directory [ 701.196869][T14488] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.205695][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.214320][T14488] bridge_slave_0: entered allmulticast mode [ 701.223092][T14488] bridge_slave_0: entered promiscuous mode [ 701.233019][T14488] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.240730][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.249073][T14488] bridge_slave_1: entered allmulticast mode [ 701.267238][T14488] bridge_slave_1: entered promiscuous mode [ 701.600518][T14597] loop0: detected capacity change from 0 to 4096 [ 702.252152][T14597] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 702.554392][ T2949] hsr_slave_0: left promiscuous mode [ 702.567719][ T2949] hsr_slave_1: left promiscuous mode [ 702.615765][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.661028][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.696054][ T2949] bridge_slave_1: left allmulticast mode [ 702.724280][ T2949] bridge_slave_1: left promiscuous mode [ 702.744892][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.787301][ T2949] bridge_slave_0: left allmulticast mode [ 702.821382][ T2949] bridge_slave_0: left promiscuous mode [ 702.860763][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.665348][ T2949] bond4 (unregistering): Released all slaves [ 703.914862][ T2949] bond3 (unregistering): Released all slaves [ 704.083211][ T2949] bond2 (unregistering): Released all slaves [ 704.108804][ T2949] bond1 (unregistering): (slave geneve2): Releasing active interface [ 704.272593][ T2949] bond1 (unregistering): Released all slaves [ 705.050303][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 705.117800][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 705.189223][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.254727][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.719127][ T2949] bond0 (unregistering): Released all slaves [ 705.858806][T14488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.033448][T14488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.164544][T14488] team0: Port device team_slave_0 added [ 706.195186][T14488] team0: Port device team_slave_1 added [ 706.455964][T14640] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 706.465276][T14640] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 706.807778][T14642] loop2: detected capacity change from 0 to 4096 [ 706.972723][T14488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.076696][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.439780][T14642] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 707.471361][T14488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.503155][T14488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.521544][T14488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.608204][T14488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.960589][T14488] hsr_slave_0: entered promiscuous mode [ 707.980834][T14488] hsr_slave_1: entered promiscuous mode [ 707.990986][T14488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.998673][T14488] Cannot create hsr debugfs directory [ 708.020195][T14653] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2679'. [ 708.171542][ T2949] IPVS: stop unused estimator thread 0... [ 708.952713][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'. [ 708.987031][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2680'. [ 709.073578][T12985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.234279][T14673] loop0: detected capacity change from 0 to 4096 [ 709.251717][T14673] EXT4-fs: inline encryption not supported [ 709.344209][T12985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.614350][T12985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.668783][T14673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 709.686301][T14673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 709.747345][T14673] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 709.777294][T14673] System zones: 0-5 [ 709.790500][T12985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.805200][T14673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.008377][T14666] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 710.102115][T14479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.140513][T14479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.241813][T14689] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2686'. [ 710.256849][T14479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.403293][T14479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.416626][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.775629][T14488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 710.891367][T14488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.197851][T14488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 711.536528][T14488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.314598][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 712.376129][T14707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2689'. [ 713.453000][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.551970][T14733] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2693'. [ 713.564581][T14488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.771964][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 713.832365][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.926307][T14488] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.965368][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.972611][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.171920][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.179162][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.208187][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.215476][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.310755][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.318007][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.364844][T14753] syzkaller0: