last executing test programs: 9m5.937050452s ago: executing program 1 (id=16): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 9m4.223020324s ago: executing program 1 (id=17): fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000e00)=[{0xdab4, 0x0, &(0x7f0000000b80)}], 0x1) unshare(0x24020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x34, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='dyn']) 9m2.724886151s ago: executing program 1 (id=20): syz_emit_ethernet(0x42, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x2c, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7", 0x3f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f9479", 0x52}], 0x2}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m59.969045629s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000100)=""/155, 0x9b) 8m58.490958436s ago: executing program 1 (id=27): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 8m54.359293319s ago: executing program 1 (id=30): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000000)=""/183) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 8m38.677372517s ago: executing program 32 (id=30): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000000)=""/183) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 23.011187s ago: executing program 0 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) r6 = syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lseek(r6, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001042bbd70020000000002000000", @ANYRES32=r7, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 21.695179792s ago: executing program 0 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r6, &(0x7f0000000000)=""/28, 0x1c) 20.269265537s ago: executing program 0 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x24000, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0xfffffffc, 0xfffffffe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) 16.368451734s ago: executing program 4 (id=782): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000001020103000000000000000002000009240001801400"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) listen(r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xfce1) 15.488228956s ago: executing program 4 (id=784): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='cifs\x00', 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x2dfd, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file3\x00', 0x800000, &(0x7f00000003c0)=ANY=[], 0x1, 0x1aa, &(0x7f0000000200)="$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") open$dir(&(0x7f0000000000)='./file3\x00', 0x101000, 0xb0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket(0x23, 0x2, 0xdb) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) 14.294036736s ago: executing program 2 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r6, &(0x7f0000000000)=""/28, 0x1c) 12.681770716s ago: executing program 2 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) 12.680222666s ago: executing program 3 (id=789): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500cf0b143335cd951c0000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) 12.627275407s ago: executing program 4 (id=790): bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 10.787369563s ago: executing program 2 (id=791): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) userfaultfd(0x80001) socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000680), 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.383049143s ago: executing program 3 (id=792): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount$afs(&(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000740)={[{@dyn}]}) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 8.382390263s ago: executing program 0 (id=793): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) 6.422303841s ago: executing program 2 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x8, 0x100000001, 0xff, 0x1, 0xfff00000, 0x1}}, 0x755c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r3, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 6.421324401s ago: executing program 4 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r6, &(0x7f0000000000)=""/28, 0x1c) 6.420571371s ago: executing program 3 (id=803): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 4.800803541s ago: executing program 2 (id=795): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"5c4f53f8c3a7ba34fb2819cf6a209a50", 0x0, 0x0, {0x6, 0x80000000}, {0x3, 0x1}, 0xb1d, [0x7, 0x8, 0x1, 0x800, 0x3, 0x8, 0x5, 0x5, 0x6, 0x9, 0x4, 0xa, 0x6, 0x8, 0x101, 0x6]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget(0x2, 0x1c0) msgsnd(r3, &(0x7f0000000140)={0x3, "db495b3abbc71e5c7e1ed8c4d8fde7cf9a155325ed658caccb3db5cf8519d3e93a79601a377ea202f59bc341ce"}, 0x35, 0x800) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x159) sendfile(r5, r6, 0x0, 0x20fffe82) 4.800577891s ago: executing program 3 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r6, &(0x7f0000000000)=""/28, 0x1c) 4.796173511s ago: executing program 4 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 3.675509239s ago: executing program 0 (id=797): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x5}}, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x4000000000000000, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe, 0x3}, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xdfd33369c4ba71e}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3, 0xb7, 0x1, 0x7dffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) msgget(0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.123020138s ago: executing program 3 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24008001}, 0x4048000) 1.115418012s ago: executing program 4 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r6, &(0x7f0000000000)=""/28, 0x1c) 1.067603944s ago: executing program 2 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x24000, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0xfffffffc, 0xfffffffe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) 123.149667ms ago: executing program 3 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x24000, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0xfffffffc, 0xfffffffe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) 0s ago: executing program 0 (id=804): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "4461aa", 0x20, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, {[@hopopts={0xff}], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4e21, 0x4e24}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150a01d6fbb242020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 79.899821][ T5763] cgroup: Unknown subsys name 'net' [ 80.012180][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.807713][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.514928][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.529158][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.537318][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.538699][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.551095][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.560738][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.561368][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.575578][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.583531][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.592957][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.600629][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.608469][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.613368][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.622974][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.642371][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.652294][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.659337][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.667142][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.670925][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.674665][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.683422][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.695654][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.703438][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.710981][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.207861][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.263271][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.369597][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.426926][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.435292][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.442987][ T5777] bridge_slave_0: entered allmulticast mode [ 84.450366][ T5777] bridge_slave_0: entered promiscuous mode [ 84.487398][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.505875][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.513314][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.520505][ T5777] bridge_slave_1: entered allmulticast mode [ 84.527762][ T5777] bridge_slave_1: entered promiscuous mode [ 84.551214][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.560631][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.567949][ T5774] bridge_slave_0: entered allmulticast mode [ 84.575588][ T5774] bridge_slave_0: entered promiscuous mode [ 84.613396][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.620663][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.630207][ T5774] bridge_slave_1: entered allmulticast mode [ 84.638096][ T5774] bridge_slave_1: entered promiscuous mode [ 84.688241][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.695453][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.702932][ T5776] bridge_slave_0: entered allmulticast mode [ 84.710515][ T5776] bridge_slave_0: entered promiscuous mode [ 84.744391][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.756036][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.769921][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.779333][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.787332][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.794635][ T5776] bridge_slave_1: entered allmulticast mode [ 84.802869][ T5776] bridge_slave_1: entered promiscuous mode [ 84.818263][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.896669][ T5777] team0: Port device team_slave_0 added [ 84.906786][ T5777] team0: Port device team_slave_1 added [ 84.949777][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.970389][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.978117][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.985996][ T5775] bridge_slave_0: entered allmulticast mode [ 84.993465][ T5775] bridge_slave_0: entered promiscuous mode [ 85.004199][ T5774] team0: Port device team_slave_0 added [ 85.010491][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.018310][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.026101][ T5775] bridge_slave_1: entered allmulticast mode [ 85.033747][ T5775] bridge_slave_1: entered promiscuous mode [ 85.042829][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.068470][ T5774] team0: Port device team_slave_1 added [ 85.108740][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.115850][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.142548][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.169286][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.181365][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.201759][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.209034][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.235230][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.285645][ T5776] team0: Port device team_slave_0 added [ 85.306759][ T5775] team0: Port device team_slave_0 added [ 85.313851][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.320835][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.353552][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.367056][ T5776] team0: Port device team_slave_1 added [ 85.379354][ T5775] team0: Port device team_slave_1 added [ 85.387463][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.394867][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.420964][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.477886][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.485095][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.511166][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.554779][ T5777] hsr_slave_0: entered promiscuous mode [ 85.562010][ T5777] hsr_slave_1: entered promiscuous mode [ 