last executing test programs: 1m4.020915798s ago: executing program 32 (id=50): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f00000001c0)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, {0x8, 0x5, 0x9, 0x55, "25ed27475dfebd5d5edd5ec75be7a093dcee5e5faa951d26261f6e9b342c4c2ddaebb529cc1c5e0aa85ec19f9cdf78c9a8fd4d26d586b83c128a4868d6c51cc5bcd0bc30e447fd9c6b2f1db94b06081149737e9c8f"}}, 0x61) 1m2.283387624s ago: executing program 33 (id=93): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) 57.330890121s ago: executing program 34 (id=215): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 55.670900111s ago: executing program 35 (id=253): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) 54.267709549s ago: executing program 0 (id=270): r0 = syz_ublk_setup_io_uring(0x9d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x30ee, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0xfffffffe, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 53.799563451s ago: executing program 36 (id=278): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 53.424897316s ago: executing program 0 (id=283): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x929e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x800, 0x0) 53.336133821s ago: executing program 0 (id=285): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7bea, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) 53.248745738s ago: executing program 0 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x3c}}, 0x4c800) 52.86327456s ago: executing program 0 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 52.69460453s ago: executing program 0 (id=300): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 45.577879139s ago: executing program 37 (id=408): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x92}, 0x9}, 0x80) 37.658947098s ago: executing program 38 (id=300): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 34.835066462s ago: executing program 6 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write(r1, 0x0, 0x0) 33.922321481s ago: executing program 6 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000540)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0xfffffffd, 0x800, 0xfffe, 0x3, 0x3a2c, 0x7, 0x0, 0x0, 0x152, 0x76a3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 33.496041691s ago: executing program 6 (id=595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x3, 0x34, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @loopback}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4932, 0x0, 0x4e23, 0x4e24}, 0x3, 0x3}}}}}}}, 0x0) 33.287078383s ago: executing program 6 (id=587): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000003c40)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) 33.233249337s ago: executing program 6 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 33.088642278s ago: executing program 6 (id=593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000140)=0xfffffffc, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 22.319129654s ago: executing program 2 (id=810): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x720}, 0x1c, 0x0}}], 0x1, 0x60004080) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002142, 0x0) 22.318974919s ago: executing program 2 (id=811): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 22.280158s ago: executing program 2 (id=813): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[r5, r5], 0x2, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 22.237943535s ago: executing program 2 (id=814): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f00000006c0)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0xed}}, {@lazytime}, {@noload}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 22.158072097s ago: executing program 2 (id=816): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000001080)) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 21.377580755s ago: executing program 2 (id=830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44800}], 0x1, 0x20040805) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x604, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x101}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x59c, 0x8, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x234, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @local, 0x8000000}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5ee5472257126026708a47b2944b3c4cb7e99eda4295ebd4cb36d92cec48b52c"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffb}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ecb7e0b71258da28d6f4d4ba71938af18302b82dad3a68be013e95e169df02ef"}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "071279ae1101e656b3f6aaccb4aba59b0b7471bdb20140b5f9482e2a6ebd0027"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7bea334159dddda8705a4078e81ea5bf48843be0a750c7937187fb74e4ba2149"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1d1230878fe20f401c50ce6ee86166bce864f0ddb5dcb2da25a0106ede2474fa"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "93e342bf04d3e2e28a160f93902ef72eed016adabdd09a42c086339b2a77ac25"}]}, {0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x604}}, 0x0) 21.275357189s ago: executing program 39 (id=830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44800}], 0x1, 0x20040805) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x604, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x101}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x59c, 0x8, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x234, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @local, 0x8000000}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5ee5472257126026708a47b2944b3c4cb7e99eda4295ebd4cb36d92cec48b52c"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffb}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ecb7e0b71258da28d6f4d4ba71938af18302b82dad3a68be013e95e169df02ef"}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "071279ae1101e656b3f6aaccb4aba59b0b7471bdb20140b5f9482e2a6ebd0027"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7bea334159dddda8705a4078e81ea5bf48843be0a750c7937187fb74e4ba2149"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1d1230878fe20f401c50ce6ee86166bce864f0ddb5dcb2da25a0106ede2474fa"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "93e342bf04d3e2e28a160f93902ef72eed016adabdd09a42c086339b2a77ac25"}]}, {0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x604}}, 0x0) 18.310297128s ago: executing program 7 (id=881): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) r0 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x2600, 0xc00, 0x2, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) 17.909323615s ago: executing program 40 (id=593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000140)=0xfffffffc, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 17.896984127s ago: executing program 7 (id=886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a68733", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) shutdown(r0, 0x1) 17.754895244s ago: executing program 7 (id=888): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007d123d57d108d222609e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 17.667107884s ago: executing program 7 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 17.567028605s ago: executing program 7 (id=892): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 17.059086668s ago: executing program 7 (id=896): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x30, 0x2, 0x81, 0x1000}, {0x48, 0x44, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 17.020426797s ago: executing program 41 (id=896): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x30, 0x2, 0x81, 0x1000}, {0x48, 0x44, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 7.076083297s ago: executing program 3 (id=1107): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000015ee00)={&(0x7f000015ecc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000015edc0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 6.976124647s ago: executing program 3 (id=1108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="14010000270001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 6.901716802s ago: executing program 3 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002d"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040) 6.799581704s ago: executing program 3 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 6.634969876s ago: executing program 3 (id=1113): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x2f47, &(0x7f0000000480)={0x0, 0xe29b, 0x800, 0x3, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) io_uring_enter(r1, 0x1, 0x2, 0x1, 0x0, 0x0) 5.287180509s ago: executing program 3 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x88) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000100), 0x4) 5.266259467s ago: executing program 42 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x88) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000100), 0x4) 5.093794991s ago: executing program 1 (id=1147): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 5.017150542s ago: executing program 1 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8121}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 4.931992299s ago: executing program 1 (id=1152): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff01"], 0x15) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) 4.860302155s ago: executing program 1 (id=1155): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x2cb525b5}}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4.775345977s ago: executing program 1 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.401859745s ago: executing program 5 (id=1179): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.343739074s ago: executing program 5 (id=1180): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r3 = dup(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) 3.285417012s ago: executing program 5 (id=1182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3.208244256s ago: executing program 5 (id=1184): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@fat=@tz_utc}, {@shortname_mixed}, {@fat=@errors_continue}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@utf8}]}, 0x0, 0x2b4, &(0x7f0000002880)="$eJzs3MFr024YwPFn7bZ2HVt7GD/YD8QHveglbPUvKLKBWFDmKupByFyqpbEpSa1UxO3m1b9j6M2TgvoP7OLNu3gZguBlBzGyNtm6Lro6ndnW7wdG3r1PnuQNbzKeBPZu3Hh2v1r2jLLZkERaJSGyKpsiua1WYCjYJtrtUem2KufHv344de3mrcuFYnFuQXW+sHghr6qTp988fPz8zLvG+PWXk69Tsp67vfEl/3H9v/Xpje+L4dGdF9OmLjlOw1yyLV2ueFVD9aptmZ6llZpnuQ011Q3jZdup11tq1pYnMnXX8jw1ay2tWi1tONpwW2reNSs1NQxDJzIyaJK/nVFaW1gwC4cyGMRhLKrTdQtmMjJYWvsXgwIAAEdLXPX/vYqnFU9rzlZ9/4v6PyHd8X3qf5GBrv8Pqv7zUGQ9ieNlq/7PBM/vbtT/AAAAAAAAAAAAAAAAAAAAAAAcB5u+n/V9Pxtuw5+UiKRFJPw97nHicDD/g63rH/fSIvbTZqlZ6mw78UJZKmKLJTMjIt/a90Og056/VJyb0bacvLVXgvyVZikpqTA/lIvOn+3ka3f+ioxIpvv8ecnKVHR+PiK/WRqVc2f9VHBmSwzJyvs74ogty+37eif/yazqxSvFnvyx9n4AAAAAAJwEhm7b8/7ejhsaLhvSE+907nwfkOw+3wd63q+H5f/h+K4bAAAAAIBB4o1K1bRty/Vaj056I1zM9q8cUCTuy0n3u/OwiAQ9r47KXPTTSIhIb2hkT090I/lns/xZZPdzMRX7dB+44Se379VPDzpPQD/pcf5VAgAAAHAYwqJ/KO6BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwwPpdRSzc/yCLkHWdLhnPVQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHw48AAAD//wRnFDI=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 3.110901184s ago: executing program 5 (id=1186): syz_emit_ethernet(0x68, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2a0210", 0x32, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x4, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472ee"}]}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x3808c4e, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX], 0xf5, 0x331, &(0x7f0000000080)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.090109986s ago: executing program 4 (id=1187): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x40000009, @local, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 2.990849233s ago: executing program 4 (id=1189): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.856473362s ago: executing program 4 (id=1190): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 2.767059621s ago: executing program 4 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 2.766810386s ago: executing program 5 (id=1192): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 2.721789445s ago: executing program 43 (id=1192): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 2.710697299s ago: executing program 4 (id=1195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8864}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 2.442160315s ago: executing program 4 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1181, &(0x7f0000002b40)=ANY=[], 0x0) 2.332010236s ago: executing program 44 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1181, &(0x7f0000002b40)=ANY=[], 0x0) 1.443169111s ago: executing program 1 (id=1211): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/145, 0x91}], 0x1, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/147, 0x93}], 0x1, 0x0) 1.432600004s ago: executing program 45 (id=1211): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/145, 0x91}], 0x1, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/147, 0x93}], 0x1, 0x0) 1.430127713s ago: executing program 9 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x70bd2d, 0x7f, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) 1.289977932s ago: executing program 9 (id=1215): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) close(0x3) 1.21586923s ago: executing program 9 (id=1216): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x33) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x40) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) 1.180018605s ago: executing program 9 (id=1217): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.126155985s ago: executing program 9 (id=1218): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x20) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_read_part_table(0x5c9, &(0x7f0000000b80)="$eJzs0rFrG2cYB+D3FBs1hSATAilkCURkUhJQhmaQhmAUoSUSIQ2hZA5kSIdAhgxBRsmcpP9AjGsbjBdj6OhurmUwNsiT0Wg8F2y8aOkVVQc1ph0Kdu2G5xmku/d7v/vdx3vB/1oufkvTNImINJ+Vfv1r9cKRzrG/2f3dYu1B43rr/qPHuYh4FhGtb+Ln4UoS8X0ceepytqOZ3Tfy5d7MxuTB4sTmje1ucTY3KreHP1MR8XJ3rpBtGT/J8/JlWaquFd69f1X/8Kb6Yqc+Fnef36pd+1j74cdvf6q0n1ytPB1+WF9FrKT/Rf7bvWLv3vxW2tz/fOn2eLc3KK9nfaXkdPI5W8fnP32l0+8MHt5ceH2ndLm/2v6Uzf3Q/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFO29Mvv6Z/eVF/s1N/u3X1+q3btY+1CRFTaT65WnuZGfSu5SCKmTj6/ulZ49/5V/UOWX+zdm99Km/ufL90e7/YG5fWsr5SceDTnwPH5T1/p9DuDhzcXXt8pXe6vtj9lcz9MYmx09XXExTN9ZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgnKs9aFxv3X/0OCKJZxExmZuYG9bT/Gg9yfqWs/9mVm/ky72ZjcmDxYnNG9vd4mwrq6/kIqYi4uXuXOGfMi+e5oH4V/4IAAD//w4ti7A=") 717.347159ms ago: executing program 8 (id=1219): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r3, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000800)={0x28, 0x6, r1, 0x0, &(0x7f0000000140)="91", 0x1, 0x5}) 627.563777ms ago: executing program 8 (id=1220): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 626.884639ms ago: executing program 9 (id=1221): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x27, 0x80000}) 372.441775ms ago: executing program 8 (id=1222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb14}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 247.064934ms ago: executing program 8 (id=1223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000002b00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @broadcast, @void, {@x25={0x805, {0x0, 0x9, 0x23}}}}, 0x0) 219.464143ms ago: executing program 8 (id=1224): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x8000, 0x0, 0x100, 0x8b, "0000000000efbc0df065ffff00"}) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 0s ago: executing program 8 (id=1225): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): kets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.040980][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.041543][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.041550][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.041562][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.052334][ T5541] hsr_slave_0: entered promiscuous mode [ 41.052651][ T5541] hsr_slave_1: entered promiscuous mode [ 41.052856][ T5541] debugfs: 'hsr0' already exists in 'hsr' [ 41.052867][ T5541] Cannot create hsr debugfs directory [ 41.285398][ T5572] Bluetooth: MGMT ver 1.23 [ 41.304007][ T5574] ip_tables: iptables: counters copy to user failed while replacing table [ 41.405639][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.229'. [ 41.407692][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.229'. [ 41.407709][ T5587] netlink: 7 bytes leftover after parsing attributes in process `syz.5.229'. [ 41.523427][ T5600] syzkaller1: entered promiscuous mode [ 41.525661][ T5600] syzkaller1: entered allmulticast mode [ 41.900405][ T5431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.903842][ T5541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 41.915653][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.917505][ T5541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 41.925600][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.930530][ T5541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 41.938759][ T5604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 41.943161][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.945940][ T5541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 41.948933][ T5541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.995991][ T5619] loop1: detected capacity change from 0 to 128 [ 42.009836][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.013015][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.025214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.025269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.029320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.029363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.068548][ T5541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.095164][ T4709] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 42.095420][ T4709] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 42.148174][ T5631] ip6erspan0: entered allmulticast mode [ 42.155460][ T4720] Bluetooth: hci3: command tx timeout [ 42.176900][ T30] audit: type=1326 audit(42.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5633 comm="syz.0.245" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb71781a8 code=0x0 [ 42.188418][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.246'. [ 42.209701][ T5641] netlink: 'syz.5.247': attribute type 1 has an invalid length. [ 42.242349][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.261729][ T5650] capability: warning: `syz.5.249' uses 32-bit capabilities (legacy support in use) [ 42.333692][ T5541] veth0_vlan: entered promiscuous mode [ 42.338237][ T5541] veth1_vlan: entered promiscuous mode [ 42.349480][ T5541] veth0_macvtap: entered promiscuous mode [ 42.352394][ T5541] veth1_macvtap: entered promiscuous mode [ 42.512981][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.515299][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.515589][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.516134][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.516530][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.556059][ T4715] Bluetooth: hci2: command tx timeout [ 42.875226][ T4715] Bluetooth: hci1: command tx timeout [ 43.562126][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.566814][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.572325][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.602724][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.666934][ T1482] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.689241][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.689275][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.704051][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.704088][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.723736][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.763824][ T5716] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 43.773832][ T5716] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 43.773868][ T5716] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 43.780389][ T15] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.780452][ T15] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.782411][ T5716] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 43.782466][ T5716] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 43.792290][ T5716] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 43.870262][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.876756][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.216'. [ 43.876797][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.216'. [ 43.896616][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.216'. [ 43.896661][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.216'. [ 43.974046][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.982654][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.984147][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.986051][ T5668] bridge_slave_0: entered allmulticast mode [ 43.987774][ T5668] bridge_slave_0: entered promiscuous mode [ 43.989940][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.991453][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.992871][ T5668] bridge_slave_1: entered allmulticast mode [ 43.994436][ T5668] bridge_slave_1: entered promiscuous mode [ 44.010210][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.018639][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.043311][ T5668] team0: Port device team_slave_0 added [ 44.051802][ T5668] team0: Port device team_slave_1 added [ 44.084049][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.086458][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.086511][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.087289][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.087307][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.087331][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.162715][ T5668] hsr_slave_0: entered promiscuous mode [ 44.168876][ T5668] hsr_slave_1: entered promiscuous mode [ 44.170336][ T5668] debugfs: 'hsr0' already exists in 'hsr' [ 44.172051][ T5668] Cannot create hsr debugfs directory [ 44.208789][ T40] bridge_slave_1: left allmulticast mode [ 44.208838][ T40] bridge_slave_1: left promiscuous mode [ 44.208935][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.211398][ T40] bridge_slave_0: left allmulticast mode [ 44.211413][ T40] bridge_slave_0: left promiscuous mode [ 44.211489][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.245884][ T4715] Bluetooth: hci3: command tx timeout [ 44.250854][ T5741] loop7: detected capacity change from 0 to 4096 [ 44.251708][ T5741] EXT4-fs: inline encryption not supported [ 44.254064][ T5741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.254093][ T5741] EXT4-fs (loop7): Test dummy encryption mode enabled [ 44.269558][ T5741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 44.269617][ T5741] System zones: 0-5 [ 44.278170][ T5741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.298741][ T5741] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 44.319220][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.322478][ T5741] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 44.339328][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.358791][ T40] bond0 (unregistering): Released all slaves [ 44.389923][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.390754][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.391039][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.391403][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.391728][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.426142][ T1482] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.426362][ T1482] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.426419][ T1482] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.426440][ T1482] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.460302][ T5541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.555942][ T4720] Bluetooth: hci0: command tx timeout [ 44.593126][ T5668] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 44.647692][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.648191][ T5668] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 44.662635][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.736183][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 44.738469][ T5668] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 44.744021][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.746461][ T5668] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 44.749458][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.801347][ T5795] VFS: Mount too revealing [ 44.812644][ T40] hsr_slave_0: left promiscuous mode [ 44.814094][ T40] hsr_slave_1: left promiscuous mode [ 44.815551][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.815580][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.817239][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.817251][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.826871][ T40] veth1_macvtap: left promiscuous mode [ 44.826930][ T40] veth0_macvtap: left promiscuous mode [ 44.826982][ T40] veth1_vlan: left promiscuous mode [ 44.827028][ T40] veth0_vlan: left promiscuous mode [ 44.956396][ T4720] Bluetooth: hci1: command tx timeout [ 45.065355][ T40] team0 (unregistering): Port device team_slave_1 removed [ 45.083525][ T40] team0 (unregistering): Port device team_slave_0 removed [ 45.271673][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.314992][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.353249][ T5840] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 45.378857][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.378906][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.379922][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.379954][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.387507][ T5840] bridge0: port 3(syz_tun) entered blocking state [ 45.387565][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 45.388561][ T5840] syz_tun: entered allmulticast mode [ 45.389660][ T5840] syz_tun: entered promiscuous mode [ 45.389956][ T5840] bridge0: port 3(syz_tun) entered blocking state [ 45.389990][ T5840] bridge0: port 3(syz_tun) entered forwarding state [ 45.460607][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 45.574562][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.576262][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.577798][ T5745] bridge_slave_0: entered allmulticast mode [ 45.579571][ T5745] bridge_slave_0: entered promiscuous mode [ 45.581731][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.583353][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.585827][ T5745] bridge_slave_1: entered allmulticast mode [ 45.587480][ T5745] bridge_slave_1: entered promiscuous mode [ 45.599548][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.611509][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.649460][ T5745] team0: Port device team_slave_0 added [ 45.664080][ T5745] team0: Port device team_slave_1 added [ 45.696257][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.696301][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.699206][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.718890][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.718928][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.718943][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.760478][ T15] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.791888][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.819881][ T5745] hsr_slave_0: entered promiscuous mode [ 45.820331][ T5745] hsr_slave_1: entered promiscuous mode [ 45.820558][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 45.820569][ T5745] Cannot create hsr debugfs directory [ 45.840137][ T5897] input: syz0 as /devices/virtual/input/input2 [ 45.932858][ T15] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.936707][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 46.036710][ T15] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.146170][ T5668] veth0_vlan: entered promiscuous mode [ 46.178103][ T15] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.190163][ T5745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 46.198370][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.198788][ T5745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 46.203126][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.212077][ T5668] veth1_vlan: entered promiscuous mode [ 46.215228][ T5745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 46.223628][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.224117][ T5745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 46.227502][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.283160][ T5668] veth0_macvtap: entered promiscuous mode [ 46.284369][ T5668] veth1_macvtap: entered promiscuous mode [ 46.318839][ T5937] loop6: detected capacity change from 0 to 256 [ 46.348936][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.350417][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.387600][ T5934] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 46.395361][ T4720] Bluetooth: hci2: command tx timeout [ 46.412558][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.445952][ T288] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.446052][ T288] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.446073][ T288] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.446090][ T288] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.470792][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 46.534446][ T15] bridge_slave_1: left allmulticast mode [ 46.534483][ T15] bridge_slave_1: left promiscuous mode [ 46.534579][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.538381][ T15] bridge_slave_0: left allmulticast mode [ 46.538419][ T15] bridge_slave_0: left promiscuous mode [ 46.538504][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.637495][ T4720] Bluetooth: hci0: command tx timeout [ 46.690765][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.712472][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.736050][ T15] bond0 (unregistering): Released all slaves [ 46.752937][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.752983][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.830472][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.869748][ T5951] gadgetfs: bound to dummy_udc driver [ 