entered promiscuous mode [ 714.380675][T14753] syzkaller0: entered allmulticast mode [ 714.876345][T12985] hsr_slave_0: left promiscuous mode [ 714.896578][T12985] hsr_slave_1: left promiscuous mode [ 714.908239][T12985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.934676][T12985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.948355][T14768] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2700'. [ 714.969349][T12985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.993399][T12985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.058131][T12985] bridge_slave_1: left allmulticast mode [ 715.067735][T12985] bridge_slave_1: left promiscuous mode [ 715.081142][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.131400][T12985] bridge_slave_0: left allmulticast mode [ 715.137229][T12985] bridge_slave_0: left promiscuous mode [ 715.144878][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.245613][T12985] veth1_macvtap: left promiscuous mode [ 715.251405][T12985] veth0_macvtap: left promiscuous mode [ 715.267866][T12985] veth1_vlan: left promiscuous mode [ 715.292845][T12985] veth0_vlan: left promiscuous mode [ 715.536681][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 715.554594][T14766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2699'. [ 717.092979][T12985] team0 (unregistering): Port device team_slave_1 removed [ 717.157766][T12985] team0 (unregistering): Port device team_slave_0 removed [ 717.229649][T12985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.312680][T12985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.874812][T12985] bond0 (unregistering): Released all slaves [ 718.095332][T14479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 718.130299][T14479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 718.198029][T14488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 718.246528][T14488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.254077][T14488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.289273][T14479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.354659][T14825] loop0: detected capacity change from 0 to 1024 [ 719.391500][T14825] EXT4-fs: Ignoring removed bh option [ 719.431106][T14825] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 719.551614][T14825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.966453][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 720.100243][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2708'. [ 720.265906][T14847] overlayfs: failed to resolve './bus': -2 [ 720.379628][T14846] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 720.802984][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.976720][T14488] veth0_vlan: entered promiscuous mode [ 721.059032][T14488] veth1_vlan: entered promiscuous mode [ 721.242617][T14488] veth0_macvtap: entered promiscuous mode [ 721.283858][T14479] veth0_vlan: entered promiscuous mode [ 721.319028][T14488] veth1_macvtap: entered promiscuous mode [ 721.378931][T14479] veth1_vlan: entered promiscuous mode [ 721.475360][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.509916][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.542370][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.559882][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.603388][T14488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.673192][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.758180][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.791395][T14488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.839969][T14488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.872029][T14488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.926062][T14488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.970502][T14488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.991663][T14488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.007372][T14488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.205928][T14479] veth0_macvtap: entered promiscuous mode [ 722.316358][T14479] veth1_macvtap: entered promiscuous mode [ 723.130584][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.138523][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.211694][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.279640][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.344874][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.390048][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.440035][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.469161][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.497604][T14479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.616557][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.637645][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.668198][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.689336][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.710335][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.738349][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.786353][T14479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.832456][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.847487][T14479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.885314][T14479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.888498][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.919689][T14479] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.940165][T14479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.956096][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 