85.570698][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.579226][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.606187][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.618203][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.625674][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.652123][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.694007][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.701017][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.727980][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.745479][ T5086] Bluetooth: hci1: command tx timeout [ 85.745914][ T5783] Bluetooth: hci0: command tx timeout [ 85.751481][ T5086] Bluetooth: hci2: command tx timeout [ 85.757223][ T5792] Bluetooth: hci3: command tx timeout [ 85.767113][ T5774] hsr_slave_0: entered promiscuous mode [ 85.775675][ T5774] hsr_slave_1: entered promiscuous mode [ 85.782551][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.790347][ T5774] Cannot create hsr debugfs directory [ 85.913369][ T5775] hsr_slave_0: entered promiscuous mode [ 85.919802][ T5775] hsr_slave_1: entered promiscuous mode [ 85.926613][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.934865][ T5775] Cannot create hsr debugfs directory [ 85.994862][ T5776] hsr_slave_0: entered promiscuous mode [ 86.002016][ T5776] hsr_slave_1: entered promiscuous mode [ 86.008907][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.016709][ T5776] Cannot create hsr debugfs directory [ 86.401598][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.419198][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.431290][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.443265][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.503993][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.517963][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.538799][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.549436][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.638087][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.678704][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.689710][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.739203][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.787929][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.801526][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.811936][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.846959][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.886340][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.948234][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.978453][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.008538][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.015892][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.031198][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.038554][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.125540][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.207015][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.224216][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.231445][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.250187][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.258023][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.377959][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.464617][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.471833][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.510648][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.568019][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.575265][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.647029][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.701527][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.708800][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.780237][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.787593][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.823301][ T51] Bluetooth: hci3: command tx timeout [ 87.823333][ T5792] Bluetooth: hci2: command tx timeout [ 87.834547][ T5783] Bluetooth: hci1: command tx timeout [ 87.842522][ T5086] Bluetooth: hci0: command tx timeout [ 88.177902][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.208966][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.330263][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.400432][ T5777] veth0_vlan: entered promiscuous mode [ 88.411356][ T5774] veth0_vlan: entered promiscuous mode [ 88.449718][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.486823][ T5777] veth1_vlan: entered promiscuous mode [ 88.519482][ T5775] veth0_vlan: entered promiscuous mode [ 88.530077][ T5774] veth1_vlan: entered promiscuous mode [ 88.569606][ T5775] veth1_vlan: entered promiscuous mode [ 88.617290][ T5776] veth0_vlan: entered promiscuous mode [ 88.650705][ T5777] veth0_macvtap: entered promiscuous mode [ 88.678391][ T5777] veth1_macvtap: entered promiscuous mode [ 88.694308][ T5775] veth0_macvtap: entered promiscuous mode [ 88.705619][ T5776] veth1_vlan: entered promiscuous mode [ 88.716937][ T5774] veth0_macvtap: entered promiscuous mode [ 88.728237][ T5774] veth1_macvtap: entered promiscuous mode [ 88.748377][ T5775] veth1_macvtap: entered promiscuous mode [ 88.785615][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.799832][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.813538][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.824962][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.834654][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.844387][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.870956][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.882718][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.894921][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.905509][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.917690][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.927752][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.938276][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.950662][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.977546][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.989704][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.001997][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.011858][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.026669][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.036789][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.047344][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.059363][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.070803][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.080016][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.088952][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.098457][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.136558][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.145492][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158215][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.167128][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.205385][ T5776] veth0_macvtap: entered promiscuous mode [ 89.238944][ T5776] veth1_macvtap: entered promiscuous mode [ 89.340078][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.352621][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.421386][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.434445][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.445976][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.456838][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.467093][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.478236][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.490200][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.543637][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.553509][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.558934][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.561942][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.585749][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.599299][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.613105][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.627430][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.640638][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.659765][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.670094][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.683008][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.691779][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.692299][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.707375][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.729090][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.738494][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.819635][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.838625][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.904311][ T5086] Bluetooth: hci1: command tx timeout [ 89.909793][ T5086] Bluetooth: hci2: command tx timeout [ 89.917132][ T51] Bluetooth: hci0: command tx timeout [ 89.918401][ T5783] Bluetooth: hci3: command tx timeout [ 89.997323][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.036572][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.059261][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.091136][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.321393][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.467541][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.472205][ T5086] Bluetooth: hci2: command tx timeout [ 92.477930][ T5086] Bluetooth: hci0: command tx timeout [ 92.487771][ T5086] Bluetooth: hci1: command tx timeout [ 92.497757][ T5086] Bluetooth: hci3: command tx timeout [ 92.507327][ T23] cfg80211: failed to load regulatory.db [ 93.542626][ T5874] syz.2.8[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.568154][ T5874] loop2: detected capacity change from 0 to 128 [ 93.739954][ T5877] loop3: detected capacity change from 0 to 8 [ 94.333427][ T5877] syz.3.6: attempt to access beyond end of device [ 94.333427][ T5877] loop3: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 94.348165][ T5877] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 94.355828][ T5877] unable to read xattr id index table [ 94.921627][ T5874] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.961679][ T5874] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.147564][ T5887] syzkaller0: entered promiscuous mode [ 95.163031][ T5887] syzkaller0: entered allmulticast mode [ 97.155242][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.312378][ T5909] loop3: detected capacity change from 0 to 128 [ 98.480898][ T5909] UDF-fs: bad mount option "" or missing value [ 98.811246][ T5910] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 98.872415][ T5789] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.732868][ T5916] xfrm0: entered promiscuous mode [ 99.737995][ T5916] xfrm0: entered allmulticast mode [ 101.726820][ T5940] "syz.3.21" (5940) uses obsolete ecb(arc4) skcipher [ 102.308126][ T5943] loop2: detected capacity change from 0 to 128 [ 102.321443][ T5943] ======================================================= [ 102.321443][ T5943] WARNING: The mand mount option has been deprecated and [ 102.321443][ T5943] and is ignored by this kernel. Remove the mand [ 102.321443][ T5943] option from the mount to silence this warning. [ 102.321443][ T5943] ======================================================= [ 102.356479][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.923101][ T5943] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.937292][ T5943] hpfs: filesystem error: improperly stopped [ 102.946284][ T5943] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.954121][ T5943] hpfs: You really don't want any checks? You are crazy... [ 102.963111][ T5943] hpfs: hpfs_map_sector(): read error [ 102.968945][ T5943] hpfs: code page support is disabled [ 102.975059][ T5943] hpfs: hpfs_map_4sectors(): unaligned read [ 102.981181][ T5943] hpfs: hpfs_map_4sectors(): unaligned read [ 102.987178][ T5943] hpfs: filesystem error: unable to find root dir [ 105.272791][ T5964] process 'syz.2.25' launched './file1' with NULL argv: empty string added [ 106.675001][ T5962] Bluetooth: MGMT ver 1.22 [ 107.162782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.572326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.996362][ T5086] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 115.397982][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 120.025521][ T6046] sched: RT throttling activated [ 124.514412][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'. [ 124.523453][ T6073] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 125.022666][ T6080] syzkaller0: entered