46.904491][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.906855][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.906885][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.005503][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.005559][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.009444][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.009487][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.042998][ T5745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.043053][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.043128][ T4720] Bluetooth: hci1: command tx timeout [ 47.178540][ T15] hsr_slave_0: left promiscuous mode [ 47.181135][ T15] hsr_slave_1: left promiscuous mode [ 47.181483][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.181495][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.182467][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.182478][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.208446][ T15] veth1_macvtap: left promiscuous mode [ 47.208507][ T15] veth0_macvtap: left promiscuous mode [ 47.208560][ T15] veth1_vlan: left promiscuous mode [ 47.208600][ T15] veth0_vlan: left promiscuous mode [ 47.461864][ T15] team0 (unregistering): Port device team_slave_1 removed [ 47.473067][ T15] team0 (unregistering): Port device team_slave_0 removed [ 47.544002][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 47.778108][ T6012] loop7: detected capacity change from 0 to 1024 [ 47.782698][ T6012] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 47.782742][ T6012] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 47.782806][ T6012] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.792552][ T6012] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.328: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 47.792611][ T6012] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.796286][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 47.796307][ C0] EXT4-fs (loop7): initial error at time 47: ext4_ext_check_inode:521: inode 3 [ 47.796332][ C0] EXT4-fs (loop7): last error at time 47: ext4_ext_check_inode:521: inode 3 [ 47.804571][ T6012] EXT4-fs (loop7): no journal found [ 47.805137][ T6012] EXT4-fs (loop7): can't get journal size [ 47.813819][ T6012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.938581][ T5541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.050824][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.331'. [ 48.104475][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.331'. [ 48.475674][ T4720] Bluetooth: hci2: command tx timeout [ 48.528204][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.613338][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.7.339'. [ 48.702590][ T6059] nbd: socks must be embedded in a SOCK_ITEM attr [ 48.715017][ T4720] Bluetooth: hci0: command tx timeout [ 48.720492][ T6070] loop6: detected capacity change from 0 to 128 [ 48.884570][ T4919] udevd[4919]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 48.907059][ T4919] udevd[4919]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 48.951270][ T5745] veth0_vlan: entered promiscuous mode [ 48.960355][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 48.976176][ T5745] veth1_vlan: entered promiscuous mode [ 48.984310][ T5745] veth0_macvtap: entered promiscuous mode [ 48.990525][ T5745] veth1_macvtap: entered promiscuous mode [ 48.998404][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.008429][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.115192][ T4720] Bluetooth: hci1: command tx timeout [ 49.138721][ T6099] loop7: detected capacity change from 0 to 512 [ 49.141451][ T6099] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.147339][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.147373][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.174677][ T5791] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.175241][ T5791] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.175302][ T5791] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.175323][ T5791] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.191358][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.191397][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.545219][ T6131] loop7: detected capacity change from 0 to 512 [ 49.577097][ T6131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.682920][ T5541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.893785][ T6162] loop6: detected capacity change from 0 to 512 [ 49.909391][ T6162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.995737][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.173070][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 50.461833][ T6202] loop7: detected capacity change from 0 to 4096 [ 50.467694][ T6202] EXT4-fs (loop7): Test dummy encryption mode enabled [ 50.473409][ T6202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.499246][ T6209] syz_tun: entered allmulticast mode [ 50.526324][ T6208] syz_tun: left allmulticast mode [ 50.555382][ T4720] Bluetooth: hci2: command tx timeout [ 50.614980][ T5541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.795127][ T4720] Bluetooth: hci0: command tx timeout [ 51.029237][ T6250] syzkaller1: entered promiscuous mode [ 51.029278][ T6250] syzkaller1: entered allmulticast mode [ 51.178458][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.7.397'. [ 51.690354][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 52.651748][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.654078][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.657140][ T4715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.660938][ T4715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.663542][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.812440][ T6321] sctp: [Deprecated]: syz.6.411 (pid 6321) Use of int in max_burst socket option deprecated. [ 52.812440][ T6321] Use struct sctp_assoc_value instead [ 52.882864][ T1482] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.031222][ T1482] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.149594][ T1482] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.216792][ T1482] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.288543][ T6352] mmap: syz.8.416 (6352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.298189][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.298296][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.298362][ T6313] bridge_slave_0: entered allmulticast mode [ 53.298844][ T6313] bridge_slave_0: entered promiscuous mode [ 53.300058][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.301464][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.301554][ T6313] bridge_slave_1: entered allmulticast mode [ 53.302103][ T6313] bridge_slave_1: entered promiscuous mode [ 53.311960][ T6313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.313139][ T6313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.349439][ T6313] team0: Port device team_slave_0 added [ 53.354978][ T6313] team0: Port device team_slave_1 added [ 53.374158][ T6313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.374197][ T6313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.374213][ T6313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.383054][ T1482] bridge_slave_1: left allmulticast mode [ 53.383090][ T1482] bridge_slave_1: left promiscuous mode [ 53.383754][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.385867][ T1482] bridge_slave_0: left allmulticast mode [ 53.385882][ T1482] bridge_slave_0: left promiscuous mode [ 53.385959][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.590157][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.613186][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.647470][ T1482] bond0 (unregistering): Released all slaves [ 53.660134][ T6313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.660166][ T6313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.660189][ T6313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.779183][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 53.788239][ T6313] hsr_slave_0: entered promiscuous mode [ 53.788785][ T6313] hsr_slave_1: entered promiscuous mode [ 53.790033][ T6313] debugfs: 'hsr0' already exists in 'hsr' [ 53.790050][ T6313] Cannot create hsr debugfs directory [ 53.921687][ T6378] gre2: entered promiscuous mode [ 53.998259][ T1482] hsr_slave_0: left promiscuous mode [ 54.003617][ T1482] hsr_slave_1: left promiscuous mode [ 54.003992][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.004020][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.006443][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.006456][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.018544][ T1482] veth1_macvtap: left promiscuous mode [ 54.018603][ T1482] veth0_macvtap: left promiscuous mode [ 54.018683][ T1482] veth1_vlan: left promiscuous mode [ 54.018725][ T1482] veth0_vlan: left promiscuous mode [ 54.170685][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 54.202789][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 54.307918][ T6393] gadgetfs: bound to dummy_udc driver [ 54.630251][ T6413] ip_tables: iptables: counters copy to user failed while replacing table [ 54.657349][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 54.715406][ T4720] Bluetooth: hci2: command tx timeout [ 54.760511][ T6418] evm: overlay not supported [ 54.974253][ T6313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.981903][ T6313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.984040][ T6313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.991191][ T6313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.991787][ T6313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.998114][ T6435] loop8: detected capacity change from 0 to 2048 [ 55.003060][ T6313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.003531][ T6435] EXT4-fs: Ignoring removed i_version option [ 55.007298][ T6313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.012382][ T6313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.059506][ T6435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.075952][ T6449] Invalid ELF header magic: != ELF [ 55.119047][ T6313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.122854][ T6313] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.127043][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.127086][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.128753][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.128790][ T5776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.144477][ T5668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.146531][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 55.502460][ T6313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.522082][ T6313] veth0_vlan: entered promiscuous mode [ 55.545655][ T6313] veth1_vlan: entered promiscuous mode [ 55.583719][ T6313] veth0_macvtap: entered promiscuous mode [ 55.591639][ T6313] veth1_macvtap: entered promiscuous mode [ 55.618767][ T6313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.619928][ T6313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.687320][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.688053][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.688085][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.688107][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.763262][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.763302][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.810651][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 55.812290][ T5776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.812329][ T5776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.966262][ T6501] loop6: detected capacity change from 0 to 2048 [ 56.004187][ T6501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 56.035433][ T6501] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #12: comm syz.6.447: corrupted in-inode xattr: e_value size too large [ 56.056248][ T6507] netlink: 'syz.2.448': attribute type 83 has an invalid length. [ 56.071148][ T6501] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.447: bg 0: block 240: padding at end of block bitmap is not set [ 56.123503][ T6501] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 56.123541][ T6501] EXT4-fs (loop6): This should not happen!! Data will be lost [ 56.123541][ T6501] [ 56.123565][ T6501] EXT4-fs (loop6): Total free blocks count 0 [ 56.123580][ T6501] EXT4-fs (loop6): Free/Dirty block details [ 56.123608][ T6501] EXT4-fs (loop6): free_blocks=0 [ 56.123629][ T6501] EXT4-fs (loop6): dirty_blocks=112 [ 56.123641][ T6501] EXT4-fs (loop6): Block reservation details [ 56.123652][ T6501] EXT4-fs (loop6): i_reserved_data_blocks=7 [ 56.184968][ T5145] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 56.185882][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 56.225035][ T6512] tipc: Started in network mode [ 56.225079][ T6512] tipc: Node identity 763b6dec97a6, cluster identity 4711 [ 56.225194][ T6512] tipc: Enabled bearer , priority 10 [ 56.277018][ T6511] tipc: Resetting bearer [ 56.340053][ T6519] netlink: 'syz.6.450': attribute type 4 has an invalid length. [ 56.340160][ T6511] tipc: Disabling bearer [ 56.380058][ T6516] netlink: 'syz.6.450': attribute type 4 has an invalid length. [ 56.595551][ T1502] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.597884][ T1502] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.806810][ T4720] Bluetooth: hci2: command tx timeout [ 57.595684][ T6629] loop6: detected capacity change from 0 to 256 [ 57.816344][ T6653] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 57.825323][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 57.863037][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 57.865845][ T1482] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.865960][ T1482] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.865988][ T1482] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.866004][ T1482] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.152922][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 58.367797][ T6711] loop7: detected capacity change from 0 to 512 [ 58.377813][ T6711] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.506: inode has both inline data and extents flags [ 58.377854][ T6711] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.377986][ T6711] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.506: couldn't read orphan inode 15 (err -117) [ 58.378008][ T6711] loop7: lost filesystem error report for type 5 error -117 [ 58.378548][ T6711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.397330][ T6713] loop6: detected capacity change from 0 to 1024 [ 58.411363][ T6713] EXT4-fs: Ignoring removed orlov option [ 58.419846][ T6710] Invalid ELF header magic: != ELF [ 58.442277][ T5541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.446504][ T6713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.588937][ T5145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.874752][ T4720] Bluetooth: hci2: command tx timeout [ 59.455857][ T6731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.028925][ T6850] overlayfs: failed to verify index (index/00fb21000135e85aa3fb684a9786309dd2141e376e61085d94d001000000000000, ftype=4000, err=-116) [ 60.446793][ T6887] warning: `syz.7.539' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.632509][ T4715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.636813][ T4715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.639351][ T4715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.644398][ T4715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.645233][ T4715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.869917][ T5782] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 60.966630][ T4715] Bluetooth: hci2: command tx timeout [ 61.122285][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.127425][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.127637][ T6901] bridge_slave_0: entered allmulticast mode [ 61.131255][ T6901] bridge_slave_0: entered promiscuous mode [ 61.213512][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.219194][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.219358][ T6901] bridge_slave_1: entered allmulticast mode [ 61.219899][ T6901] bridge_slave_1: entered promiscuous mode [ 61.243596][ T5782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.268499][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.272346][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.330451][ T6901] team0: Port device team_slave_0 added [ 61.333010][ T6901] team0: Port device team_slave_1 added [ 61.358487][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.358518][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.358536][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.360538][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.360548][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.360562][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.412154][ T5782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.422998][ T6901] hsr_slave_0: entered promiscuous mode [ 61.423416][ T6901] hsr_slave_1: entered promiscuous mode [ 61.425784][ T6901] debugfs: 'hsr0' already exists in 'hsr' [ 61.425798][ T6901] Cannot create hsr debugfs directory [ 61.481213][ T5782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.537432][ T6901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.555770][ T5782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.591900][ T6968] loop2: detected capacity change from 0 to 512 [ 61.621422][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.632151][ T6901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.670416][ T6968] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #18: comm syz.2.559: corrupted inode contents [ 61.673019][ T6968] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 61.673892][ T6968] EXT4-fs (loop2): Remounting filesystem read-only [ 61.677115][ T6968] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 61.687107][ T6313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.737882][ T6901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.778383][ T5782] bridge_slave_1: left allmulticast mode [ 61.778420][ T5782] bridge_slave_1: left promiscuous mode [ 61.778505][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.785309][ T5782] bridge_slave_0: left allmulticast mode [ 61.785340][ T5782] bridge_slave_0: left promiscuous mode [ 61.785415][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.910017][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.946864][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.966658][ T5782] bond0 (unregistering): Released all slaves [ 62.002468][ T6901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.292920][ T5782] hsr_slave_0: left promiscuous mode [ 62.294100][ T5782] hsr_slave_1: left promiscuous mode [ 62.294465][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.294478][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.297574][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.297587][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.307059][ T5782] veth1_macvtap: left promiscuous mode [ 62.308488][ T5782] veth0_macvtap: left promiscuous mode [ 62.309567][ T5782] veth1_vlan: left promiscuous mode [ 62.310903][ T5782] veth0_vlan: left promiscuous mode [ 62.414407][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 62.419266][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 62.714745][ T4715] Bluetooth: hci5: command tx timeout [ 62.843356][ T6983] loop6: detected capacity change from 0 to 128 [ 62.853949][ T6985] ip_tables: iptables: counters copy to user failed while replacing table [ 63.257949][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.6.571'. [ 63.259829][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.6.571'. [ 63.261651][ T7002] netlink: 7 bytes leftover after parsing attributes in process `syz.6.571'. [ 63.338361][ T7006] gadgetfs: bound to dummy_udc driver [ 63.575081][ T1502] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 63.575647][ C0] gadgetfs: connected [ 63.575880][ T1502] gadgetfs: disconnected [ 63.725197][ C0] gadgetfs: connected [ 63.726894][ T1502] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 63.727132][ T1502] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 63.727148][ T1502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.734326][ C0] gadgetfs: configuration #1 [ 63.778812][ T6915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.792784][ T6901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.809410][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.811947][ T6901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.824177][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.829823][ T6901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.840807][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.846619][ T6901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.855323][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.953625][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.981127][ T6901] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.998761][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.998818][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.999367][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.999388][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.068380][ T7038] loop2: detected capacity change from 0 to 256 [ 64.169351][ T7006] gadgetfs: suspended from state 3 [ 64.171256][ T1502] usb 1-1: USB disconnect, device number 2 [ 64.174290][ T7006] gadgetfs: disconnected [ 64.305312][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 64.374030][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.432718][ T6901] veth0_vlan: entered promiscuous mode [ 64.441565][ T6901] veth1_vlan: entered promiscuous mode [ 64.474076][ T6901] veth0_macvtap: entered promiscuous mode [ 64.477382][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477424][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.478564][ T9] cfg80211: failed to load regulatory.db [ 64.499241][ T6901] veth1_macvtap: entered promiscuous mode [ 64.512274][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.527851][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.575953][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.576361][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.576384][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.600148][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.600184][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.604931][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.623876][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.623917][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.804826][ T4715] Bluetooth: hci5: command tx timeout [ 65.063603][ T7131] syzkaller1: entered promiscuous mode [ 65.063641][ T7131] syzkaller1: entered allmulticast mode [ 65.083365][ T7130] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.126089][ T7130] bridge0: port 3(syz_tun) entered blocking state [ 65.126172][ T7130] bridge0: port 3(syz_tun) entered disabled state [ 65.126573][ T7130] syz_tun: entered allmulticast mode [ 65.130348][ T7130] syz_tun: entered promiscuous mode [ 65.130570][ T7130] bridge0: port 3(syz_tun) entered blocking state [ 65.130592][ T7130] bridge0: port 3(syz_tun) entered forwarding state [ 65.354147][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.712539][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.749486][ T4795] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.753812][ T4795] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.900490][ T7199] loop3: detected capacity change from 0 to 512 [ 65.908837][ T7199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.922368][ T7199] EXT4-fs (loop3): 1 truncate cleaned up [ 65.924155][ T7199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.971492][ T7211] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 65.998055][ T7211] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 65.999464][ T7211] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 66.014550][ T7211] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 66.017982][ T7211] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 66.020890][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.022287][ T7211] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 66.245853][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.333474][ T7232] loop2: detected capacity change from 0 to 7 [ 66.337602][ T7232] Dev loop2: unable to read RDB block 7 [ 66.338837][ T7232] loop2: unable to read partition table [ 66.339905][ T7232] loop2: partition table beyond EOD, truncated [ 66.341166][ T7232] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 66.410369][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.613'. [ 66.413323][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.613'. [ 66.738464][ T4715] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 66.817471][ T7282] loop8: detected capacity change from 0 to 512 [ 66.820949][ T7282] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 66.843437][ T7282] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.865610][ T7282] EXT4-fs (loop8): 1 truncate cleaned up [ 66.869622][ T7282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.876989][ T4715] Bluetooth: hci5: command tx timeout [ 67.314470][ T5668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.881557][ T7380] netlink: 'syz.3.649': attribute type 8 has an invalid length. [ 67.881590][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 67.883534][ T7380] veth1_to_team: entered promiscuous mode [ 67.884101][ T7380] gretap0: entered promiscuous mode [ 67.897216][ T7380] veth1_to_team: left promiscuous mode [ 67.899364][ T7380] gretap0: left promiscuous mode [ 67.900424][ T7382] FAULT_FLAG_ALLOW_RETRY missing 1 [ 67.900451][ T7382] CPU: 0 UID: 0 PID: 7382 Comm: syz.2.648 Tainted: G L syzkaller #0 PREEMPT [ 67.900466][ T7382] Tainted: [L]=SOFTLOCKUP [ 67.900469][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.900474][ T7382] Call trace: [ 67.900478][ T7382] show_stack+0x2c/0x3c (C) [ 67.900499][ T7382] __dump_stack+0x30/0x40 [ 67.900512][ T7382] dump_stack_lvl+0xd8/0x12c [ 67.900524][ T7382] dump_stack+0x1c/0x28 [ 67.900535][ T7382] handle_userfault+0x15b4/0x1b34 [ 67.900547][ T7382] do_pte_missing+0xf30/0x2a24 [ 67.900557][ T7382] handle_mm_fault+0x14f8/0x2514 [ 67.900566][ T7382] __get_user_pages+0x8b4/0x15b8 [ 67.900577][ T7382] populate_vma_page_range+0x260/0x358 [ 67.900587][ T7382] mprotect_fixup+0x620/0x728 [ 67.900599][ T7382] do_mprotect_pkey+0x7f8/0xa84 [ 67.900611][ T7382] __arm64_sys_mprotect+0x88/0xa0 [ 67.900623][ T7382] invoke_syscall+0x98/0x244 [ 67.900635][ T7382] el0_svc_common+0xec/0x23c [ 67.900647][ T7382] do_el0_svc+0x4c/0x5c [ 67.900658][ T7382] el0_svc+0x64/0x260 [ 67.900667][ T7382] el0t_64_sync_handler+0x48/0x148 [ 67.900676][ T7382] el0t_64_sync+0x198/0x19c [ 68.530204][ T7399] Injecting memory failure for pfn 0x13fa01 at process virtual address 0x20001000 [ 68.541443][ T7399] Memory failure: 0x13fa01: recovery action for dirty LRU page: Recovered [ 68.625436][ T7410] netlink: 92 bytes leftover after parsing attributes in process `syz.7.668'. [ 68.958648][ T4715] Bluetooth: hci5: command tx timeout [ 68.960140][ T7432] loop3: detected capacity change from 0 to 128 [ 69.226400][ T7449] netlink: 'syz.8.676': attribute type 15 has an invalid length. [ 69.226436][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.676'. [ 69.249308][ T7449] netlink: 'syz.8.676': attribute type 15 has an invalid length. [ 69.249349][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.676'. [ 69.249409][ T39] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 2304 - 0 [ 69.249496][ T39] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 2304 - 0 [ 69.249518][ T39] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 2304 - 0 [ 69.249532][ T39] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 2304 - 0 [ 69.337395][ T7455] loop2: detected capacity change from 0 to 7 [ 69.343845][ T7455] Dev loop2: unable to read RDB block 7 [ 69.343892][ T7455] loop2: unable to read partition table [ 69.343973][ T7455] loop2: partition table beyond EOD, truncated [ 69.343993][ T7455] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.096239][ T7482] syzkaller1: entered promiscuous mode [ 70.098651][ T7482] syzkaller1: entered allmulticast mode [ 70.172903][ T7489] loop3: detected capacity change from 0 to 128 [ 70.202135][ T7489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 70.202194][ T7489] System zones: 1-3, 19-19, 35-36 [ 70.215646][ T7489] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 70.306349][ T6901] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.407999][ T7503] loop3: detected capacity change from 0 to 512 [ 70.409709][ T7503] EXT4-fs: Ignoring removed i_version option [ 70.424662][ T7503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.424703][ T7503] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.469686][ T7503] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 70.469805][ T7503] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 70.472141][ T7503] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.693: Failed to acquire dquot type 1 [ 70.472166][ T7503] loop3: lost filesystem error report for type 5 error -117 [ 70.474661][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 70.474679][ C0] EXT4-fs (loop3): last error at time 70: ext4_acquire_dquot:7041 [ 70.495430][ T7503] EXT4-fs (loop3): 1 truncate cleaned up [ 70.495954][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 70.798642][ T7534] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 70.822002][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.072594][ T7563] loop2: detected capacity change from 0 to 2048 [ 71.076270][ T7563] EXT4-fs: Ignoring removed i_version option [ 71.079393][ T7565] loop3: detected capacity change from 0 to 512 [ 71.079825][ T7565] EXT4-fs: Ignoring removed orlov option [ 71.079837][ T7565] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.079851][ T7565] EXT4-fs: Ignoring removed bh option [ 71.105064][ T7563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.108117][ T7565] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.712: corrupted in-inode xattr: e_value size too large [ 71.108154][ T7565] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.108574][ T7565] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.712: couldn't read orphan inode 15 (err -117) [ 71.108600][ T7565] loop3: lost filesystem error report for type 5 error -117 [ 71.109173][ T7565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.126056][ T7561] 9pnet: p9_errstr2errno: server reported unknown error ags: [ 71.154368][ T7565] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.154422][ T7565] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 71.217622][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.238768][ T6313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.244850][ T7574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.526616][ T30] audit: type=1326 audit(71.