723.983296][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 724.319433][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.389994][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.491026][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2636'. [ 724.636616][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.690487][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.891508][ T9795] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 725.114434][ T9795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.135036][ T9795] usb 7-1: config 0 has no interfaces? [ 725.158877][ T9795] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 725.204734][ T9795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.251009][ T9795] usb 7-1: config 0 descriptor?? [ 726.210570][ T5101] usb 7-1: USB disconnect, device number 2 [ 726.308566][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 726.352917][T14920] vlan0: entered allmulticast mode [ 726.359293][T14920] veth0_vlan: entered allmulticast mode [ 727.701499][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2728'. [ 727.764913][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2728'. [ 727.820644][T14951] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2734'. [ 728.281706][T14969] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2736'. [ 728.690256][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 728.926175][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.104386][ T23] usb 6-1: config 0 has no interfaces? [ 729.246389][ T23] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.313807][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.364502][ T23] usb 6-1: config 0 descriptor?? [ 729.885737][T11005] usb 6-1: USB disconnect, device number 2 [ 730.050134][T14992] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2743'. [ 732.923879][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 732.975388][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2746'. [ 733.658645][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2758'. [ 733.697474][T15046] bridge0: port 3(batadv1) entered blocking state [ 734.003144][T15046] bridge0: port 3(batadv1) entered disabled state [ 734.204316][T15046] batadv1: entered allmulticast mode [ 734.435982][T15046] batadv1: entered promiscuous mode [ 734.481717][ T2949] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 734.491667][ T2949] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 734.807164][T15060] netlink: 'syz.0.2762': attribute type 39 has an invalid length. [ 737.317911][T15084] loop0: detected capacity change from 0 to 4096 [ 737.372466][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2767'. [ 737.391292][T15084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 737.421721][T15084] EXT4-fs (loop0): Test dummy encryption mode enabled [ 737.441412][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2767'. [ 737.513435][T15084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.358487][T15084] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 739.621867][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.298887][T15118] netlink: 'syz.6.2777': attribute type 39 has an invalid length. [ 741.056474][T15143] 9pnet_fd: Insufficient options for proto=fd [ 743.387201][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888021dd2800: rx timeout, send abort [ 743.399403][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888021dd2800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 743.700236][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2782'. [ 743.744060][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2782'. [ 745.240852][T15177] netlink: 'syz.5.2791': attribute type 39 has an invalid length. [ 746.198428][T15204] loop5: detected capacity change from 0 to 7 [ 746.263110][T15204] Dev loop5: unable to read RDB block 7 [ 746.298076][T15204] loop5: AHDI p1 p2 p3 [ 746.308679][T15204] loop5: partition table partially beyond EOD, truncated [ 746.341826][T15204] loop5: p1 start 1818582900 is beyond EOD, truncated [ 746.355063][T15204] loop5: p3 start 335544320 is beyond EOD, truncated [ 746.590690][T15212] netlink: 'syz.0.2805': attribute type 39 has an invalid length. [ 747.514380][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.521057][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.914079][T15243] loop2: detected capacity change from 0 to 2048 [ 749.143897][ T28] audit: type=1326 audit(1784998759.909:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.5.2811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f980959de99 code=0x0 [ 749.330414][T15243] ext4: Unknown parameter 'smackfstransmute' [ 750.759310][T15264] netlink: 'syz.2.2815': attribute type 39 has an invalid length. [ 751.503727][T15274] loop2: detected capacity change from 0 to 4096 [ 751.835039][T15274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.845966][T15274] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.2820: corrupted inode contents [ 753.381007][T15274] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #15: comm syz.2.2820: mark_inode_dirty error [ 753.501344][T15274] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.2820: corrupted inode contents [ 753.587965][T15274] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #15: comm syz.2.2820: mark_inode_dirty error [ 753.630260][T15274] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.2820: corrupted inode contents [ 753.703895][T15274] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #15: comm syz.2.2820: mark_inode_dirty error [ 753.870239][T15274] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.2820: corrupted inode contents [ 753.945391][T15274] EXT4-fs error (device