promiscuous mode [ 125.028226][ T6080] syzkaller0: entered allmulticast mode [ 125.715878][ T6080] tc action pedit 'at' offset 20 out of bounds [ 126.661968][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.677539][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.691730][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.707167][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.733738][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.747613][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.200886][ T3002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.398884][ T3002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.263422][ T3002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.024564][ T5783] Bluetooth: hci4: command tx timeout [ 130.219078][ T6112] loop3: detected capacity change from 0 to 1024 [ 130.234834][ T3002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.102441][ T5783] Bluetooth: hci4: command tx timeout [ 131.470823][ T6087] chnl_net:caif_netlink_parms(): no params data found [ 132.234919][ T6130] loop2: detected capacity change from 0 to 32768 [ 132.338701][ T6130] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.653223][ T6130] XFS (loop2): Ending clean mount [ 132.670514][ T6141] loop0: detected capacity change from 0 to 2048 [ 132.684457][ T6130] XFS (loop2): Quotacheck needed: Please wait. [ 132.811860][ T6130] XFS (loop2): Quotacheck: Done. [ 132.874055][ T6141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.149061][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158217][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.182156][ T5783] Bluetooth: hci4: command tx timeout [ 133.706774][ T6149] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 134.422554][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.499580][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.613209][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.660529][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.701768][ T6087] bridge_slave_0: entered allmulticast mode [ 134.740671][ T6087] bridge_slave_0: entered promiscuous mode [ 134.775956][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.793250][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.801188][ T6087] bridge_slave_1: entered allmulticast mode [ 134.808858][ T6087] bridge_slave_1: entered promiscuous mode [ 135.267499][ T5783] Bluetooth: hci4: command tx timeout [ 135.896036][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.925643][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.795695][ T6179] loop3: detected capacity change from 0 to 1024 [ 136.804013][ T6179] journal_path: Lookup failure for './file0' [ 136.810079][ T6179] EXT4-fs: error: could not find journal device path [ 136.903979][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 137.198387][ T6162] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.882412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 139.313098][ T6087] team0: Port device team_slave_0 added [ 139.339373][ T6087] team0: Port device team_slave_1 added [ 139.450294][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.484349][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.557875][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.571026][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.578190][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.604317][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.741798][ T6195] netlink: 232 bytes leftover after parsing attributes in process `syz.3.72'. [ 140.489430][ T6199] loop3: detected capacity change from 0 to 512 [ 140.503008][ T6087] hsr_slave_0: entered promiscuous mode [ 140.525052][ T6087] hsr_slave_1: entered promiscuous mode [ 140.527429][ T6199] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.552915][ T6087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.560532][ T6087] Cannot create hsr debugfs directory [ 140.612232][ T6199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.697283][ T6199] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.773291][ T6199] EXT4-fs (loop3): 1 truncate cleaned up [ 140.780441][ T6199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.060246][ T6207] loop0: detected capacity change from 0 to 4096 [ 142.109075][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.002720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 143.491318][ T6218] syz.3.76 uses obsolete (PF_INET,SOCK_PACKET) [ 144.087825][ T6219] mmap: syz.2.73 (6219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.384808][ T6237] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.396144][ T6237] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.405327][ T6237] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.414111][ T6237] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.665234][ T6237] team0: Port device vxlan0 added [ 148.122559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.923845][ T6249] syzkaller0: entered promiscuous mode [ 148.952075][ T6249] syzkaller0: entered allmulticast mode [ 148.963820][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.009937][ T6252] tipc: Started in network mode [ 149.036531][ T6252] tipc: Node identity 5659b683df0a, cluster identity 4711 [ 149.062934][ T6252] tipc: Enabled bearer , priority 0 [ 149.132768][ T6255] tipc: Resetting bearer [ 149.139854][ T6087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.173538][ T6087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.192159][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 149.222215][ T5818] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.251294][ T5818] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.271572][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.292585][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.323035][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.342106][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.377612][ T5818] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.387196][ T6248] tipc: Resetting bearer [ 149.412408][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.447909][ T5818] usb 3-1: config 0 descriptor?? [ 149.455493][ T6248] tipc: Disabling bearer [ 149.492360][ T6087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.695989][ T3002] hsr_slave_0: left promiscuous mode [ 149.708387][ T3002] hsr_slave_1: left promiscuous mode [ 149.720964][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.731312][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.742839][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.750293][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.757539][ T5818] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 149.815125][ T3002] bridge_slave_1: left allmulticast mode [ 149.831091][ T3002] bridge_slave_1: left promiscuous mode [ 149.854925][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.891671][ T3002] bridge_slave_0: left allmulticast mode [ 149.933757][ T3002] bridge_slave_0: left promiscuous mode [ 149.962534][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.974148][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.993942][ T3002] veth1_macvtap: left promiscuous mode [ 150.999980][ T3002] veth0_macvtap: left promiscuous mode [ 151.006899][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.022311][ T3002] veth1_vlan: left promiscuous mode [ 151.031217][ T3002] veth0_vlan: left promiscuous mode [ 151.387148][ C0] usblp0: nonzero read bulk status received: -71 [ 151.437399][ T173] usb 3-1: USB disconnect, device number 2 [ 152.160353][ T6251] usblp0: removed [ 152.512659][ T6278] Can't find a SQUASHFS superblock on nullb0 [ 155.686434][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 155.777028][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 155.880947][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.013408][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.369610][ T6293] loop2: detected capacity change from 0 to 512 [ 156.383433][ T6293] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.417359][ T6293] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 156.472610][ T6293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 156.480726][ T6293] System zones: 1-12 [ 156.481367][ T3002] bond0 (unregistering): Released all slaves [ 156.486330][ T6293] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.503427][ T6293] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.91: bg 0: block 361: padding at end of block bitmap is not set [ 156.528806][ T6293] EXT4-fs (loop2): Remounting filesystem read-only [ 156.555540][ T6293] EXT4-fs (loop2): 1 truncate cleaned up [ 156.568264][ T6293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 156.706962][ T6087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.966692][ T6298] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.91: error -117 reading directory block [ 157.526231][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 157.629961][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.935048][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.430594][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.437973][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.710869][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.718136][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.426867][ T6332] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 159.822264][ T5086] Bluetooth: hci4: command tx timeout [ 160.278038][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.580285][ T6355] x_tables: ip_tables: osf match: only valid for protocol 6 [ 163.003076][ T6359] netlink: 84 bytes leftover after parsing attributes in process `syz.3.103'. [ 163.078996][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 163.198440][ T6366] lo speed is unknown, defaulting to 1000 [ 163.305042][ T6366] lo speed is unknown, defaulting to 1000 [ 163.382261][ T6366] lo speed is unknown, defaulting to 1000 [ 163.405220][ T6366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.501036][ T6366] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.673410][ T6087] veth0_vlan: entered promiscuous mode [ 163.717203][ T6380] loop0: detected capacity change from 0 to 164 [ 163.784104][ T6087] veth1_vlan: entered promiscuous mode [ 163.818469][ T6087] veth0_macvtap: entered promiscuous mode [ 163.848661][ T6380] rock: directory entry would overflow storage [ 163.856689][ T6380] rock: sig=0x4543, size=28, remaining=18 [ 164.029380][ T6366] lo speed is unknown, defaulting to 1000 [ 164.105946][ T6087] veth1_macvtap: entered promiscuous mode [ 164.453757][ T6366] lo speed is unknown, defaulting to 1000 [ 164.533728][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.581828][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.621871][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.632866][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.642829][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.653464][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.665728][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.758705][ T6380] bond1 (unregistering): Released all slaves [ 164.829666][ T6366] lo speed is unknown, defaulting to 1000 [ 164.839572][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.857484][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.869825][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.887563][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.897734][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.908801][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.921477][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.027705][ T6366] lo speed is unknown, defaulting to 1000 [ 165.049766][ T6087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.070072][ T6087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.103511][ T6087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.115949][ T6087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.154979][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.250867][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.078008][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.116050][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.653402][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 170.817666][ T6450] syzkaller1: entered promiscuous mode [ 170.836530][ T6450] syzkaller1: entered allmulticast mode [ 170.853188][ T6450] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 170.892402][ T6450] xt_CONNSECMARK: invalid mode: 254 [ 172.397581][ T6470] loop0: detected capacity change from 0 to 512 [ 172.416454][ T6470] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 172.431555][ T6470] UDF-fs: Scanning with blocksize 512 failed [ 172.439776][ T6473] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 172.464961][ T6470] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 172.481252][ T6470] UDF-fs: Scanning with blocksize 1024 failed [ 172.612602][ T6470] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 172.647121][ T6470] UDF-fs: Scanning with blocksize 2048 failed [ 172.751765][ T6470] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 172.847486][ T6480] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.079772][ T6470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.375881][ T5821] IPVS: starting estimator thread 0... [ 174.509078][ T6495] IPVS: using max 18 ests per chain, 43200 per kthread [ 178.009178][ T5086] Bluetooth: hci4: link tx timeout [ 178.015489][ T5086] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.028309][ T5783] Bluetooth: hci4: link tx timeout [ 178.033553][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.041551][ T5783] Bluetooth: hci4: link tx timeout [ 178.302882][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.328367][ T5783] Bluetooth: hci4: link tx timeout [ 178.354962][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.490446][ T5783] Bluetooth: hci4: link tx timeout [ 178.508035][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.140300][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 181.136829][ T6554] loop2: detected capacity change from 0 to 2048 [ 181.467436][ T6556] bridge_slave_0: left allmulticast mode [ 181.476209][ T6556] bridge_slave_0: left promiscuous mode [ 181.483386][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.494125][ T6554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.773420][ T6556] bridge_slave_1: left allmulticast mode [ 181.822619][ T6556] bridge_slave_1: left promiscuous mode [ 181.830325][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.376068][ T6556] bond0: (slave bond_slave_0): Releasing backup interface [ 182.434119][ T6556] bond0: (slave bond_slave_1): Releasing backup interface [ 182.511372][ T6556] team0: Port device team_slave_0 removed [ 182.566819][ T6556] team0: Port device team_slave_1 removed [ 182.582784][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.618626][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.651875][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.663439][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.749102][ T6559] geneve2: entered promiscuous mode [ 182.764363][ T6559] geneve2: entered allmulticast mode [ 182.772952][ T6559] batman_adv: batadv0: Adding interface: geneve2 [ 182.779863][ T6559] batman_adv: batadv0: Interface activated: geneve2 [ 182.841603][ T6568] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 183.057436][ T6568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.308671][ T6572] gretap1: entered promiscuous mode [ 183.321104][ T6572] bond1: (slave gretap1): making interface the new active one [ 183.331302][ T6572] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 183.419195][ T6575] macvlan2: entered promiscuous mode [ 183.486675][ T6575] macvlan2: entered allmulticast mode [ 185.265555][ T6575] bond1: entered promiscuous mode [ 185.318877][ T6575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.370635][ T6575] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 185.484205][ T6575] bond1: left promiscuous mode [ 185.593170][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 185.814332][ T6591] loop0: detected capacity change from 0 to 512 [ 185.889444][ T6591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.960139][ T6591] EXT4-fs (loop0): 1 truncate cleaned up [ 185.977854][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.069083][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.158647][ T6616] syz_tun: entered allmulticast mode [ 188.185610][ T6616] syz.4.150(6616): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 188.435147][ T6626] syzkaller0: entered promiscuous mode [ 188.474256][ T6626] syzkaller0: entered allmulticast mode [ 192.052177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 194.010696][ T6687] "syz.0.163" (6687) uses obsolete ecb(arc4) skcipher [ 194.542914][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549287][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.620290][ T2956] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 195.178877][ T6700] warning: `syz.0.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.088206][ T27] audit: type=1326 audit(1784688983.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1fb9de99 code=0x7ffc0000 [ 199.226124][ T27] audit: type=1326 audit(1784688983.426:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1fb9de99 code=0x7ffc0000 [ 199.250667][ T27] audit: type=1326 audit(1784688983.436:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1fb9de99 code=0x7ffc0000 [ 199.275162][ T27] audit: type=1326 audit(1784688983.436:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1fb9de99 code=0x7ffc0000 [ 199.732109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.034003][ T27] audit: type=1326 audit(1784688983.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1e1fb9de99 code=0x7ffc0000 [ 201.144684][ T6732] loop2: detected capacity change from 0 to 1024 [ 201.146540][ T27] audit: type=1326 audit(1784688983.546:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1fb9de99 code=0x7ffc0000 [ 201.351247][ T27] audit: type=1326 audit(1784688983.546:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e1fb9dc02 code=0x7ffc0000 [ 201.469998][ T27] audit: type=1326 audit(1784688983.546:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1e1fb9dc97 code=0x7ffc0000 [ 201.502767][ T27] audit: type=1326 audit(1784688983.546:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1e1fb5ab91 code=0x7ffc0000 [ 201.535409][ T27] audit: type=1326 audit(1784688983.546:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1e1fb9ec89 code=0x7ffc0000 [ 202.537659][ T6747] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.667251][ T6749] loop4: detected capacity change from 0 to 1024 [ 206.865802][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 206.944539][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 206.950721][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 207.937779][ T6793] syzkaller0: entered promiscuous mode [ 207.952094][ T6793] syzkaller0: entered allmulticast mode [ 208.440207][ T5792] Bluetooth: hci4: unexpected event for opcode 0x042c [ 209.663285][ T6809] loop4: detected capacity change from 0 to 4096 [ 209.874911][ T6809] NILFS (loop4): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 209.885644][ T6809] NILFS (loop4): error -5 getting root inode [ 209.900177][ T6810] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.178043][ T6162] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.315403][ T6811] loop0: detected capacity change from 0 to 4096 [ 212.407291][ T6811] fscrypt: Error allocating hmac(sha512): -2 [ 213.316972][ T6840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.332697][ T6840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 213.731192][ T6840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.986775][ T6840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.152886][ T6840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.158993][ T6840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.226332][ T6840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.227788][ T6852] netlink: 'syz.2.195': attribute type 3 has an invalid length. [ 214.249030][ T6840] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 214.737849][ T6855] syzkaller0: entered promiscuous mode [ 214.764778][ T6855] syzkaller0: entered allmulticast mode [ 215.442408][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 215.671307][ T6865] loop3: detected capacity change from 0 to 2048 [ 215.902939][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 216.391481][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 216.398084][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 216.703664][ T6865] NILFS (loop3): unrecognized mount option "Vl [ 216.703664][ T6865] norecovery" [ 218.522212][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 218.528310][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 218.542164][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 218.548270][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 220.416910][ T6888] futex_wake_op: syz.2.204 tries to shift op by 144; fix this program [ 220.566429][ T6888] usb usb8: usbfs: process 6888 (syz.2.204) did not claim interface 0 before use [ 221.880530][ T6895] loop3: detected capacity change from 0 to 8192 [ 222.571153][ T6895] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.593061][ T6895] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 222.656999][ T6895] REISERFS (device loop3): using ordered data mode [ 222.685306][ T6895] reiserfs: using flush barriers [ 222.720682][ T6895] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.934173][ T6895] REISERFS (device loop3): checking transaction log (loop3) [ 223.763030][ T6895] REISERFS (device loop3): Using r5 hash to sort names [ 223.841541][ T6895] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 223.975313][ T6908] syzkaller0: entered promiscuous mode [ 224.001659][ T6908] syzkaller0: entered allmulticast mode [ 225.009411][ T6916] tipc: Started in network mode [ 225.047143][ T6916] tipc: Node identity 16c04f6e1af6, cluster identity 4711 [ 225.092480][ T6916] tipc: Enabled bearer , priority 0 [ 225.112720][ T6925] syzkaller0: entered promiscuous mode [ 225.123585][ T6925] syzkaller0: entered allmulticast mode [ 225.312282][ T6916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.202'. [ 225.359821][ T6925] tipc: Resetting bearer [ 225.374462][ T6914] tipc: Resetting bearer [ 225.471740][ T6933] loop3: detected capacity change from 0 to 128 [ 226.132928][ T6914] tipc: Disabling bearer [ 226.165684][ T6933] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.180307][ T6933] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.194400][ T6933] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.325177][ T6937] loop0: detected capacity change from 0 to 512 [ 226.340644][ T6937] EXT4-fs: Ignoring removed i_version option [ 226.350226][ T6162] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.360627][ T6937] EXT4-fs: Ignoring removed nobh option [ 226.412785][ T6937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 226.666382][ T6937] EXT4-fs (loop0): 1 truncate cleaned up [ 226.678334][ T6937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.892026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.892118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 231.631116][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.932126][ T6986] loop0: detected capacity change from 0 to 4096 [ 235.644375][ T6986] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 235.662683][ T6986] ntfs3: loop0: Failed to load $Bitmap (-22). [ 236.572137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.850074][ T7016] No such timeout policy "syz1" [ 245.558334][ T173] IPVS: starting estimator thread 0... [ 245.692222][ T7035] IPVS: using max 17 ests per chain, 40800 per kthread [ 246.063286][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 254.803152][ T7091] syzkaller0: entered promiscuous mode [ 254.822172][ T7091] syzkaller0: entered allmulticast mode [ 255.912920][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919296][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.278433][ T5792] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 257.490053][ T7109] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 258.648896][ T7113] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 261.845677][ T7131] loop2: detected capacity change from 0 to 2048 [ 261.925975][ T7131] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 261.988030][ T7131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.919706][ T7135] loop3: detected capacity change from 0 to 32768 [ 263.039835][ T7146] netlink: 64 bytes leftover after parsing attributes in process `syz.2.252'. [ 263.077581][ T7135] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.386641][ T7135] XFS (loop3): Ending clean mount [ 263.407249][ T7135] XFS (loop3): Quotacheck needed: Please wait. [ 263.601893][ T7135] XFS (loop3): Quotacheck: Done. [ 264.039450][ T7154] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 264.066140][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.072642][ T7154] CIFS: Unable to determine destination address [ 264.494932][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.343722][ T7162] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.175973][ T5792] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 274.272421][ T7220] loop4: detected capacity change from 0 to 32768 [ 274.529083][ T7220] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.242763][ T7220] XFS (loop4): Ending clean mount [ 275.383992][ T7220] XFS (loop4): Quotacheck needed: Please wait. [ 276.004227][ T7220] XFS (loop4): Quotacheck: Done. [ 276.740146][ T7241] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.722106][ T6087] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 280.250784][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 284.051857][ T7301] loop4: detected capacity change from 0 to 4096 [ 285.144807][ T7306] loop0: detected capacity change from 0 to 32768 [ 285.420374][ T7306] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 285.429087][ T7306] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 285.932550][ T7306] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 4ms [ 285.971636][ T789] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 286.000745][ T789] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 286.725014][ T789] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 724ms [ 286.747259][ T789] gfs2: fsid=syz:syz.0: jid=0: Done [ 286.776123][ T7306] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 289.321781][ T6401] IPVS: starting estimator thread 0... [ 289.852880][ T7341] IPVS: using max 17 ests per chain, 40800 per kthread [ 289.943775][ T7348] loop3: detected capacity change from 0 to 512 [ 289.953262][ T7347] loop2: detected capacity change from 0 to 128 [ 289.973410][ T7348] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.990952][ T7348] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 290.086136][ T7348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 290.302622][ T7348] System zones: 1-12 [ 290.306959][ T7348] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.356132][ T7348] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.285: bg 0: block 361: padding at end of block bitmap is not set [ 290.992453][ T7348] EXT4-fs (loop3): Remounting filesystem read-only [ 291.105322][ T7348] EXT4-fs (loop3): 1 truncate cleaned up [ 291.139624][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 291.577057][ T7362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 291.670783][ T7365] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.285: error -117 reading directory block [ 292.073627][ T7362] binder: 7358:7362 ioctl c0306201 0 returned -14 [ 292.104994][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 292.267940][ T7366] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 298.848457][ T7415] loop4: detected capacity change from 0 to 512 [ 299.036441][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 299.212259][ T7421] overlayfs: invalid redirect (./bus) [ 299.842991][ T7415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 300.196977][ T7415] EXT4-fs (loop4): 1 truncate cleaned up [ 300.264709][ T7415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.440461][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.888375][ T7468] netlink: 84 bytes leftover after parsing attributes in process `syz.2.307'. [ 308.514929][ T7487] overlayfs: invalid redirect (./bus) [ 311.480959][ T7499] batman_adv: batadv0: Adding interface: vxlan0 [ 311.582033][ T7499] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.613133][ T7499] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 312.614318][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'. [ 312.625759][ T7515] lo speed is unknown, defaulting to 1000 [ 312.631615][ T7515] lo speed is unknown, defaulting to 1000 [ 312.680908][ T7515] lo speed is unknown, defaulting to 1000 [ 312.840472][ T7515] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 312.849669][ T7520] veth1_to_bond: entered allmulticast mode [ 312.863911][ T7520] veth1_to_bond: entered promiscuous mode [ 312.879847][ T7520] Zero length message leads to an empty skb [ 312.925850][ T7520] veth1_to_bond: left promiscuous mode [ 312.942451][ T7520] veth1_to_bond: left allmulticast mode [ 312.990838][ T7515] lo speed is unknown, defaulting to 1000 [ 312.998685][ T7515] lo speed is unknown, defaulting to 1000 [ 314.089991][ T7515] lo speed is unknown, defaulting to 1000 [ 314.147686][ T7515] lo speed is unknown, defaulting to 1000 [ 315.524986][ T7544] netlink: 84 bytes leftover after parsing attributes in process `syz.3.329'. [ 316.165569][ T7544] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 316.177115][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 317.348812][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355436][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.670809][ T7561] loop0: detected capacity change from 0 to 1024 [ 318.388080][ T7561] EXT4-fs: Ignoring removed oldalloc option [ 318.632127][ T7561] EXT4-fs: Ignoring removed orlov option [ 319.434838][ T7561] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 319.447827][ T7561] System zones: 0-1, 3-12 [ 319.456644][ T7561] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.085318][ T5781] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 320.351692][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 324.087704][ T7599] tipc: Enabled bearer , priority 0 [ 324.106071][ T7599] syzkaller0: entered promiscuous mode [ 324.129536][ T7599] syzkaller0: entered allmulticast mode [ 324.319932][ T7615] tipc: Resetting bearer [ 324.388244][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 326.884674][ T6401] tipc: Node number set to 2303964803 [ 326.893483][ T7598] tipc: Resetting bearer [ 327.779227][ T7598] tipc: Disabling bearer [ 327.840021][ T7623] batman_adv: batadv0: Adding interface: dummy0 [ 327.854963][ T7623] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.882058][ T7623] batman_adv: batadv0: Interface activated: dummy0 [ 327.930024][ T7623] batadv0: mtu less than device minimum [ 328.182794][ T7630] overlay: Unknown parameter '/' [ 328.242721][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.254926][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.266683][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.278351][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.290008][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.301672][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.314118][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.326631][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.338480][ T7623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 329.156369][ T7633] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 330.914079][ T6401] libceph: connect (1)[c::]:6789 error -101 [ 330.921037][ T6401] libceph: mon0 (1)[c::]:6789 connect error [ 330.991380][ T7637] ceph: No mds server is up or the cluster is laggy [ 331.002516][ T6401] libceph: connect (1)[c::]:6789 error -101 [ 331.009055][ T6401] libceph: mon0 (1)[c::]:6789 connect error [ 331.342509][ T7654] syz.0.355 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 331.928625][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 332.032841][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 332.109141][ T7653] loop4: detected capacity change from 0 to 512 [ 333.102628][ T5821] IPVS: starting estimator thread 0... [ 333.136255][ T7653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.192149][ T7659] IPVS: using max 26 ests per chain, 62400 per kthread [ 333.235631][ T7653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.323633][ T7653] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.152201][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 335.357386][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.375690][ T7683] tty tty27: ldisc open failed (-12), clearing slot 26 [ 341.194588][ T7719] net_ratelimit: 10 callbacks suppressed [ 341.194606][ T7719] sctp: failed to load transform for md5: -2 [ 342.052606][ T7725] loop9: detected capacity change from 0 to 7 [ 342.927217][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.936707][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 342.973615][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.982878][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.047570][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.056879][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.068885][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.078133][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.088570][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.097830][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.311097][ T7735] loop0: detected capacity change from 0 to 32768 [ 343.329216][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.338485][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.347304][ T7725] ldm_validate_partition_table(): Disk read failed. [ 343.355874][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.365102][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.374712][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.383937][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.393065][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.402349][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.411045][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.420291][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.428374][ T7725] Dev loop9: unable to read RDB block 0 [ 343.440628][ T7725] loop9: unable to read partition table [ 343.447263][ T7725] loop9: partition table beyond EOD, truncated [ 343.453541][ T7725] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 343.584548][ T7735] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 343.694602][ T7735] XFS (loop0): Ending clean mount [ 343.713296][ T7735] XFS (loop0): Quotacheck needed: Please wait. [ 343.795941][ T7735] XFS (loop0): Quotacheck: Done. [ 344.591572][ T27] kauditd_printk_skb: 107 callbacks suppressed [ 344.591625][ T27] audit: type=1800 audit(1784689128.916:119): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 344.998247][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.083165][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.377'. [ 347.812843][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 351.564609][ T7789] netlink: 84 bytes leftover after parsing attributes in process `syz.0.383'. [ 352.052615][ T7796] syz.3.375: attempt to access beyond end of device [ 352.052615][ T7796] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 352.066715][ T7796] hfsplus: unable to find HFS+ superblock [ 352.096842][ T7789] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 352.136941][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 353.435853][ T7809] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 354.798785][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 357.291470][ T7828] loop4: detected capacity change from 0 to 4096 [ 357.342596][ T7834] futex_wake_op: syz.2.395 tries to shift op by 144; fix this program [ 357.947754][ T7828] EXT4-fs: inline encryption not supported [ 357.997567][ T7828] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.271845][ T7828] EXT4-fs: Ignoring removed bh option [ 358.513090][ T7828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.840545][ T7828] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 358.879285][ T7828] System zones: 0-5 [ 358.906627][ T7828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.101720][ T7840] netlink: 84 bytes leftover after parsing attributes in process `syz.2.398'. [ 359.166056][ T7840] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 359.202007][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 360.522644][ T7839] sctp: failed to load transform for md5: -2 [ 360.856594][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.402'. [ 360.888607][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.052757][ T5792] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 365.375323][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 365.528369][ T7919] syz.2.413: attempt to access beyond end of device [ 365.528369][ T7919] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 365.542060][ T7919] hfsplus: unable to find HFS+ superblock [ 368.881105][ T7942] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 369.040166][ T5792] Bluetooth: hci3: Malformed LE Event: 0x0d [ 369.041402][ T7948] random: crng reseeded on system resumption [ 369.170340][ T7953] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.419' sets config #1 [ 369.688833][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 372.372260][ T7981] loop4: detected capacity change from 0 to 32768 [ 372.459842][ T7981] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 372.739467][ T7981] XFS (loop4): Ending clean mount [ 372.751211][ T7981] XFS (loop4): Quotacheck needed: Please wait. [ 373.515004][ T7981] XFS (loop4): Quotacheck: Done. [ 374.347102][ T27] audit: type=1800 audit(1784689158.666:120): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.427" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 374.671505][ T6087] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 375.791174][ T173] libceph: connect (1)[c::]:6789 error -101 [ 375.805872][ T173] libceph: mon0 (1)[c::]:6789 connect error [ 375.849819][ T8017] ceph: No mds server is up or the cluster is laggy [ 380.664089][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.670467][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.956003][ T8058] xt_l2tp: unknown flags: 17 [ 384.243272][ T173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 385.129021][ T173] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.188791][ T173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.248433][ T173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.281004][ T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.317977][ T173] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.347297][ T173] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.389838][ T173] usb 4-1: Product: syz [ 385.561970][ T173] usb 4-1: Manufacturer: syz [ 385.609870][ T173] cdc_wdm 4-1:1.0: skipping garbage [ 385.630681][ T173] cdc_wdm 4-1:1.0: skipping garbage [ 386.621770][ T173] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 386.881725][ T173] usb 4-1: USB disconnect, device number 2 [ 387.987785][ T8095] loop4: detected capacity change from 0 to 32768 [ 388.273072][ T8095] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 388.430457][ T8095] XFS (loop4): Ending clean mount [ 388.907657][ T8119] loop0: detected capacity change from 0 to 64 [ 389.259160][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 389.266071][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 389.427747][ T6087] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 389.766068][ T8126] loop2: detected capacity change from 0 to 64 [ 390.297045][ T8136] syz.2.448: attempt to access beyond end of device [ 390.297045][ T8136] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 390.311316][ T8136] buffer_io_error: 5 callbacks suppressed [ 390.311424][ T8136] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 392.955921][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 392.981878][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.918618][ T8157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.861758][ T8204] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 401.119465][ T8228] loop0: detected capacity change from 0 to 512 [ 401.157053][ T8228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.202059][ T8228] ext4: Unknown parameter 'fscontext' [ 401.516014][ T8230] loop2: detected capacity change from 0 to 1024 [ 402.233660][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.587239][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.915972][ T8273] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 407.131268][ T8286] loop2: detected capacity change from 0 to 512 [ 407.148069][ T8286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.159244][ T8286] ext4: Unknown parameter 'fscontext' [ 407.218060][ T6143] blk_print_req_error: 5 callbacks suppressed [ 407.218078][ T6143] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.973873][ T8298] loop0: detected capacity change from 0 to 1024 [ 409.051664][ T8301] loop3: detected capacity change from 0 to 64 [ 409.102637][ T8298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.930453][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.426179][ T8325] loop2: detected capacity change from 0 to 64 [ 414.519715][ T5774] hfs: node 4:3 still has 1 user(s)! [ 414.593819][ T8325] syz.2.491: attempt to access beyond end of device [ 414.593819][ T8325] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 415.217489][ T8325] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 419.240740][ T8354] pimreg: entered allmulticast mode [ 419.296299][ T8354] pimreg: left allmulticast mode [ 419.712959][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 420.772224][ T8366] loop3: detected capacity change from 0 to 1024 [ 421.673541][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.205922][ T8373] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 422.748436][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.485248][ T8379] loop4: detected capacity change from 0 to 64 [ 426.556523][ T8404] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 426.566107][ T8404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 426.575761][ T8404] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 426.592260][ T8404] syz.3.507 (8404) used greatest stack depth: 17736 bytes left [ 426.646806][ T27] audit: type=1800 audit(1784689210.906:121): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.507" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 428.583597][ T8421] loop4: detected capacity change from 0 to 1024 [ 428.869390][ T8421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.316271][ T8434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 432.775622][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.823603][ T5792] Bluetooth: hci0: Malformed LE Event: 0x1b [ 433.367617][ T8447] netlink: 80 bytes leftover after parsing attributes in process `syz.0.521'. [ 440.004796][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 440.312807][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.319252][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.605455][ T8488] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 442.668614][ T8488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.870497][ T8491] bond2: (slave veth3): Enslaving as an active interface with a down link [ 443.951764][ T8495] NILFS (nbd2): device size too small [ 444.148943][ T8488] vlan2: entered allmulticast mode [ 444.222803][ T8488] veth0_to_bond: entered allmulticast mode [ 444.229719][ T8488] veth0_to_bond: entered promiscuous mode [ 444.285388][ T8501] loop3: detected capacity change from 0 to 512 [ 444.293039][ T8501] EXT4-fs: Ignoring removed i_version option [ 444.300199][ T8501] EXT4-fs: Ignoring removed nobh option [ 444.327557][ T8488] veth0_to_bond: left promiscuous mode [ 444.338134][ T8488] bond2: (slave vlan2): making interface the new active one [ 444.346432][ T8501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 444.348747][ T8488] veth0_to_bond: entered promiscuous mode [ 444.373155][ T8488] vlan2: entered promiscuous mode [ 444.382288][ T8488] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 444.826872][ T8501] EXT4-fs (loop3): 1 truncate cleaned up [ 444.842838][ T8501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.976157][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.532833][ T8515] loop3: detected capacity change from 0 to 1024 [ 447.730985][ T8515] hfsplus: xattr searching failed [ 447.938866][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 447.955676][ T7825] hfsplus: b-tree write err: -5, ino 3 [ 448.104909][ T8522] bridge2: port 1(veth5) entered blocking state [ 448.111373][ T8522] bridge2: port 1(veth5) entered disabled state [ 448.139210][ T8522] veth5: entered allmulticast mode [ 448.154255][ T8522] veth5: entered promiscuous mode [ 448.426124][ T8524] bridge2: port 2(veth0_to_bond) entered blocking state [ 448.452333][ T8524] bridge2: port 2(veth0_to_bond) entered disabled state [ 448.456238][ T8529] loop3: detected capacity change from 0 to 64 [ 449.546473][ T8527] bridge2: port 3(veth7) entered blocking state [ 449.562247][ T8527] bridge2: port 3(veth7) entered disabled state [ 449.568889][ T8527] veth7: entered allmulticast mode [ 450.353631][ T8527] veth7: entered promiscuous mode [ 450.509162][ T2935] bond2: (slave vlan2): link status definitely down, disabling slave [ 450.567982][ T2935] vlan2: left promiscuous mode [ 450.579406][ T2935] bond2: now running without any active interface! [ 454.030844][ T8573] NILFS (nullb0): couldn't find nilfs on the device [ 457.607608][ T8586] loop4: detected capacity change from 0 to 4096 [ 458.052982][ T8586] EXT4-fs: inline encryption not supported [ 458.222668][ T8586] EXT4-fs: quotafile must be on filesystem root [ 459.006049][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 461.830723][ T8609] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 463.031660][ T8681] loop4: detected capacity change from 0 to 1024 [ 464.782334][ T8694] loop2: detected capacity change from 0 to 1024 [ 465.158896][ T8694] hfsplus: xattr searching failed [ 465.180732][ T8694] hfsplus: xattr searching failed [ 465.206983][ T8694] hfsplus: b-tree write err: -5, ino 3 [ 465.485012][ T8663] hfsplus: b-tree write err: -5, ino 3 [ 470.410994][ T8715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 471.758400][ T5792] Bluetooth: hci2: Malformed LE Event: 0x1b [ 471.887304][ T8719] tipc: Started in network mode [ 471.927793][ T8719] tipc: Node identity 2007ff, cluster identity 4711 [ 473.632913][ T8719] tipc: Node number set to 2099199 [ 473.944454][ T8726] loop4: detected capacity change from 0 to 512 [ 473.970981][ T8726] EXT4-fs: Ignoring removed oldalloc option [ 475.082433][ T8726] EXT4-fs (loop4): 1 truncate cleaned up [ 475.089654][ T8726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.367644][ T8740] loop2: detected capacity change from 0 to 512 [ 475.428327][ T8740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.888591][ T8740] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.574: corrupted xattr entries [ 476.992914][ T8740] EXT4-fs (loop2): Remounting filesystem read-only [ 477.009889][ T8740] EXT4-fs (loop2): 1 truncate cleaned up [ 477.023386][ T8740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.231129][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.250010][ T8752] xt_CT: No such helper "pptp" [ 478.490903][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.570641][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 485.114628][ T8801] 0x000000000007-0x000000020000 : "" [ 485.275302][ T8801] ftl_cs: FTL header corrupt! [ 490.968826][ T8822] capability: warning: `syz.4.593' uses deprecated v2 capabilities in a way that may be insecure [ 494.948448][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 495.148642][ T8850] loop4: detected capacity change from 0 to 1024 [ 496.444174][ T8864] loop3: detected capacity change from 0 to 512 [ 496.462407][ T8864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 496.527565][ T8864] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.602: corrupted xattr entries [ 496.559608][ T8864] EXT4-fs (loop3): Remounting filesystem read-only [ 496.581676][ T8864] EXT4-fs (loop3): 1 truncate cleaned up [ 496.608945][ T8864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.768584][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.758315][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.047463][ T8886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.513557][ T8888] loop4: detected capacity change from 0 to 64 [ 499.824071][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 500.325552][ T8893] syz.4.616: attempt to access beyond end of device [ 500.325552][ T8893] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 500.339422][ T8893] Buffer I/O error on dev loop4, logical block 8388608, lost async page write [ 503.553684][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.560037][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.649486][ T8919] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 508.057877][ T8933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.939978][ T8951] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 511.921937][ T8969] loop3: detected capacity change from 0 to 32768 [ 513.962845][ T8969] (syz.3.614,8969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 513.993570][ T8969] (syz.3.614,8969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 514.097205][ T8969] (syz.3.614,8969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 514.114425][ T8969] (syz.3.614,8969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 514.136994][ T8969] JBD2: Ignoring recovery information on journal [ 515.947111][ T8969] JBD2: journal reset failed [ 515.952041][ T8969] (syz.3.614,8969,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 515.960843][ T8969] (syz.3.614,8969,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 519.666908][ T9008] loop2: detected capacity change from 0 to 128 [ 519.701589][ T9008] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.719759][ T9008] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 519.785387][ T9012] loop4: detected capacity change from 0 to 64 [ 520.551630][ T9018] syz.4.629: attempt to access beyond end of device [ 520.551630][ T9018] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 520.565631][ T9018] Buffer I/O error on dev loop4, logical block 8388608, lost async page write [ 520.607356][ T9013] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 520.936421][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.281773][ T9020] loop4: detected capacity change from 0 to 32768 [ 521.385689][ T9020] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 521.512260][ T9020] XFS (loop4): Ending clean mount [ 521.533532][ T9020] XFS (loop4): Quotacheck needed: Please wait. [ 522.272627][ T9020] XFS (loop4): Quotacheck: Done. [ 524.277100][ T5821] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 524.377932][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 524.384727][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 524.930700][ T9048] syzkaller0: entered promiscuous mode [ 524.986956][ T6087] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 525.015165][ T9048] syzkaller0: entered allmulticast mode [ 525.022700][ T5821] usb 3-1: device descriptor read/all, error -71 [ 525.103478][ T9048] tipc: Started in network mode [ 525.108435][ T9048] tipc: Node identity ce6d6f180aa3, cluster identity 4711 [ 525.145665][ T9048] tipc: Enabled bearer , priority 0 [ 525.190756][ T9053] loop3: detected capacity change from 0 to 64 [ 525.393072][ T9048] tipc: Resetting bearer [ 525.471419][ T9046] tipc: Resetting bearer [ 525.505600][ T9046] tipc: Disabling bearer [ 525.601305][ T9056] syz.3.646: attempt to access beyond end of device [ 525.601305][ T9056] loop3: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 525.615221][ T9056] Buffer I/O error on dev loop3, logical block 8388608, lost async page write [ 532.073088][ T9087] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 541.738142][ T9117] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 543.219921][ T9137] loop4: detected capacity change from 0 to 64 [ 544.135234][ T9146] syz.4.664: attempt to access beyond end of device [ 544.135234][ T9146] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 544.149560][ T9146] Buffer I/O error on dev loop4, logical block 8388608, lost async page write [ 544.961334][ T9152] syzkaller0: entered promiscuous mode [ 544.980102][ T9152] syzkaller0: entered allmulticast mode [ 545.028741][ T9152] tipc: Enabled bearer , priority 0 [ 545.158589][ T9152] tipc: Resetting bearer [ 545.227138][ T9151] tipc: Resetting bearer [ 546.440230][ T9151] tipc: Disabling bearer [ 546.484603][ T5819] tipc: Node number set to 204885870 [ 552.588206][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 554.620827][ T9214] loop4: detected capacity change from 0 to 40427 [ 555.340483][ T9214] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 555.348767][ T9214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 555.364433][ T9214] F2FS-fs (loop4): invalid crc value [ 555.395563][ T9214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 555.520865][ T9214] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 555.528315][ T9214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 563.509824][ T9273] ntfs3: loop2: try to read out of volume at offset 0x0 [ 565.763533][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.770441][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.370901][ T9295] loop2: detected capacity change from 0 to 764 [ 570.495516][ T9295] rock: directory entry would overflow storage [ 570.501836][ T9295] rock: sig=0x4654, size=5, remaining=4 [ 571.499258][ T9307] loop2: detected capacity change from 0 to 64 [ 572.002703][ T9307] syz.2.701: attempt to access beyond end of device [ 572.002703][ T9307] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 572.016499][ T9307] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 572.610633][ T9317] loop2: detected capacity change from 0 to 64 [ 573.340563][ T9317] syz.2.712: attempt to access beyond end of device [ 573.340563][ T9317] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 573.355105][ T9317] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 574.599485][ T9323] block device autoloading is deprecated and will be removed. [ 576.486072][ T9344] loop0: detected capacity change from 0 to 512 [ 576.753563][ T9344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.766900][ T9344] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.035364][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.559536][ T9375] loop2: detected capacity change from 0 to 64 [ 582.939880][ T9376] syz.2.716: attempt to access beyond end of device [ 582.939880][ T9376] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 582.953619][ T9376] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 585.465230][ T9392] loop4: detected capacity change from 0 to 1024 [ 585.798169][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.853150][ T9407] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 589.233395][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.487630][ T9412] loop4: detected capacity change from 0 to 4096 [ 589.525068][ T9412] EXT4-fs: Ignoring removed mblk_io_submit option [ 589.834773][ T9412] EXT4-fs (loop4): Test dummy encryption mode enabled [ 589.857898][ T9412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.652337][ T27] audit: type=1800 audit(1784689371.850:122): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.726" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 590.865653][ T6087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.091702][ T9425] loop4: detected capacity change from 0 to 64 [ 591.112512][ T9427] loop2: detected capacity change from 0 to 64 [ 591.407418][ T9428] syz.4.728: attempt to access beyond end of device [ 591.407418][ T9428] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 591.421221][ T9428] Buffer I/O error on dev loop4, logical block 8388608, lost async page write [ 591.571929][ T9429] syz.2.727: attempt to access beyond end of device [ 591.571929][ T9429] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 591.586178][ T9429] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 592.218526][ T9434] loop0: detected capacity change from 0 to 64 [ 592.538288][ T9438] syz.0.737: attempt to access beyond end of device [ 592.538288][ T9438] loop0: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 592.552216][ T9438] Buffer I/O error on dev loop0, logical block 8388608, lost async page write [ 592.565513][ T9440] loop3: detected capacity change from 0 to 256 [ 592.868913][ T9440] FAT-fs (loop3): Directory bread(block 64) failed [ 592.918456][ T9440] FAT-fs (loop3): Directory bread(block 65) failed [ 592.981171][ T9440] FAT-fs (loop3): Directory bread(block 66) failed [ 593.087739][ T9440] FAT-fs (loop3): Directory bread(block 67) failed [ 593.277955][ T9440] FAT-fs (loop3): Directory bread(block 68) failed [ 593.284658][ T9440] FAT-fs (loop3): Directory bread(block 69) failed [ 593.370755][ T9440] FAT-fs (loop3): Directory bread(block 70) failed [ 593.377370][ T9440] FAT-fs (loop3): Directory bread(block 71) failed [ 593.414561][ T9440] FAT-fs (loop3): Directory bread(block 72) failed [ 593.434739][ T9440] FAT-fs (loop3): Directory bread(block 73) failed [ 593.675805][ T9440] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 597.718901][ T9464] loop0: detected capacity change from 0 to 64 [ 598.105698][ T9466] loop2: detected capacity change from 0 to 40427 [ 598.202803][ T9466] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 598.210662][ T9466] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 598.222613][ T9466] F2FS-fs (loop2): invalid crc value [ 598.243819][ T9466] F2FS-fs (loop2): Found nat_bits in checkpoint [ 598.304056][ T9471] syz.0.739: attempt to access beyond end of device [ 598.304056][ T9471] loop0: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 598.317932][ T9471] Buffer I/O error on dev loop0, logical block 8388608, lost async page write [ 598.568336][ T9466] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 598.576065][ T9466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 599.037213][ T9479] syz.2.736: attempt to access beyond end of device [ 599.037213][ T9479] loop2: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 600.832386][ T9490] set match dimension is over the limit! [ 601.686850][ T9494] xt_CT: No such helper "pptp" [ 603.586059][ T9505] xt_CT: No such helper "pptp" [ 605.808041][ T9515] loop0: detected capacity change from 0 to 64 [ 606.239896][ T9520] syz.0.750: attempt to access beyond end of device [ 606.239896][ T9520] loop0: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 606.253665][ T9520] Buffer I/O error on dev loop0, logical block 8388608, lost async page write [ 606.814194][ T9521] loop3: detected capacity change from 0 to 1024 [ 606.856551][ T9521] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 606.867735][ T9521] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 606.910224][ T9521] JBD2: no valid journal superblock found [ 606.965242][ T9521] EXT4-fs (loop3): Could not load journal inode [ 608.002732][ T9528] loop3: detected capacity change from 0 to 40427 [ 608.029884][ T9528] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 608.037873][ T9528] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 608.051254][ T9528] F2FS-fs (loop3): invalid crc value [ 608.070728][ T9528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 608.138267][ T9528] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 608.145764][ T9528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 608.564035][ T9540] syz.3.754: attempt to access beyond end of device [ 608.564035][ T9540] loop3: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 610.567599][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.348284][ T9565] xt_CT: No such helper "pptp" [ 612.575813][ T9568] xt_CT: No such helper "pptp" [ 615.283183][ T5792] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 615.283282][ T5792] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 615.298339][ T5792] Bluetooth: hci2: Malformed LE Event: 0x02 [ 616.203442][ T9592] NILFS (nullb0): couldn't find nilfs on the device [ 618.225813][ T9601] loop0: detected capacity change from 0 to 8192 [ 618.253990][ T9601] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 618.267309][ T9601] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 618.276807][ T9601] REISERFS (device loop0): using ordered data mode [ 618.283562][ T9601] reiserfs: using flush barriers [ 618.290629][ T9601] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 618.307765][ T9601] REISERFS (device loop0): checking transaction log (loop0) [ 618.319609][ T9601] REISERFS (device loop0): Using r5 hash to sort names [ 618.328453][ T9601] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 618.630930][ T9606] loop3: detected capacity change from 0 to 1024 [ 618.784643][ T9292] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 619.017482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.671654][ T9611] xt_CT: No such helper "pptp" [ 619.845970][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 621.251390][ T9635] netlink: 'syz.3.771': attribute type 10 has an invalid length. [ 623.137348][ T9652] loop4: detected capacity change from 0 to 32768 [ 623.472120][ T9652] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.778673][ T9652] XFS (loop4): Ending clean mount [ 623.788283][ T9652] XFS (loop4): Quotacheck needed: Please wait. [ 623.894738][ T9652] XFS (loop4): Quotacheck: Done. [ 624.671611][ T27] audit: type=1800 audit(1784689403.705:123): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.767" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 624.986949][ T9677] xt_CT: No such helper "pptp" [ 625.175014][ T6087] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 625.547714][ T9680] loop3: detected capacity change from 0 to 4096 [ 625.563449][ T9680] EXT4-fs: Ignoring removed mblk_io_submit option [ 625.672112][ T9680] EXT4-fs (loop3): Test dummy encryption mode enabled [ 625.759005][ T9680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.350678][ T9687] xt_CT: No such helper "pptp" [ 627.130112][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.782'. [ 627.266999][ T27] audit: type=1800 audit(1784689406.344:124): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.781" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 627.361439][ T27] audit: type=1800 audit(1784689406.344:125): pid=9693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.781" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 