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.3.717" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff979781a8 code=0x0 [ 71.803910][ C0] Unknown status report in ack skb [ 71.966289][ T7610] loop8: detected capacity change from 0 to 32768 [ 72.023695][ T7610] loop8: p1 p3 < > [ 72.108349][ T7637] loop2: detected capacity change from 0 to 128 [ 72.131724][ T7637] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.192492][ T6313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.212923][ T4919] udevd[4919]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 72.247152][ T5380] udevd[5380]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 72.510700][ T7681] syzkaller1: entered promiscuous mode [ 72.511942][ T7681] syzkaller1: entered allmulticast mode [ 72.559895][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.7.748'. [ 72.632439][ T7693] overlayfs: statfs failed on './file0' [ 72.722517][ T7697] loop3: detected capacity change from 0 to 4096 [ 72.722943][ T7697] EXT4-fs: inline encryption not supported [ 72.726091][ T7697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.726103][ T7697] EXT4-fs (loop3): Test dummy encryption mode enabled [ 72.744336][ T7697] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 72.744415][ T7697] System zones: 0-5 [ 72.749544][ T7697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.845579][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.174324][ T7745] syzkaller0: entered promiscuous mode [ 73.174360][ T7745] syzkaller0: entered allmulticast mode [ 73.201320][ T7748] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 73.296986][ T7755] Bluetooth: MGMT ver 1.23 [ 73.297036][ T7755] Bluetooth: hci0: unsupported parameter 255 [ 73.297058][ T7755] Bluetooth: hci0: invalid len left 3, exp >= 4 [ 73.923827][ T7788] binder: 7787:7788 got transaction to invalid handle, 1 [ 73.926657][ T7788] binder: 7787:7788 cannot find target node [ 73.927811][ T7788] binder: 7787:7788 transaction call to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3252 [ 73.974874][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.981111][ T5949] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 73.981751][ T5949] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.983137][ T7790] loop8: detected capacity change from 0 to 2048 [ 73.994195][ T7792] loop3: detected capacity change from 0 to 1024 [ 73.997807][ T7792] ext4: Bad value for 'resgid' [ 73.997835][ T7792] ext4: Bad value for 'resgid' [ 74.020545][ T7790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.188190][ T5668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.205415][ T7795] fido_id[7795]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.326694][ T7807] loop3: detected capacity change from 0 to 128 [ 74.345024][ T7807] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.356388][ T7807] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x16) [ 74.381060][ T6901] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.440375][ T7812] tipc: Started in network mode [ 74.440414][ T7812] tipc: Node identity ced7cef0b8e1, cluster identity 4711 [ 74.440459][ T7812] tipc: Enabled bearer , priority 10 [ 74.443168][ T7811] tipc: Resetting bearer [ 74.457797][ T7811] tipc: Disabling bearer [ 74.667066][ T7821] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 75.121071][ T7828] loop3: detected capacity change from 0 to 2048 [ 75.168263][ T7828] loop3: p1 < > p4 [ 75.168842][ T7828] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.300087][ T7834] loop3: detected capacity change from 0 to 2048 [ 75.336282][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.404299][ T4919] udevd[4919]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 75.405375][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.490694][ T7845] EXT4-fs (loop3): shut down requested (1) [ 75.581928][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 75.715592][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 75.927656][ T7871] loop2: detected capacity change from 0 to 1024 [ 75.929799][ T7871] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 75.943591][ T7871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.953051][ T7871] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.814: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 75.962575][ T7871] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.814: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 75.993505][ T6313] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 76.001857][ T6313] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 76.012847][ T6313] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 76.019031][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.019224][ T6313] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 76.026802][ T6313] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 76.031516][ T6313] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 76.036173][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.036333][ T6313] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 76.043666][ T6313] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /79/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 76.049585][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.053163][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.058649][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.068041][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.077187][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.077999][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.078640][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.079285][ T6313] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 76.273690][ T4715] Bluetooth: hci1: Unknown advertising packet type: 0x11 [ 76.273727][ T4715] Bluetooth: hci1: Unknown advertising packet type: 0x17 [ 76.760565][ T7579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.841904][ T7163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.843076][ T7163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.960861][ T7163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.960913][ T7163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.998591][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.000151][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.001098][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.002101][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.002342][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.087784][ T7163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.087828][ T7163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.174229][ T7163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.174274][ T7163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.219794][ T7929] loop3: detected capacity change from 0 to 4096 [ 77.236834][ T7929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.284590][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.449288][ T7163] bridge_slave_1: left allmulticast mode [ 77.449325][ T7163] bridge_slave_1: left promiscuous mode [ 77.449706][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.450977][ T7163] bridge_slave_0: left allmulticast mode [ 77.450989][ T7163] bridge_slave_0: left promiscuous mode [ 77.451052][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.528619][ T7163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.543913][ T7163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.565769][ T7163] bond0 (unregistering): Released all slaves [ 77.628546][ T7163] tipc: Left network mode [ 77.759683][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.759733][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.759825][ T7912] bridge_slave_0: entered allmulticast mode [ 77.760299][ T7912] bridge_slave_0: entered promiscuous mode [ 77.761111][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.761151][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.761229][ T7912] bridge_slave_1: entered allmulticast mode [ 77.761681][ T7912] bridge_slave_1: entered promiscuous mode [ 77.807694][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.846732][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.887772][ T7912] team0: Port device team_slave_0 added [ 78.021171][ T7912] team0: Port device team_slave_1 added [ 78.042132][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 78.066069][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.067742][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.072448][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.100983][ T7163] hsr_slave_0: left promiscuous mode [ 78.102140][ T7163] hsr_slave_1: left promiscuous mode [ 78.102526][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.102540][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.103576][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.103587][ T7163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.111405][ T7163] veth1_macvtap: left promiscuous mode [ 78.111436][ T7163] veth0_macvtap: left promiscuous mode [ 78.111509][ T7163] veth1_vlan: left promiscuous mode [ 78.111544][ T7163] veth0_vlan: left promiscuous mode [ 78.422797][ T7163] team0 (unregistering): Port device team_slave_1 removed [ 78.440701][ T7163] team0 (unregistering): Port device team_slave_0 removed [ 78.601242][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.601272][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.601306][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.663343][ T7912] hsr_slave_0: entered promiscuous mode [ 78.663777][ T7912] hsr_slave_1: entered promiscuous mode [ 78.664545][ T7912] debugfs: 'hsr0' already exists in 'hsr' [ 78.664557][ T7912] Cannot create hsr debugfs directory [ 78.946522][ T7912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.965019][ T8034] netlink: 'syz.7.869': attribute type 1 has an invalid length. [ 79.030348][ T8034] bond2: (slave geneve2): making interface the new active one [ 79.031836][ T8034] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 79.054495][ T4720] Bluetooth: hci2: command tx timeout [ 79.073416][ T7912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.115354][ T5791] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.115602][ T5791] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.120003][ T5791] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.122017][ T5791] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 79.160414][ T7912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.179794][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 79.309327][ T7912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.339833][ T8053] syzkaller1: entered allmulticast mode [ 79.461084][ T7912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.470199][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.470567][ T7912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.485694][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.486112][ T7912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.508378][ T8067] loop8: detected capacity change from 0 to 512 [ 79.509950][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.516526][ T7912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.531970][ T8067] EXT4-fs (loop8): filesystem has both journal inode and journal device! [ 79.537102][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.690594][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.721611][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.727537][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.727588][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.728142][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.728170][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.786594][ T7912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.062285][ T8118] Injecting memory failure for pfn 0x1321dd at process virtual address 0x20000000 [ 80.354812][ T8118] Memory failure: 0x1321dd: Unknown page state [ 80.355990][ T8118] Memory failure: 0x1321dd: recovery action for unknown page: Ignored [ 80.380889][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.417036][ T8136] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 80.438453][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.451372][ T8136] bond1: entered promiscuous mode [ 80.451695][ T8136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.461137][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.463744][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.494845][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.496574][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.514272][ T8136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.514515][ T8136] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 80.514527][ T8136] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 80.530996][ T8136] bond1: (slave xfrm1): making interface the new active one [ 80.532534][ T8136] xfrm1: entered promiscuous mode [ 80.534819][ T8136] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 80.598312][ T8162] loop3: detected capacity change from 0 to 128 [ 80.607738][ T8162] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.640474][ T7912] veth0_vlan: entered promiscuous mode [ 80.645091][ T7912] veth1_vlan: entered promiscuous mode [ 80.669990][ T7912] veth0_macvtap: entered promiscuous mode [ 80.672217][ T7912] veth1_macvtap: entered promiscuous mode [ 80.682528][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.684064][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.687857][ T7163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.687926][ T5793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.768239][ T5793] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.823561][ T6901] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.825536][ T7161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.825563][ T7161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.867324][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.867360][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.876048][ T8059] bridge0: port 3(syz_tun) entered disabled state [ 80.890868][ T8059] syz_tun (unregistering): left allmulticast mode [ 80.890905][ T8059] syz_tun (unregistering): left promiscuous mode [ 80.891746][ T8059] bridge0: port 3(syz_tun) entered disabled state [ 80.920072][ T5793] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.934452][ T7163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.934488][ T7163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.017802][ T5793] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.124864][ T4715] Bluetooth: hci2: command tx timeout [ 81.127529][ T5793] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.150398][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.150446][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.150653][ T8144] bridge_slave_0: entered allmulticast mode [ 81.151166][ T8144] bridge_slave_0: entered promiscuous mode [ 