loop2): ext4_truncate:4302: inode #15: comm syz.2.2820: mark_inode_dirty error [ 753.983450][T15274] EXT4-fs error (device loop2) in ext4_setattr:5683: Corrupt filesystem [ 754.239202][T15274] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.2820: corrupted inode contents [ 754.439524][T15274] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 754.934859][T12607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.278806][T15315] netlink: 'syz.2.2828': attribute type 39 has an invalid length. [ 758.654985][T15352] netlink: 'syz.0.2839': attribute type 39 has an invalid length. [ 762.300065][T15389] tipc: Can't bind to reserved service type 2 [ 764.906593][T15430] loop0: detected capacity change from 0 to 4096 [ 764.925866][T15430] EXT4-fs (loop0): Test dummy encryption mode enabled [ 765.142656][T15430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.056949][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.089383][ T28] audit: type=1326 audit(1784998777.129:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 766.188975][ T28] audit: type=1326 audit(1784998777.129:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 766.481242][ T28] audit: type=1326 audit(1784998777.129:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 766.568666][ T28] audit: type=1326 audit(1784998777.129:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.200130][ T28] audit: type=1326 audit(1784998777.129:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.285677][ T28] audit: type=1326 audit(1784998777.129:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.309901][ T28] audit: type=1326 audit(1784998777.129:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.334611][ T28] audit: type=1326 audit(1784998777.129:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.358736][ T28] audit: type=1326 audit(1784998777.129:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.406581][ T28] audit: type=1326 audit(1784998777.129:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.6.2865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb6c159de99 code=0x7ffc0000 [ 767.592154][T15466] loop2: detected capacity change from 0 to 512 [ 767.619139][T15466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 767.695737][T15466] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2868: inode has both inline data and extents flags [ 767.720144][T15466] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2868: couldn't read orphan inode 15 (err -117) [ 767.767497][T15466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.444901][T15484] loop5: detected capacity change from 0 to 512 [ 769.491383][T15484] EXT4-fs: inline encryption not supported [ 769.588190][T15484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 770.768483][T15484] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 770.833388][T15484] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2872: invalid indirect mapped block 2683928664 (level 1) [ 770.976023][T15484] EXT4-fs (loop5): 1 truncate cleaned up [ 771.025792][T15484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.426401][T14479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.741374][T12607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.103193][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2876'. [ 775.579543][T15572] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 775.941806][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'. [ 776.679724][T15571] syz.5.2896 (15571): drop_caches: 2 [ 776.944763][T15596] loop2: detected capacity change from 0 to 512 [ 776.973205][T15597] loop5: detected capacity change from 0 to 128 [ 776.996729][T15596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 777.065617][T15596] EXT4-fs (loop2): 1 truncate cleaned up [ 777.073082][T15596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.340975][T15605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 777.350350][T15605] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 779.601349][T15605] loop0: detected capacity change from 0 to 4096 [ 780.162512][T15605] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 780.281991][T12607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.253862][T12609] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 783.755213][T15659] loop6: detected capacity change from 0 to 1024 [ 783.783394][T15659] EXT4-fs: Ignoring removed bh option [ 783.831764][T15659] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 783.948644][T15659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.035898][T15670] netlink: 'syz.0.2918': attribute type 1 has an invalid length. [ 784.121889][T15670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.211320][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.251869][T15671] loop2: detected capacity change from 0 to 4096 [ 784.259434][T15671] EXT4-fs: inline encryption not supported [ 784.297697][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.325086][T15671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 784.354327][T15671] EXT4-fs (loop2): Test dummy encryption mode enabled [ 784.392616][T15671] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 784.420295][T15671] System zones: 0-5 [ 784.428248][T15671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.258860][T15670] bond1 (unregistering): Released all slaves [ 785.920545][T12607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.283596][T15702] loop2: detected capacity change from 0 to 512 [ 786.527788][T15702] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 786.586213][T15702] FAT-fs (loop2): Filesystem has been set read-only [ 786.637271][T15711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2927'. [ 786.971482][T15659] netlink: 'syz.6.2916': attribute type 2 has an invalid