last executing test programs: 34.865938165s ago: executing program 0 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r6, &(0x7f0000000180)='q', 0x1, 0x100004) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000321, 0xe, 0x0, &(0x7f0000000040)="007f1f000000bb44bff5cc105117", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x89, &(0x7f0000000380)=""/137, 0x40f00, 0x49, '\x00', 0x0, 0x17, r8, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x29fef, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x2, 0x4, 0xe, 0xc}], 0x10, 0xc}, 0x94) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000001680)=@multiplanar_overlay={0xa, 0x3, 0x4, 0x80, 0xf, {0x77359400}, {0x1, 0xc, 0xd, 0x16, 0x3, 0x7, "c91c16b0"}, 0xfffffffe, 0x3, {0x0}, 0x72f}) 32.962476255s ago: executing program 0 (id=898): syz_create_resource$binfmt(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x100000001) sigaltstack(&(0x7f0000000300)={0x0, 0x80000002}, &(0x7f00000006c0)={0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000"], 0x80}}, 0x0) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 28.212521784s ago: executing program 0 (id=901): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_ethernet(0xbb, &(0x7f00000003c0)={@remote, @local, @void, {@llc={0x4, {@llc={0xfc, 0xff, "7fe0", "3fa49b5ea45ef19ac00c6d1a524262d004a22c683ceafff46fcc4990034bb6da0f063b9c7a77201cf1cbec10bbdd6ab823104142bfef2554b76781a9931200d77261b5f91f8d48e0e9e81bbfbb02b65dd4c0ce0b650a1982032162d6e40f7b33828a8a00974d2b5803893e4364dc5b97c7d7caebe72c64a7cf9791d06246290191c071df53e8d0fd85c9c9e489b5fb052207d2df32d19e8ba94bdac1ed90ea5a9d89c72abfa4cf638e"}}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sync() r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) 21.800116715s ago: executing program 0 (id=911): r0 = fsopen(&(0x7f0000000040)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000017c0)='\b?\xb4\x1bZ\x89ug\xf8=\x1e\xe3\xca\x0e2\xc1\x83\x90\xea\xa3Dt\xc0.\xfa\x9b\xda\xfe\x8f\xd9\xb5n\x7f\xcf\xfd\v\xed\x1e1\xf6\xee\x88\xe9\xc3\xeb\xc4G\xd5\xed\xf9\xdfE-\xd4\xfb\"\xe8\xf3fh\xc7\x8f\x14!%T\xe1\xea\xc9\xa0\xe4\x11\xce\xb0\xe5\xba\xf8\x95\xaf8\xec\x99Y\xaf\x8cP\xd19)-\xbcN5\\\xfe\\\xbb\x96\xd6\xcf\xb0\x96\xb5x\xa6\x98', &(0x7f0000000180)='mjY\xc9p1\xc1k\xefW\x87\x1c\'\xf8<\xc9\x16\x03m\x06\x99\xec\x97\xc3{\xee\xc1\xfb\x8f\xbc\xa6\xc0\xa9\xd1\xa5\xb5\xb6\x99{\x82\x8f\xb8\xeew\xd0\xb3\xe1Q\xdf\x19\xfd\xdeKS\xf3\x12m\xab@Y\x86Q\x99\xd4\b\x7fK\xd48\a?r\xd8\xc4\x11\x9c\x98jj\xd8 1\xb1\\\xc8{>1Q\xb5!@dRN\xab\x8b\xf0\xf6\f;+!s\xf5\xbf\xd7\x82\x89\xde3~\xf6\xff\x03&\xb1R\xcd\xc1\xbd\xf7~5\x05\x86tfG\xb6\x15\xd5\x03\tM\xee\x90\xac\x94Y!\x8fK0\xa2\xf2\xabXl\x97\xf7l\x94~\xa5\xa8\xda', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x3200014, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=r0], 0x5, 0x60b, &(0x7f0000002080)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x10021, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000640)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008004, &(0x7f0000000740)=ANY=[], 0x41, 0x2cc, &(0x7f0000000740)="$eJzs3EFrE1sUwPHzkrwmTWmTB48H78F776Ab3YQ2LlxqkBbEgFKboi6EqZ1oyJiUmVCJiM1G3Po5ikt3gvoFuhE37t0VQXDThXilM0k7MWmbtmmT2v8Pyj29557Obe60nAY667dePCwXvUzRqkkkoRIRaciGSHozavqtOUb8eETCGnJ+7OvHf2/evnMtl89Pz6rO5OYuZFV14v83j568PPOuNjb/auJ1XNbSd9e/ZD+tjaz9vf597kHJ05KnlWpNLV2oVmvWgmPrYskrZ1RvOLbl2VqqeLbbli861aWlulqVxfHkkmt7nlqVupbtutaqWnPrat23ShXNZDI6npRTLCIS62FZYXV21srtmDbRvm4KR26026Tr5hrdk4XVY9gTAAAYMrv3/0Gvv3P/n58Pxv30/3/t3f+L0P/3lYm3okbb/B79P06qi+G733VzVrL589uO/h8AAAAAAAAAAAAAAAAAAAAAgJNgw5iUMSa1OTan/M/jIpIQEdPMD3ibOCLh8zehjz3O/9KAtos+C/3jXkLEeb5cWC4EY5DPFaUkjtgyKSn55t8PTUE8czU/Pam+tLx1Vpr1K8uFqMRb9S3pbvX//TEV1Gt7/e+SDF8/Kyn5s/v1s13rR+Tc2VB9RlLy/p5UxZFF/77ern86pXrlev6n+lF/HQAAAAAAv4KMbun4+93P+wsS0pkP6kPvDxhjVnZ7fyDWXh+Tf3p5RCUAAAAAADg0r/64bDmO7R4giIvIIcr7HxgjMvhtRGUoXo1Y++lcFpEhOabjCBIiEszoQco/b5Vvp5IdM1uB6eErb57HwF+WfQSD/s0EAAAAoN+2m/59FH14doQ7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9On1eWCt9R2pVmKX8tDlosf+DQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABD5EcAAAD//z+aGzE=") syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) chdir(&(0x7f0000000080)='./file0\x00') io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 19.880108095s ago: executing program 0 (id=915): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 14.62806069s ago: executing program 0 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0xe6c94c948dfa53be, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000020101020000000000000000000000006c00028006000340000400001400018008000100ac1414bb08000200ac1414aa0c000280050001000600000006000340000200000c00028005000100840000002c00018014000300fc01001000000000000000000000000114000400fe880000000000000000000000000001060012"], 0xc8}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300)="c6d71be4eddd6021f9d814384c83a788d9e4ac652a5a6260", &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591de908467b16aac069094c188e0"}}) r8 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r8, 0x1, 0x8, 0x0) semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200)=[0x1c, 0x7, 0x9b]) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 13.721472839s ago: executing program 32 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0xe6c94c948dfa53be, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000020101020000000000000000000000006c00028006000340000400001400018008000100ac1414bb08000200ac1414aa0c000280050001000600000006000340000200000c00028005000100840000002c00018014000300fc01001000000000000000000000000114000400fe880000000000000000000000000001060012"], 0xc8}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300)="c6d71be4eddd6021f9d814384c83a788d9e4ac652a5a6260", &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591de908467b16aac069094c188e0"}}) r8 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r8, 0x1, 0x8, 0x0) semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200)=[0x1c, 0x7, 0x9b]) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 