627.509620][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.840652][ T9708] loop4: detected capacity change from 0 to 16 [ 628.878164][ T9708] erofs: (device loop4): mounted with root inode @ nid 36. [ 628.948396][ T9708] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 628.960186][ T9708] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 628.969645][ T9708] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 628.980888][ T9708] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 628.990132][ T9708] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 629.007894][ T9708] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 629.017467][ T9708] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 629.028964][ T9708] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 629.040370][ T9708] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 629.152000][ T27] audit: type=1800 audit(1784689408.037:126): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.784" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 630.032930][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.114859][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.151255][ T9723] netlink: 'syz.2.788': attribute type 4 has an invalid length. [ 634.830428][ T9738] afs: Bad value for 'source' [ 637.143541][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 637.704667][ T9754] ubi0: attaching mtd0 [ 637.713486][ T9754] ubi0: scanning is finished [ 637.718240][ T9754] ubi0: empty MTD device detected [ 638.016120][ T9754] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 638.449766][ T9759] loop2: detected capacity change from 0 to 4096 [ 639.249036][ T9759] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.304044][ T9759] EXT4-fs (loop2): Test dummy encryption mode enabled [ 639.343689][ T9759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.827634][ T9769] netlink: 'syz.4.805': attribute type 4 has an invalid length. [ 640.917377][ T9] lo speed is unknown, defaulting to 1000 [ 642.254114][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.520929][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 643.535720][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 643.545586][ T9790] [ 643.547954][ T9790] ====================================================== [ 643.555088][ T9790] WARNING: possible circular locking dependency detected [ 643.562146][ T9790] syzkaller #0 Not tainted [ 643.566586][ T9790] ------------------------------------------------------ [ 643.573625][ T9790] syz.0.804/9790 is trying to acquire lock: [ 643.579540][ T9790] ffff88802fa39eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x72/0xa0 [ 643.590046][ T9790] [ 643.590046][ T9790] but task is already holding lock: [ 643.597439][ T9790] ffff88801ea4a690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 643.607747][ T9790] [ 643.607747][ T9790] which lock already depends on the new lock. [ 643.607747][ T9790] [ 643.618213][ T9790] [ 643.618213][ T9790] the existing dependency chain (in reverse order) is: [ 643.627256][ T9790] [ 643.627256][ T9790] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 643.635587][ T9790] __mutex_lock+0x135/0xc80 [ 643.640752][ T9790] __netlink_dump_start+0xf4/0x7a0 [ 643.646430][ T9790] ip_set_dump+0x15c/0x1f0 [ 643.651442][ T9790] nfnetlink_rcv_msg+0xcaf/0x1290 [ 643.657055][ T9790] netlink_rcv_skb+0x235/0x4c0 [ 643.662397][ T9790] nfnetlink_rcv+0x2c9/0x2490 [ 643.667644][ T9790] netlink_unicast+0x7b1/0x930 [ 643.673009][ T9790] netlink_sendmsg+0x8d0/0xbf0 [ 643.678350][ T9790] ____sys_sendmsg+0x61b/0x980 [ 643.683794][ T9790] ___sys_sendmsg+0x2a6/0x360 [ 643.689042][ T9790] __se_sys_sendmsg+0x1d0/0x2c0 [ 643.694463][ T9790] do_syscall_64+0x55/0xb0 [ 643.699502][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.706038][ T9790] [ 643.706038][ T9790] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 643.713933][ T9790] __mutex_lock+0x135/0xc80 [ 643.719012][ T9790] ip_set_nfnl_get_byindex+0x67/0x230 [ 643.724947][ T9790] set_match_v1_checkentry+0x71/0x230 [ 643.730988][ T9790] xt_check_match+0x49d/0xc60 [ 643.736311][ T9790] __nft_match_init+0x671/0x8b0 [ 643.741762][ T9790] nf_tables_newrule+0x176e/0x2870 [ 643.747431][ T9790] nfnetlink_rcv+0x1133/0x2490 [ 643.752767][ T9790] netlink_unicast+0x7b1/0x930 [ 643.758094][ T9790] netlink_sendmsg+0x8d0/0xbf0 [ 643.763428][ T9790] ____sys_sendmsg+0x61b/0x980 [ 643.768754][ T9790] ___sys_sendmsg+0x2a6/0x360 [ 643.773993][ T9790] __se_sys_sendmsg+0x1d0/0x2c0 [ 643.779501][ T9790] do_syscall_64+0x55/0xb0 [ 643.784485][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.790953][ T9790] [ 643.790953][ T9790] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 643.799268][ T9790] __lock_acquire+0x37ef/0x7d80 [ 643.804696][ T9790] lock_acquire+0x19e/0x420 [ 643.809758][ T9790] __mutex_lock+0x135/0xc80 [ 643.814816][ T9790] nf_tables_dumpreset_obj+0x72/0xa0 [ 643.820670][ T9790] netlink_dump+0x738/0xec0 [ 643.825737][ T9790] __netlink_dump_start+0x57c/0x7a0 [ 643.831496][ T9790] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 643.837689][ T9790] nf_tables_getobj_reset+0x1e1/0x630 [ 643.843624][ T9790] nfnetlink_rcv_msg+0x89c/0x1290 [ 643.849204][ T9790] netlink_rcv_skb+0x235/0x4c0 [ 643.854527][ T9790] nfnetlink_rcv+0x2c9/0x2490 [ 643.859777][ T9790] netlink_unicast+0x7b1/0x930 [ 643.865103][ T9790] netlink_sendmsg+0x8d0/0xbf0 [ 643.870423][ T9790] ____sys_sendmsg+0x61b/0x980 [ 643.875756][ T9790] ___sys_sendmsg+0x2a6/0x360 [ 643.880999][ T9790] __se_sys_sendmsg+0x1d0/0x2c0 [ 643.886412][ T9790] do_syscall_64+0x55/0xb0 [ 643.891394][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.897854][ T9790] [ 643.897854][ T9790] other info that might help us debug this: [ 643.897854][ T9790] [ 643.908110][ T9790] Chain exists of: [ 643.908110][ T9790] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 643.908110][ T9790] [ 643.922592][ T9790] Possible unsafe locking scenario: [ 643.922592][ T9790] [ 643.930064][ T9790] CPU0 CPU1 [ 643.935453][ T9790] ---- ---- [ 643.940844][ T9790] lock(nlk_cb_mutex-NETFILTER); [ 643.945905][ T9790] lock(nfnl_subsys_ipset); [ 643.953046][ T9790] lock(nlk_cb_mutex-NETFILTER); [ 643.960626][ T9790] lock(&nft_net->commit_mutex); [ 643.965686][ T9790] [ 643.965686][ T9790] *** DEADLOCK *** [ 643.965686][ T9790] [ 643.973857][ T9790] 1 lock held by syz.0.804/9790: [ 643.978844][ T9790] #0: ffff88801ea4a690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 643.989542][ T9790] [ 643.989542][ T9790] stack backtrace: [ 643.995479][ T9790] CPU: 1 PID: 9790 Comm: syz.0.804 Not tainted syzkaller #0 [ 644.002814][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.012915][ T9790] Call Trace: [ 644.016231][ T9790] [ 644.019295][ T9790] dump_stack_lvl+0x18c/0x250 [ 644.024087][ T9790] ? load_image+0x420/0x420 [ 644.028678][ T9790] ? show_regs_print_info+0x20/0x20 [ 644.033929][ T9790] ? print_circular_bug+0x12b/0x1a0 [ 644.039168][ T9790] check_noncircular+0x2fc/0x400 [ 644.044154][ T9790] ? print_deadlock_bug+0x5d0/0x5d0 [ 644.049397][ T9790] ? lockdep_lock+0xf5/0x230 [ 644.054036][ T9790] ? _find_first_zero_bit+0xd6/0x100 [ 644.059408][ T9790] __lock_acquire+0x37ef/0x7d80 [ 644.064297][ T9790] ? asan.module_dtor+0x20/0x20 [ 644.069192][ T9790] ? mark_lock+0x94/0x320 [ 644.073557][ T9790] ? verify_lock_unused+0x140/0x140 [ 644.078779][ T9790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 644.084784][ T9790] ? mark_lock+0x94/0x320 [ 644.089141][ T9790] lock_acquire+0x19e/0x420 [ 644.093670][ T9790] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 644.099160][ T9790] ? lockdep_hardirqs_on+0x98/0x150 [ 644.104379][ T9790] ? __might_sleep+0xe0/0xe0 [ 644.109025][ T9790] ? read_lock_is_recursive+0x20/0x20 [ 644.114417][ T9790] ? nft_pernet+0x23/0x230 [ 644.118855][ T9790] __mutex_lock+0x135/0xc80 [ 644.123378][ T9790] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 644.128865][ T9790] ? __kmem_cache_alloc_node+0x194/0x250 [ 644.134547][ T9790] ? nft_pernet+0x23/0x230 [ 644.138984][ T9790] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 644.144474][ T9790] ? __lock_acquire+0x7d80/0x7d80 [ 644.149520][ T9790] ? mutex_lock_nested+0x20/0x20 [ 644.154478][ T9790] ? __alloc_skb+0x138/0x2c0 [ 644.159095][ T9790] ? nft_pernet+0x23/0x230 [ 644.163527][ T9790] ? nft_pernet+0x23/0x230 [ 644.167961][ T9790] nf_tables_dumpreset_obj+0x72/0xa0 [ 644.173275][ T9790] netlink_dump+0x738/0xec0 [ 644.177825][ T9790] ? netlink_lookup+0x200/0x200 [ 644.182709][ T9790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 644.188381][ T9790] ? nf_tables_dumpreset_obj_start+0x114/0x180 [ 644.194568][ T9790] __netlink_dump_start+0x57c/0x7a0 [ 644.199807][ T9790] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 644.205643][ T9790] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 644.211303][ T9790] nf_tables_getobj_reset+0x1e1/0x630 [ 644.216733][ T9790] ? nf_tables_delobj+0x10b0/0x10b0 [ 644.221963][ T9790] ? nf_tables_getobj_single+0x600/0x600 [ 644.227629][ T9790] ? nf_tables_dumpreset_obj_start+0x180/0x180 [ 644.233898][ T9790] ? nf_tables_dump_obj+0xd00/0xd00 [ 644.239157][ T9790] ? nf_tables_delobj+0x10b0/0x10b0 [ 644.244385][ T9790] nfnetlink_rcv_msg+0x89c/0x1290 [ 644.249437][ T9790] ? nfnetlink_rcv_msg+0x228/0x1290 [ 644.254669][ T9790] ? nfnetlink_unbind+0x160/0x160 [ 644.259727][ T9790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 644.265392][ T9790] ? lockdep_hardirqs_on+0x98/0x150 [ 644.270618][ T9790] ? netlink_rcv_skb+0x17d/0x4c0 [ 644.275584][ T9790] netlink_rcv_skb+0x235/0x4c0 [ 644.280376][ T9790] ? nfnetlink_unbind+0x160/0x160 [ 644.285427][ T9790] ? netlink_ack+0x1160/0x1160 [ 644.290231][ T9790] ? apparmor_capable+0x137/0x1a0 [ 644.295316][ T9790] ? bpf_lsm_capable+0x9/0x10 [ 644.300033][ T9790] ? security_capable+0x89/0xb0 [ 644.304917][ T9790] nfnetlink_rcv+0x2c9/0x2490 [ 644.309631][ T9790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 644.315637][ T9790] ? __lock_acquire+0x7d80/0x7d80 [ 644.320690][ T9790] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 644.326611][ T9790] ? lockdep_hardirqs_on+0x98/0x150 [ 644.331837][ T9790] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 644.337405][ T9790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 644.343319][ T9790] ? _raw_spin_unlock+0x40/0x40 [ 644.348190][ T9790] ? __dev_queue_xmit+0x275/0x3630 [ 644.353402][ T9790] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 644.360029][ T9790] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 644.365689][ T9790] ? __skb_clone+0x5c/0x6c0 [ 644.370246][ T9790] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.375481][ T9790] ? __lock_acquire+0x7d80/0x7d80 [ 644.380549][ T9790] ? __rcu_read_unlock+0x7c/0xd0 [ 644.385508][ T9790] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.390740][ T9790] netlink_unicast+0x7b1/0x930 [ 644.395547][ T9790] netlink_sendmsg+0x8d0/0xbf0 [ 644.400341][ T9790] ? lockdep_hardirqs_on+0x98/0x150 [ 644.405564][ T9790] ? netlink_getsockopt+0x590/0x590 [ 644.410794][ T9790] ? bpf_lsm_socket_accept+0x10/0x10 [ 644.416110][ T9790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 644.421416][ T9790] ? security_socket_sendmsg+0x80/0xa0 [ 644.426899][ T9790] ? netlink_getsockopt+0x590/0x590 [ 644.432128][ T9790] ____sys_sendmsg+0x61b/0x980 [ 644.436923][ T9790] ? lockdep_hardirqs_on+0x98/0x150 [ 644.442142][ T9790] ? __asan_memset+0x22/0x40 [ 644.446755][ T9790] ? __sys_sendmsg_sock+0x30/0x30 [ 644.451807][ T9790] ? __import_iovec+0x5f2/0x850 [ 644.456685][ T9790] ? import_iovec+0x73/0xa0 [ 644.461223][ T9790] ___sys_sendmsg+0x2a6/0x360 [ 644.465930][ T9790] ? __sys_sendmsg+0x2b0/0x2b0 [ 644.470733][ T9790] ? __schedule+0x15b6/0x4660 [ 644.475442][ T9790] __se_sys_sendmsg+0x1d0/0x2c0 [ 644.480338][ T9790] ? __x64_sys_sendmsg+0x80/0x80 [ 644.485309][ T9790] ? lockdep_hardirqs_on+0x98/0x150 [ 644.490532][ T9790] do_syscall_64+0x55/0xb0 [ 644.494980][ T9790] ? clear_bhb_loop+0x40/0x90 [ 644.499681][ T9790] ? clear_bhb_loop+0x40/0x90 [ 644.504389][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.510338][ T9790] RIP: 0033:0x7fed80f9de99 [ 644.514857][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.534569][ T9790] RSP: 002b:00007fed81ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.543032][ T9790] RAX: ffffffffffffffda RBX: 00007fed81226180 RCX: 00007fed80f9de99 [ 644.551031][ T9790] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000007 [ 644.559027][ T9790] RBP: 00007fed81033eaf R08: 0000000000000000 R09: 0000000000000000 [ 644.567024][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.575013][ T9790] R13: 00007fed81226218 R14: 00007fed81226180 R15: 00007fff0ab4e9d8 [ 644.583009][ T9790] [ 644.586118][ C1] vkms_vblank_simulate: vblank timer overrun