length. [ 787.481211][T14488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.179581][T15735] netlink: 'syz.0.2934': attribute type 1 has an invalid length. [ 788.319045][T15735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.340909][T15742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.349723][T15742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.602803][T15748] netlink: 'syz.6.2937': attribute type 39 has an invalid length. [ 790.896105][T15776] loop6: detected capacity change from 0 to 4096 [ 790.930034][T15776] EXT4-fs: inline encryption not supported [ 790.968223][T15776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 791.013547][T15776] EXT4-fs (loop6): Test dummy encryption mode enabled [ 791.041048][T15776] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 791.061043][T15776] System zones: 0-5 [ 791.087683][T15776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.960783][T15792] netlink: 'syz.2.2946': attribute type 39 has an invalid length. [ 792.048907][T14488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.344203][T15802] netlink: 'syz.6.2947': attribute type 1 has an invalid length. [ 792.417972][T15802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.719917][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 792.733901][T15788] loop0: detected capacity change from 0 to 32768 [ 792.836052][T15788] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 792.922975][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.964792][T15788] XFS (loop0): Ending clean mount [ 792.980552][ T23] usb 7-1: config 0 has no interfaces? [ 793.036398][ T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.089073][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.174565][ T23] usb 7-1: config 0 descriptor?? [ 794.598457][T14311] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 794.926619][T15802] bond1 (unregistering): Released all slaves [ 795.060475][ T9] usb 7-1: USB disconnect, device number 3 [ 795.672806][T15854] netlink: 'syz.2.2956': attribute type 39 has an invalid length. [ 798.480568][T15893] netlink: 'syz.5.2965': attribute type 1 has an invalid length. [ 798.611838][T15893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.880150][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 798.958691][T15898] netlink: 'syz.6.2966': attribute type 39 has an invalid length. [ 799.080746][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.120160][ T9] usb 6-1: config 0 has no interfaces? [ 799.150208][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.179760][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.243392][ T9] usb 6-1: config 0 descriptor?? [ 799.937530][T15903] loop6: detected capacity change from 0 to 4096 [ 799.953087][T15903] EXT4-fs: inline encryption not supported [ 799.989647][T15903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 800.023061][T15903] EXT4-fs (loop6): Test dummy encryption mode enabled [ 800.053379][T15903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 800.074144][T15903] System zones: 0-5 [ 800.097301][T15903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.375819][T15893] bond1 (unregistering): Released all slaves [ 800.553357][ T23] usb 6-1: USB disconnect, device number 3 [ 800.685356][T12609] Bluetooth: hci4: command 0x0406 tx timeout [ 800.713939][T14488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.915468][T15928] netlink: 'syz.0.2975': attribute type 39 has an invalid length. [ 803.225472][T15931] loop0: detected capacity change from 0 to 2048 [ 803.307456][T15931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.358884][T15931] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.899166][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.231720][T15958] netlink: 'syz.2.2984': attribute type 39 has an invalid length. [ 807.116306][T15961] loop5: detected capacity change from 0 to 32768 [ 807.187288][T15961] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 807.230339][T15976] loop0: detected capacity change from 0 to 512 [ 807.248474][T15976] EXT4-fs: inline encryption not supported [ 807.280904][T15976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 807.356821][T15961] XFS (loop5): Ending clean mount [ 807.395063][T15976] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 807.425013][T15976] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2988: invalid indirect mapped block 2683928664 (level 1) [ 807.512699][T15976] EXT4-fs (loop0): 1 truncate cleaned up [ 807.559007][T15976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.519208][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.588618][T15985] loop6: detected capacity change from 0 to 4096 [ 808.632577][T15985] EXT4-fs: inline encryption not supported [ 808.670602][T15985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 808.679167][T15985] EXT4-fs (loop6): Test dummy encryption mode enabled [ 808.793225][T15985] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 808.805179][T15985] System zones: 0-5 [ 808.850141][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.856623][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.876491][T15985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.445581][T14488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.896418][T15998] syzkaller0: entered promiscuous mode [ 810.081979][T15998] syzkaller0: entered allmulticast mode [ 810.806549][T16013] loop0: detected capacity change from 0 to 512 [ 810.831782][T16013] EXT4-fs: inline encryption not supported [ 810.877295][T16013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 810.933577][T16013] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 810.981204][T16013] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2997: invalid indirect