81.152018][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.152046][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.152127][ T8144] bridge_slave_1: entered allmulticast mode [ 81.175697][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.178416][ T8144] bridge_slave_1: entered promiscuous mode [ 81.181209][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.183394][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.190541][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.200977][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.222555][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.228847][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.250932][ T8144] team0: Port device team_slave_0 added [ 81.279854][ T8144] team0: Port device team_slave_1 added [ 81.346007][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.346041][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.346065][ T8144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.346732][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.346739][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.346755][ T8144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.443222][ T5793] bridge_slave_1: left allmulticast mode [ 81.443266][ T5793] bridge_slave_1: left promiscuous mode [ 81.443377][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.446699][ T5793] bridge_slave_0: left allmulticast mode [ 81.446713][ T5793] bridge_slave_0: left promiscuous mode [ 81.446786][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.536524][ T5793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.553787][ T5793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.575629][ T5793] bond0 (unregistering): Released all slaves [ 81.581352][ T8144] hsr_slave_0: entered promiscuous mode [ 81.583188][ T8144] hsr_slave_1: entered promiscuous mode [ 81.584334][ T8144] debugfs: 'hsr0' already exists in 'hsr' [ 81.584368][ T8144] Cannot create hsr debugfs directory [ 81.585115][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 81.689146][ T8247] loop3: detected capacity change from 0 to 512 [ 81.692499][ T8247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.698011][ T8247] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.904: bad orphan inode 131083 [ 81.698046][ T8247] loop3: lost filesystem error report for type 5 error -117 [ 81.704642][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.704680][ C1] EXT4-fs (loop3): initial error at time 81: ext4_orphan_get:1425 [ 81.704716][ C1] EXT4-fs (loop3): last error at time 81: ext4_orphan_get:1425 [ 81.715208][ T8247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.736821][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.782942][ T8252] loop3: detected capacity change from 0 to 8 [ 81.799569][ T8252] SQUASHFS error: Failed to read block 0x62: -5 [ 81.799631][ T8252] squashfs image failed sanity check [ 81.979126][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 81.989682][ T5793] hsr_slave_0: left promiscuous mode [ 81.990931][ T5793] hsr_slave_1: left promiscuous mode [ 81.991790][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.991817][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.992476][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.992487][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.997996][ T5793] veth1_macvtap: left promiscuous mode [ 81.998024][ T5793] veth0_macvtap: left promiscuous mode [ 81.998073][ T5793] veth1_vlan: left promiscuous mode [ 81.998109][ T5793] veth0_vlan: left promiscuous mode [ 82.123599][ T5793] team0 (unregistering): Port device team_slave_1 removed [ 82.130392][ T5793] team0 (unregistering): Port device team_slave_0 removed [ 82.244073][ T8280] syzkaller0: entered promiscuous mode [ 82.244117][ T8280] syzkaller0: entered allmulticast mode [ 82.456256][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.457437][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.457633][ T8212] bridge_slave_0: entered allmulticast mode [ 82.465067][ T8212] bridge_slave_0: entered promiscuous mode [ 82.465993][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.466016][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.466082][ T8212] bridge_slave_1: entered allmulticast mode [ 82.466576][ T8212] bridge_slave_1: entered promiscuous mode [ 82.473855][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.511615][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.565225][ T4715] Bluetooth: hci4: command tx timeout [ 82.569832][ T8212] team0: Port device team_slave_0 added [ 82.570706][ T8212] team0: Port device team_slave_1 added [ 82.636140][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.636179][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.644675][ T8212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.700190][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.700225][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.700253][ T8212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.740092][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20 [ 82.747197][ T8212] hsr_slave_0: entered promiscuous mode [ 82.748650][ T8212] hsr_slave_1: entered promiscuous mode [ 82.750038][ T8212] debugfs: 'hsr0' already exists in 'hsr' [ 82.751097][ T8212] Cannot create hsr debugfs directory [ 82.831169][ T5793] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.831224][ T5793] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.835547][ T5793] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 82.842607][ T8338] VFS: Mount too revealing [ 83.002554][ T5793] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.002603][ T5793] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.002621][ T5793] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 83.018352][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 83.138941][ T5793] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.138990][ T5793] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.139006][ T5793] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 83.204749][ T4715] Bluetooth: hci2: command tx timeout [ 83.274720][ T4715] Bluetooth: hci1: command tx timeout [ 83.320667][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 83.345580][ T5793] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.347709][ T5793] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.349906][ T5793] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 83.465850][ T8377] loop4: detected capacity change from 0 to 512 [ 83.483771][ T8377] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.930: Unimplemented hash flags: 0x0001 [ 83.495882][ T8377] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.930: Corrupt directory, running e2fsck is recommended [ 83.510095][ T8377] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 83.510180][ T8377] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.930: corrupted in-inode xattr: invalid ea_ino [ 83.510211][ T8377] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.515113][ T8377] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.930: couldn't read orphan inode 15 (err -117) [ 83.518841][ T8377] loop4: lost filesystem error report for type 5 error -117 [ 83.519767][ T8377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.543134][ T8377] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.930: Unimplemented hash flags: 0x0001 [ 83.543181][ T8377] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.930: Corrupt directory, running e2fsck is recommended [ 83.544123][ T8377] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.930: Unimplemented hash flags: 0x0001 [ 83.544148][ T8377] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.930: Corrupt directory, running e2fsck is recommended [ 83.556632][ T8377] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.930: Unimplemented hash flags: 0x0001 [ 83.556671][ T8377] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.930: Corrupt directory, running e2fsck is recommended [ 83.557072][ T8377] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.930: Unimplemented hash flags: 0x0001 [ 83.557093][ T8377] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.930: Corrupt directory, running e2fsck is recommended [ 83.557170][ T8377] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.930: Unimplemented hash flags: 0x0001 [ 83.557187][ T8377] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.930: Corrupt directory, running e2fsck is recommended [ 83.564960][ T8377] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.930: path /16/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 83.565362][ T8377] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 2: comm syz.4.930: path /16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 83.565705][ T8377] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.930: path /16/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0 [ 83.621181][ T7912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.649088][ T5793] bridge_slave_1: left allmulticast mode [ 83.650227][ T5793] bridge_slave_1: left promiscuous mode [ 83.651414][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.676854][ T5793] bridge_slave_0: left allmulticast mode [ 83.676892][ T5793] bridge_slave_0: left promiscuous mode [ 83.676998][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.840580][ T5793] bond2 (unregistering): (slave geneve2): Releasing active interface [ 83.897259][ T5793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.936729][ T5793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.990315][ T5793] bond0 (unregistering): Released all slaves [ 83.996089][ T5793] bond1 (unregistering): Released all slaves [ 84.000556][ T5793] bond2 (unregistering): Released all slaves [ 84.061901][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 84.297496][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.942'. [ 84.338965][ T5793] hsr_slave_0: left promiscuous mode [ 84.340086][ T5793] hsr_slave_1: left promiscuous mode [ 84.340430][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.340444][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.346074][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.346108][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.347157][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'. [ 84.347176][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 84.379572][ T5793] veth1_macvtap: left promiscuous mode [ 84.379625][ T5793] veth0_macvtap: left promiscuous mode [ 84.379681][ T5793] veth1_vlan: left promiscuous mode [ 84.379719][ T5793] veth0_vlan: left promiscuous mode [ 84.504345][ T5793] team0 (unregistering): Port device team_slave_1 removed [ 84.510236][ T5793] team0 (unregistering): Port device team_slave_0 removed [ 84.579499][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 84.580878][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'. [ 84.580900][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 84.617460][ T7163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.619833][ T7161] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.619878][ T7161] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.619901][ T7161] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.634764][ T4715] Bluetooth: hci4: command tx timeout [ 84.738087][ T8144] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.741085][ T8457] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 84.742684][ T4472] IPVS: starting estimator thread 0... [ 84.758511][ T8144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.761155][ T8144] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.764553][ T8144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.770824][ T8144] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.777336][ T8144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.824724][ T8460] IPVS: using max 45 ests per chain, 108000 per kthread [ 84.844943][ T8144] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.862302][ T8144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.946132][ T8212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.952827][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.983605][ T8212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.994301][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.004272][ T8212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.008390][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.008745][ T8212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.019010][ T8496] use of bytesused == 0 is deprecated and will be removed in the future, [ 85.020897][ T8212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.022668][ T8496] use the actual size instead. [ 85.069477][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.106393][ T8144] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.111806][ T8512] loop8: detected capacity change from 0 to 1024 [ 85.117582][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.117655][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.118210][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.118231][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.119571][ T8512] EXT4-fs: Ignoring removed orlov option [ 85.130440][ T8512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.159714][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.163447][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.168639][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.168689][ T5793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.176780][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.176809][ T5793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.213489][ T8212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.216297][ T8212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.236996][ T5668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.284731][ T4715] Bluetooth: hci2: command tx timeout [ 85.354873][ T4715] Bluetooth: hci1: command tx timeout [ 85.426600][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.463740][ T8144] veth0_vlan: entered promiscuous mode [ 85.471014][ T8144] veth1_vlan: entered promiscuous mode [ 85.488265][ T8144] veth0_macvtap: entered promiscuous mode [ 85.492645][ T8144] veth1_macvtap: entered promiscuous mode [ 85.508842][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.512711][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.527879][ T7163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528008][ T7163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528033][ T7163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528056][ T7163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.569284][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.581450][ T8567] loop8: detected capacity change from 0 to 8 [ 85.588915][ T7163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.588953][ T7163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.592463][ T8567] SQUASHFS error: Failed to read block 0x62: -5 [ 85.592495][ T8567] squashfs image failed sanity check [ 85.609668][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.609698][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.646115][ T8571] syz_tun: entered allmulticast mode [ 85.649659][ T8570] syz_tun: left allmulticast mode [ 85.730663][ T8212] veth0_vlan: entered promiscuous mode [ 85.734289][ T8212] veth1_vlan: entered promiscuous mode [ 85.742903][ T8212] veth0_macvtap: entered promiscuous mode [ 85.747660][ T8212] veth1_macvtap: entered