mapped block 2683928664 (level 1) [ 811.046223][T16013] EXT4-fs (loop0): 1 truncate cleaned up [ 811.065934][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3000'. [ 811.087473][T16013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.452920][T14479] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 811.786798][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 811.786929][ T28] audit: type=1800 audit(1784998822.779:68): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2997" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 812.082849][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.163313][T16057] dummy_hcd dummy_hcd.0: remove, state 1 [ 814.592432][T16057] usb usb1: USB disconnect, device number 1 [ 814.593306][T16057] usb 1-1: USB disconnect, device number 2 [ 815.015446][T16057] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 816.109863][T12609] Bluetooth: hci2: command 0x0406 tx timeout [ 816.677994][T16062] loop6: detected capacity change from 0 to 32768 [ 816.901726][T16062] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 817.443595][T16057] dummy_hcd dummy_hcd.0: stopped [ 817.448627][T16057] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 817.526060][T16062] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 817.526921][T16062] XFS (loop6): log mount failed [ 821.309754][T16165] loop6: detected capacity change from 0 to 32768 [ 821.447702][T16165] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 821.518520][T16199] 9pnet_fd: Insufficient options for proto=fd [ 821.564147][T16165] XFS (loop6): Ending clean mount [ 821.830422][T16210] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3036'. [ 821.856178][T16214] loop0: detected capacity change from 0 to 512 [ 821.911170][T16214] EXT4-fs: inline encryption not supported [ 821.960155][T16214] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 822.020957][T16214] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 822.050868][T16214] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3037: invalid indirect mapped block 2683928664 (level 1) [ 822.066169][T16214] EXT4-fs (loop0): 1 truncate cleaned up [ 822.073423][T16214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.320690][T16218] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 822.833767][ T28] audit: type=1800 audit(1784998833.809:69): pid=16223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3037" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 822.895993][T16218] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 823.089220][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.477494][T14488] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 825.066576][T16275] loop0: detected capacity change from 0 to 4096 [ 825.112760][T16275] EXT4-fs (loop0): Test dummy encryption mode enabled [ 825.292919][T16275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.531646][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.378381][T16299] netlink: 'syz.6.3057': attribute type 1 has an invalid length. [ 826.558924][T16299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.623417][T16303] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 826.658519][T16281] loop5: detected capacity change from 0 to 32768 [ 826.711511][T14536] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 826.923833][ T2120] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 826.952543][T16281] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 827.345300][T16281] XFS (loop5): Ending clean mount [ 828.267702][T14479] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 828.467198][T16355] loop0: detected capacity change from 0 to 512 [ 828.553310][T16355] EXT4-fs: inline encryption not supported [ 828.599030][T16355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 828.680029][T16355] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 828.700195][T16355] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3067: invalid indirect mapped block 2683928664 (level 1) [ 828.715159][T16355] EXT4-fs (loop0): 1 truncate cleaned up [ 828.722544][T16355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.330054][ T28] audit: type=1800 audit(1784998840.359:70): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3067" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 829.758999][T14311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.000747][T16374] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 830.093753][T16374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.171257][T16377] loop5: detected capacity change from 0 to 4096 [ 830.232358][T16379] bond2: (slave gretap3): Enslaving as a backup interface with an up link [ 830.233896][T16377] EXT4-fs (loop5): Test dummy encryption mode enabled [ 830.277761][T16377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.320394][ T1130] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 830.472175][T14963] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 830.572234][T14479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.261097][ C1] general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN [ 831.273059][ C1] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057] [ 831.281521][ C1] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 831.288942][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 831.299038][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 831.305894][ C1] RIP: 0010:dummy_queue+0x1a7/0x8c0 [ 831.311210][ C1] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 22 80 25 fb 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 ea 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 831.330889][ C1] RSP: 0018:ffffc900001f0b38 EFLAGS: 00010206 [ 831.337010][ C1] RAX: 000000000000000a RBX: ffff88807af90910 RCX: dffffc0000000000 [ 831.345035][ C1] RDX: ffff88801aab5a00 RSI: 0000000000000003 RDI: 0000000000000005 [ 831.353059][ C1] RBP: ffff88807af90900 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 831.361089][ C1] R10: dffffc0000000000 R11: fffffbfff223d6be R12: 0000000000000050 [ 831.369128][ C1] R13: 1ffff1100f5f2120 R14: ffff8881466b40e0 R15: ffff8881466b4c00 [ 831.377208][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 831.386220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.392870][ C1] CR2: 00007fb77101edd0 CR3: 000000002e107000 CR4: 00000000003506e0 [ 831.400906][ C1] Call Trace: [ 831.404238][ C1] [ 831.407157][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 831.413126][ C1] ? _raw_spin_unlock+0x40/0x40 [ 831.418048][ C1] usb_ep_queue+0xea/0x350 [ 831.422541][ C1] eth_start_xmit+0xa51/0x1130 [ 831.427403][ C1] ? ncm_close+0x130/0x130 [ 831.431882][ C1] ncm_tx_timeout+0x84/0xa0 [ 831.436444][ C1] __hrtimer_run_queues+0x525/0xc10 [ 831.441757][ C1] ? hrtimer_interrupt+0x980/0x980 [ 831.446935][ C1] ? read_tsc+0x9/0x20 [ 831.451109][ C1] hrtimer_run_softirq+0x177/0x290 [ 831.456288][ C1] handle_softirqs+0x27d/0x820 [ 831.461120][ C1] ? read_tsc+0x9/0x20 [ 831.465270][ C1] ? ktime_get+0x24b/0x280 [ 831.469931][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 831.474761][ C1] ? do_softirq+0x1a0/0x1a0 [ 831.479324][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 831.484679][ C1] __irq_exit_rcu+0xd3/0x190 [ 831.489336][ C1] ? irq_exit_rcu+0x20/0x20 [ 831.493906][ C1] irq_exit_rcu+0x9/0x20 [ 831.498321][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 831.504029][ C1] [ 831.507039][ C1] [ 831.510036][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.516076][ C1] RIP: 0010:preempt_count_add+0x42/0x1a0 [ 831.521789][ C1] Code: 2f 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 eb 00 00 00 83 3d 1e 3c d2 15 00 75 07 65 8b 05 dd cf a6 7e 65 01 3d d6 cf a6 7e <48> c7 c0 80 24 2f 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 [ 831.541657][ C1] RSP: 0018:ffffc90000b8f4f8 EFLAGS: 00000282 [ 831.547781][ C1] RAX: 0000000080000001 RBX: 1ffff92000171ebd RCX: ffffffff972f2403 [ 831.555814][ C1] RDX: ffff88801aab5a00 RSI: 0000000000000001 RDI: 0000000000000001 [ 831.563840][ C1] RBP: 0000000000000001 R08: ffffc90000b8f6b0 R09: 0000000000000007 [ 831.571866][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90000b8fb00 [ 831.579936][ C1] R13: ffffc90000b8f5e8 R14: ffffc90000b8f620 R15: dffffc0000000000 [ 831.587982][ C1] unwind_next_frame+0xb7/0x2990 [ 831.592995][ C1] ? nsim_dev_trap_report_work+0x723/0xa90 [ 831.598871][ C1] ? nsim_dev_trap_report_work+0x723/0xa90 [ 831.604740][ C1] ? stack_trace_save+0x100/0x100 [ 831.609838][ C1] arch_stack_walk+0x144/0x190 [ 831.614674][ C1] ? nsim_dev_trap_report_work+0x723/0xa90 [ 831.620561][ C1] stack_trace_save+0xaa/0x100 [ 831.625394][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 831.630596][ C1] ? __asan_memset+0x22/0x40 [ 831.635283][ C1] ? chacha_block_generic+0x5ea/0xda0 [ 831.640762][ C1] kasan_set_track+0x4e/0x70 [ 831.645414][ C1] ? kasan_set_track+0x4e/0x70 [ 831.650244][ C1] ? kasan_save_free_info+0x28/0x40 [ 831.655505][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 831.660861][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 831.666546][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 831.671638][ C1] ? skb_release_data+0x609/0x7f0 [ 831.676751][ C1] ? consume_skb+0xb2/0x110 [ 831.681346][ C1] ? nsim_dev_trap_report_work+0x723/0xa90 [ 831.687242][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 831.692330][ C1] kasan_save_free_info+0x28/0x40 [ 831.697424][ C1] ____kasan_slab_free+0x126/0x1f0 [ 831.702601][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 831.708141][ C1] ? skb_release_data+0x609/0x7f0 [ 831.713224][ C1] __kmem_cache_free+0xba/0x1f0 [ 831.718167][ C1] skb_release_data+0x609/0x7f0 [ 831.723085][ C1] consume_skb+0xb2/0x110 [ 831.727476][ C1] nsim_dev_trap_report_work+0x723/0xa90 [ 831.733183][ C1] ? process_scheduled_works+0x975/0x1600 [ 831.738982][ C1] process_scheduled_works+0xa60/0x1600 [ 831.744619][ C1] ? worker_attach_to_pool+0x370/0x370 [ 831.750144][ C1] ? assign_work+0x3cc/0x5d0 [ 831.754793][ C1] worker_thread+0xa5e/0xfe0 [ 831.759469][ C1] kthread+0x2fa/0x390 [ 831.763597][ C1] ? pr_cont_work+0x550/0x550 [ 831.768329][ C1] ? kthread_blkcg+0xd0/0xd0 [ 831.772974][ C1] ret_from_fork+0x48/0x80 [ 831.777455][ C1] ? kthread_blkcg+0xd0/0xd0 [ 831.782102][ C1] ret_from_fork_asm+0x11/0x20 [ 831.786986][ C1] [ 831.790108][ C1] Modules linked in: [ 831.794336][ C1] ---[ end trace 0000000000000000 ]--- [ 831.799862][ C1] RIP: 0010:dummy_queue+0x1a7/0x8c0 [ 831.805130][ C1] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 22 80 25 fb 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 ea 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 831.824831][ C1] RSP: 0018:ffffc900001f0b38 EFLAGS: 00010206 [ 831.830986][ C1] RAX: 000000000000000a RBX: ffff88807af90910 RCX: dffffc0000000000 [ 831.839108][ C1] RDX: ffff88801aab5a00 RSI: 0000000000000003 RDI: 0000000000000005 [ 831.847340][ C1] RBP: ffff88807af90900 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd [ 831.855488][ C1] R10: dffffc0000000000 R11: fffffbfff223d6be R12: 0000000000000050 [ 831.863541][ C1] R13: 1ffff1100f5f2120 R14: ffff8881466b40e0 R15: ffff8881466b4c00 [ 831.871591][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 831.880632][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.887279][ C1] CR2: 00007fb77101edd0 CR3: 000000002e107000 CR4: 00000000003506e0 [ 831.895346][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 831.903161][ C1] Kernel Offset: disabled [ 831.907524][ C1] Rebooting in 86400 seconds..