promiscuous mode [ 85.752916][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.756504][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.885788][ T7169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.885837][ T7169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.885855][ T7169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.885871][ T7169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.913512][ T7169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.913544][ T7169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.933064][ T8604] Injecting memory failure for pfn 0x219270 at process virtual address 0x20002000 [ 85.947060][ T8604] Memory failure: 0x219270: unhandlable page. [ 85.947094][ T8604] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 85.953406][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.953456][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.407512][ T8653] loop8: detected capacity change from 0 to 4096 [ 86.409618][ T8653] EXT4-fs: inline encryption not supported [ 86.412660][ T8653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.412687][ T8653] EXT4-fs (loop8): Test dummy encryption mode enabled [ 86.417236][ T8653] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 86.417305][ T8653] System zones: 0-5 [ 86.419940][ T8653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.541809][ T5668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.714920][ T4715] Bluetooth: hci4: command tx timeout [ 86.959390][ T8707] loop8: detected capacity change from 0 to 128 [ 86.978329][ T8707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 86.978389][ T8707] System zones: 1-3, 19-19, 35-36 [ 86.979017][ T8707] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.071749][ T8720] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1007'. [ 87.083406][ T5668] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.177672][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1009'. [ 87.221686][ T8737] loop5: detected capacity change from 0 to 4096 [ 87.227348][ T8737] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.229401][ T8737] EXT4-fs (loop5): Test dummy encryption mode enabled [ 87.229662][ T8733] loop1: detected capacity change from 0 to 2048 [ 87.240877][ T8737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.269010][ T8733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.351327][ T8212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.434952][ T4715] Bluetooth: hci1: command tx timeout [ 87.446642][ T8144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.554459][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.806796][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1027'. [ 87.896171][ T8810] syzkaller1: entered promiscuous mode [ 87.896220][ T8810] syzkaller1: entered allmulticast mode [ 88.805656][ T4715] Bluetooth: hci4: command tx timeout [ 89.138619][ T8952] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 89.146551][ T8954] loop4: detected capacity change from 0 to 512 [ 89.148636][ T8954] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.161989][ T8954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.179441][ T7912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.243955][ T8960] loop4: detected capacity change from 0 to 4096 [ 89.249297][ T8960] EXT4-fs: inline encryption not supported [ 89.251816][ T8960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.251855][ T8960] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.256515][ T8960] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 89.256652][ T8960] System zones: 0-5 [ 89.258707][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.306564][ T8952] bond2: entered promiscuous mode [ 89.306757][ T8952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.319027][ T8958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.319283][ T8958] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 89.319319][ T8958] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 89.330591][ T8958] bond2: (slave ip6gre1): making interface the new active one [ 89.330624][ T8958] ip6gre1: entered promiscuous mode [ 89.332536][ T8958] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 89.444057][ T7912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.458884][ T8972] loop3: detected capacity change from 0 to 512 [ 89.459275][ T8972] EXT4-fs: Ignoring removed nobh option [ 89.504079][ T8972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.517016][ T4715] Bluetooth: hci1: command tx timeout [ 89.642625][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.702673][ T9005] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 89.814965][ T9017] loop5: detected capacity change from 0 to 1024 [ 89.847744][ T9017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.868081][ T9017] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 1: comm syz.5.1078: lblock 1 mapped to illegal pblock 1 (length 5) [ 89.870668][ T9017] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 89.870686][ T9017] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.870686][ T9017] [ 89.874587][ T9017] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1078: bg 0: block 112: padding at end of block bitmap is not set [ 89.877063][ T9017] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 89.877079][ T9017] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.877079][ T9017] [ 89.877087][ T9017] EXT4-fs (loop5): Total free blocks count 0 [ 89.877095][ T9017] EXT4-fs (loop5): Free/Dirty block details [ 89.877115][ T9017] EXT4-fs (loop5): free_blocks=0 [ 89.877130][ T9017] EXT4-fs (loop5): dirty_blocks=32 [ 89.877137][ T9017] EXT4-fs (loop5): Block reservation details [ 89.879440][ T9017] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.1078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 89.880893][ T9017] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 89.913412][ T9028] loop1: detected capacity change from 0 to 512 [ 89.953184][ T9028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.982674][ T8212] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 90.063563][ T8144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.066766][ T9035] overlayfs: upper fs does not support tmpfile. [ 90.214961][ T9067] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1085'. [ 90.338943][ T9077] loop3: detected capacity change from 0 to 512 [ 90.368592][ T9077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.503886][ T6901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.881088][ T9146] syzkaller1: entered promiscuous mode [ 90.881126][ T9146] syzkaller1: entered allmulticast mode [ 91.219969][ T9182] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1108'. [ 91.698525][ T9244] binder: 9243:9244 ioctl c0306201 0 returned -14 [ 92.551638][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1126'. [ 92.652501][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.830028][ T4720] block nbd0: Receive control failed (result -32) [ 92.831504][ T4715] block nbd0: Receive control failed (result -32) [ 92.897568][ T9305] syzkaller0: entered promiscuous mode [ 92.897608][ T9305] syzkaller0: entered allmulticast mode [ 92.976392][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.999786][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.002387][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.021621][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.026126][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.288464][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 93.317480][ T9371] loop1: detected capacity change from 0 to 1024 [ 93.349589][ T9371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.377335][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.396125][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.418401][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.430358][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.447524][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.485016][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.511803][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.525370][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.525789][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.525888][ T9317] bridge_slave_0: entered allmulticast mode [ 93.527409][ T9317] bridge_slave_0: entered promiscuous mode [ 93.532962][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.533009][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.533083][ T9317] bridge_slave_1: entered allmulticast mode [ 93.533698][ T9317] bridge_slave_1: entered promiscuous mode [ 93.558748][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.562123][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.563844][ T9398] xt_hashlimit: size too large, truncated to 1048576 [ 93.568211][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.580240][ T9317] team0: Port device team_slave_0 added [ 93.583023][ T9317] team0: Port device team_slave_1 added [ 93.597123][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.602617][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.602648][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.602663][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.604013][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.604022][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.604037][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.635673][ T8144] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 93.650961][ T9317] hsr_slave_0: entered promiscuous mode [ 93.651887][ T9317] hsr_slave_1: entered promiscuous mode [ 93.653337][ T9317] debugfs: 'hsr0' already exists in 'hsr' [ 93.653377][ T9317] Cannot create hsr debugfs directory [ 93.701397][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 93.912490][ T9425] netlink: 'syz.4.1164': attribute type 63 has an invalid length. [ 93.961370][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 94.324347][ T9317] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 94.343244][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.343635][ T9317] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 94.349882][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.352926][ T9317] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 94.359169][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.361116][ T9317] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 94.366628][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.515489][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.530824][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.543703][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.543757][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.546147][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.546172][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.579641][ T9317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.579686][ T9317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.730570][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1178'. [ 94.843952][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.961425][ T9523] loop5: detected capacity change from 0 to 128 [ 95.036861][ T9530] loop8: detected capacity change from 0 to 256 [ 95.042782][ T9530] vfat: Unknown parameter 'ÿÿ' [ 95.060566][ T8212] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 95.060694][ T8212] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 95.115269][ T4715] Bluetooth: hci3: command tx timeout [ 95.141249][ T9317] veth0_vlan: entered promiscuous mode [ 95.143974][ T9317] veth1_vlan: entered promiscuous mode [ 95.192258][ T9541] loop8: detected capacity change from 0 to 512 [ 95.199299][ T9542] loop4: detected capacity change from 0 to 256 [ 95.204072][ T9541] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.218458][ T9541] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 95.218512][ T9541] System zones: 0-2, 18-18, 34-34 [ 95.219022][ T9541] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1188: bad orphan inode 15 [ 95.219041][ T9541] loop8: lost filesystem error report for type 5 error -117 [ 95.220533][ T9541] ext4_test_bit(bit=14, block=18) = 1 [ 95.220551][ T9541] is_bad_inode(inode)=0 [ 95.220556][ T9541] NEXT_ORPHAN(inode)=2264924160 [ 95.220561][ T9541] max_ino=32 [ 95.220565][ T9541] i_nlink=0 [ 95.224647][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 95.224665][ C0] EXT4-fs (loop8): initial error at time 95: ext4_orphan_get:1425 [ 95.224679][ C0] EXT4-fs (loop8): last error at time 95: ext4_orphan_get:1425 [ 95.232063][ T9541] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.1188: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 95.232087][ T9541] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.238405][ T9541] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 95.238967][ T9541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.263965][ T9317] veth0_macvtap: entered promiscuous mode [ 95.268324][ T9317] veth1_macvtap: entered promiscuous mode [ 95.272699][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.287639][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.290794][ T288] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.290902][ T288] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.290978][ T288] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.290996][ T288] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335816][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.335845][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.353506][ T5782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.353540][ T5782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.374539][ T5668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.474048][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.476976][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.478602][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.482867][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.484998][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.508333][ T7162] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.716896][ T7162] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.799233][ T7162] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.900142][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.903249][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.908796][ T7162] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.912874][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.918371][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.923111][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.187006][ T7162] bridge_slave_1: left allmulticast mode [ 96.187049][ T7162] bridge_slave_1: left promiscuous mode [ 96.187176][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.217384][ T7162] bridge_slave_0: left allmulticast mode [ 96.217422][ T7162] bridge_slave_0: left promiscuous mode [ 96.217528][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.392467][ T7162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.421181][ T7162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.456951][ T7162] bond0 (unregistering): Released all slaves [ 96.536215][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.536262][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.548381][ T9557] bridge_slave_0: entered allmulticast mode [ 96.550170][ T9557] bridge_slave_0: entered promiscuous mode [ 96.562479][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.563982][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.564123][ T9557] bridge_slave_1: entered allmulticast mode [ 96.567398][ T9557] bridge_slave_1: entered promiscuous mode [ 96.584097][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.620535][ T9657] Injecting memory failure for pfn 0x122867 at process virtual address 0x20000000 [ 96.622523][ T9657] Memory failure: 0x122867: Sending SIGBUS to syz.9.1209:9657 due to hardware memory corruption [ 96.626582][ T9657] Memory failure: 0x122867: recovery action for unsplit thp: Failed [ 96.649004][ T8144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.693062][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.779942][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.783315][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.785154][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.787631][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.789295][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.835403][ T9557] team0: Port device team_slave_0 added [ 96.836730][ T9557] team0: Port device team_slave_1 added [ 96.968869][ T7162] hsr_slave_0: left promiscuous mode [ 96.970418][ T7162] hsr_slave_1: left promiscuous mode [ 96.970996][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.971010][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.975554][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.975590][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.990248][ T7162] veth1_macvtap: left promiscuous mode [ 96.990395][ T7162] veth0_macvtap: left promiscuous mode [ 96.990453][ T7162] veth1_vlan: left promiscuous mode [ 96.990491][ T7162] veth0_vlan: left promiscuous mode [ 97.168698][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 97.175447][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 97.194836][ T4715] Bluetooth: hci3: command tx timeout [ 97.226073][ T9710] loop9: detected capacity change from 0 to 2048 [ 97.249893][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.249921][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.249952][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.250728][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.250742][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.250763][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.321314][ T9557] hsr_slave_0: entered promiscuous mode [ 97.322886][ T9557] hsr_slave_1: entered promiscuous mode [ 97.324310][ T9557] debugfs: 'hsr0' already exists in 'hsr' [ 97.328659][ T9557] Cannot create hsr debugfs directory [ 97.514870][ T4715] Bluetooth: hci1: command tx timeout [ 97.572024][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.574071][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.574240][ T9596] bridge_slave_0: entered allmulticast mode [ 97.575360][ T9596] bridge_slave_0: entered promiscuous mode [ 97.599672][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.599766][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.599839][ T9596] bridge_slave_1: entered allmulticast mode [ 97.600369][ T9596] bridge_slave_1: entered promiscuous mode [ 97.618376][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.619624][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.632162][ T9596] team0: Port device team_slave_0 added [ 97.636991][ T9596] team0: Port device team_slave_1 added [ 97.699302][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.699330][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.699653][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.737229][ T7162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.748141][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.748170][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.748198][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.794188][ T9596] hsr_slave_0: entered promiscuous mode [ 97.802165][ T9596] hsr_slave_1: entered promiscuous mode [ 97.803583][ T9596] debugfs: 'hsr0' already exists in 'hsr' [ 97.805272][ T9596] Cannot create hsr debugfs directory [ 97.880646][ T7162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.996097][ T4715] Bluetooth: hci2: command tx timeout [ 98.000723][ T7162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.054189][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.057475][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.057619][ T9669] bridge_slave_0: entered allmulticast mode [ 98.061398][ T9669] bridge_slave_0: entered promiscuous mode [ 98.063841][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.065755][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.067409][ T9669] bridge_slave_1: entered allmulticast mode [ 98.069203][ T9669] bridge_slave_1: entered promiscuous mode [ 98.089865][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.099684][ T7162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.110399][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.127482][ T9669] team0: Port device team_slave_0 added [ 98.130900][ T9669] team0: Port device team_slave_1 added [ 98.153436][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.155073][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.159601][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.166307][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.167671][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.168718][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.183680][ T9669] hsr_slave_0: entered promiscuous mode [ 98.184210][ T9669] hsr_slave_1: entered promiscuous mode [ 98.184459][ T9669] debugfs: 'hsr0' already exists in 'hsr' [ 98.184472][ T9669] Cannot create hsr debugfs directory [ 98.215905][ T9801] ------------[ cut here ]------------ [ 98.215932][ T9801] do not call blocking ops when !TASK_RUNNING; state=2 set at [<000000004c4e1d5f>] prepare_to_wait_event+0x2e4/0x3ac [ 98.219244][ T9801] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#1: syz.8.1225/9801 [ 98.220801][ T9801] Modules linked in: [ 98.221389][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.8.1225 Tainted: G L syzkaller #0 PREEMPT [ 98.223073][ T9801] Tainted: [L]=SOFTLOCKUP [ 98.223723][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 98.225367][ T9801] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.226776][ T9801] pc : __might_sleep+0xc0/0xdc [ 98.227618][ T9801] lr : __might_sleep+0xc0/0xdc [ 98.228474][ T9801] sp : ffff800094897930 [ 98.229226][ T9801] x29: ffff800094897930 x28: ffff8000805a9ec8 x27: ffff800094897a00 [ 98.230617][ T9801] x26: 0000000000000000 x25: ffff800094897a08 x24: 0000000000000000 [ 98.232124][ T9801] x23: ffff700012912f3c x22: ffff0000ee2cd150 x21: 0000000000000002 [ 98.233584][ T9801] x20: ffff8000869ca160 x19: 000000000000026f x18: 1fffe00034bbbe28 [ 98.235007][ T9801] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 [ 98.236434][ T9801] x14: ffff0001a5ddf14c x13: 0000000000000001 x12: 0000000000000000 [ 98.237889][ T9801] x11: 0000000000000000 x10: 0000000000000003 x9 : 66633f7ea5fdd200 [ 98.239363][ T9801] x8 : 66633f7ea5fdd200 x7 : 0000000000000000 x6 : 0000000000000000 [ 98.240801][ T9801] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000803b93e0 [ 98.242274][ T9801] x2 : 0000000000000001 x1 : ffff0000ee2cba80 x0 : 0000000000000001 [ 98.243760][ T9801] Call trace: [ 98.244328][ T9801] __might_sleep+0xc0/0xdc (P) [ 98.245153][ T9801] __mutex_lock+0xf8/0xf14 [ 98.245962][ T9801] mutex_lock_nested+0x24/0x30 [ 98.246824][ T9801] futex_pivot_pending+0x30/0xa4 [ 98.247730][ T9801] futex_hash_allocate+0x73c/0xc20 [ 98.248672][ T9801] futex_hash_prctl+0xd0/0x324 [ 98.249541][ T9801] __arm64_sys_prctl+0x9c0/0x14e8 [ 98.250462][ T9801] invoke_syscall+0x98/0x244 [ 98.251318][ T9801] el0_svc_common+0xec/0x23c [ 98.252136][ T9801] do_el0_svc+0x4c/0x5c [ 98.252883][ T9801] el0_svc+0x64/0x260 [ 98.253589][ T9801] el0t_64_sync_handler+0x48/0x148 [ 98.254530][ T9801] el0t_64_sync+0x198/0x19c [ 98.255323][ T9801] irq event stamp: 126 [ 98.256016][ T9801] hardirqs last enabled at (125): [] finish_task_switch+0x234/0x858 [ 98.257749][ T9801] hardirqs last disabled at (126): [] el1_brk64+0x20/0x54 [ 98.259288][ T9801] softirqs last enabled at (72): [] do_sve_acc+0x32c/0x4b8 [ 98.260833][ T9801] softirqs last disabled at (70): [] do_sve_acc+0x10c/0x4b8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 98.262382][ T9801] ---[ end trace 0000000000000000 ]--- [ 98.472979][ T7162] bridge_slave_1: left allmulticast mode [ 98.473023][ T7162] bridge_slave_1: left promiscuous mode [ 98.473119][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.479982][ T7162] bridge_slave_0: left allmulticast mode [ 98.480012][ T7162] bridge_slave_0: left promiscuous mode [ 98.480093][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.558735][ T7162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.574101][ T7162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.585690][ T7162] bond0 (unregistering): Released all slaves [ 98.702564][ T9807] bridge0: port 3(syz_tun) entered disabled state [ 98.709835][ T9807] syz_tun (unregistering): left allmulticast mode [ 98.711076][ T9807] syz_tun (unregistering): left promiscuous mode [ 98.712569][ T9807] bridge0: port 3(syz_tun) entered disabled state [ 98.974666][ T7162] hsr_slave_0: left promiscuous mode [ 98.976780][ T7162] hsr_slave_1: left promiscuous mode [ 98.977125][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.977145][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.981493][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.981516][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.988345][ T7162] veth1_macvtap: left promiscuous mode [ 98.989512][ T7162] veth0_macvtap: left promiscuous mode [ 98.990755][ T7162] veth1_vlan: left promiscuous mode [ 98.991849][ T7162] veth0_vlan: left promiscuous mode [ 99.112533][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 99.135714][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 99.429039][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 99.486831][ T7162] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.522786][ T4817] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 99.542427][ T7162] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.568416][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 99.610921][ T7162] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.683060][ T7162] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.698258][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 99.784336][ T7162] bridge_slave_1: left allmulticast mode [ 99.787285][ T7162] bridge_slave_1: left promiscuous mode [ 99.787397][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.791455][ T7162] bridge_slave_0: left allmulticast mode [ 99.792569][ T7162] bridge_slave_0: left promiscuous mode [ 99.793926][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.798132][ T7162] bridge_slave_1: left allmulticast mode [ 99.799228][ T7162] bridge_slave_1: left promiscuous mode [ 99.800648][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.803283][ T7162] bridge_slave_0: left allmulticast mode [ 99.804435][ T7162] bridge_slave_0: left promiscuous mode [ 99.806238][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.811569][ T7162] bridge_slave_1: left allmulticast mode [ 99.812650][ T7162] bridge_slave_1: left promiscuous mode [ 99.813902][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.820793][ T7162] bridge_slave_0: left allmulticast mode [ 99.821906][ T7162] bridge_slave_0: left promiscuous mode [ 99.823267][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.873764][ T7162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.916285][ T7162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.955631][ T7162] bond0 (unregistering): Released all slaves [ 99.999251][ T7162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.035984][ T7162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.047190][ T7162] bond0 (unregistering): Released all slaves [ 100.069730][ T7162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.076929][ T7162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.080156][ T7162] bond0 (unregistering): Released all slaves [ 100.084118][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 100.345612][ T7162] hsr_slave_0: left promiscuous mode [ 100.347084][ T7162] hsr_slave_1: left promiscuous mode [ 100.348374][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.350079][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.353750][ T7162] hsr_slave_0: left promiscuous mode [ 100.355931][ T7162] hsr_slave_1: left promiscuous mode [ 100.357947][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.359704][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.361644][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.363104][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.366338][ T7162] hsr_slave_0: left promiscuous mode [ 100.367782][ T7162] hsr_slave_1: left promiscuous mode [ 100.369507][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.371323][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.378355][ T7162] veth1_macvtap: left promiscuous mode [ 100.378410][ T7162] veth0_macvtap: left promiscuous mode [ 100.380673][ T7162] veth1_vlan: left promiscuous mode [ 100.381775][ T7162] veth0_vlan: left promiscuous mode [ 100.483162][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 100.488843][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 100.600496][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 100.604492][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 100.704511][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 100.708701][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 101.679055][ T7162] bridge_slave_1: left allmulticast mode [ 101.679093][ T7162] bridge_slave_1: left promiscuous mode [ 101.679207][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.684399][ T7162] bridge_slave_0: left allmulticast mode [ 101.685602][ T7162] bridge_slave_0: left promiscuous mode [ 101.686869][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.717583][ T7162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.746259][ T7162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.760582][ T7162] bond0 (unregistering): Released all slaves [ 101.811426][ T7162] hsr_slave_0: left promiscuous mode [ 101.812874][ T7162] hsr_slave_1: left promiscuous mode [ 101.813161][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.819324][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.874446][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 101.889410][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 102.144371][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 102.269801][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.390212][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.712608][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.468093][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 103.592547][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 103.713946][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 103.836545][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 103.962257][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 104.085416][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 104.205763][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 104.325315][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19