10.678562614s ago: executing program 1 (id=926): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b65, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e00400000003000000000000"], 0x0, 0x60}, 0x28) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syslog(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.274633308s ago: executing program 2 (id=930): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x9, 0x0, &(0x7f0000000080)="dc188619b95d02ff42", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.928104889s ago: executing program 1 (id=932): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x9, 0x0, &(0x7f0000000080)="dc188619b95d02ff42", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) 7.500359264s ago: executing program 1 (id=934): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000002ac0)={0x0, 0x33424752, 0x2, @stepwise={0x16, 0x1, 0x81, 0x3, 0x8, 0x7}}) write(r4, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 7.466228795s ago: executing program 2 (id=935): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, 0x0, 0x884) 7.244493322s ago: executing program 3 (id=936): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.242167954s ago: executing program 1 (id=937): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 5.283832884s ago: executing program 2 (id=938): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x9, 0x0, &(0x7f0000000080)="dc188619b95d02ff42", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) 4.951132474s ago: executing program 1 (id=939): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b65, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e00400000003000000000000"], 0x0, 0x60}, 0x28) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syslog(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.846290089s ago: executing program 2 (id=940): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x9, 0x0, &(0x7f0000000080)="dc188619b95d02ff42", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) 3.630387706s ago: executing program 3 (id=941): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r8, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000000)={0xc, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x40) 3.138103702s ago: executing program 3 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x4040840) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x2810901}}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r9, 0x711, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040811}, 0x44410) 2.808376942s ago: executing program 2 (id=943): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) get_mempolicy(0x0, &(0x7f0000000000), 0x200000000001, &(0x7f0000ffd000/0x2000)=nil, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000280)={0x0, 0x5, 0xfffffffd, 0x81, 0xffffffdf}) socket$netlink(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) open$dir(0x0, 0x0, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0), 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x1, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x11, 0x400000, 0xffff5f11, 0xfffd, 0xeffffffffffffff7, 0xed4, 0x6, 0x4000001fd, 0x80, 0x5, 0x4, 0x3}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) write$UHID_INPUT(r1, 0x0, 0x0) 1.652978278s ago: executing program 3 (id=944): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e000108000740"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 1.421207035s ago: executing program 1 (id=945): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, 0x0, 0x884) 1.331106928s ago: executing program 2 (id=946): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x9, 0x0, &(0x7f0000000080)="dc188619b95d02ff42", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 175.272095ms ago: executing program 3 (id=947): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x9, 0x0, &(0x7f0000000080)="dc188619b95d02ff42", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 0s ago: executing program 3 (id=948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 80.860191][ T5760] cgroup: Unknown subsys name 'net' [ 80.995852][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.729540][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.354446][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.363238][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.373446][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.383301][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.392654][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.401014][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.435747][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.445304][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.452917][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.458189][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.475153][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.486835][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.488185][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.506672][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.516996][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.532160][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.540126][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.548654][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.571546][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.580137][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.589068][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.611116][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.619365][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.627098][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.027086][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.112793][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 85.248888][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.273026][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.295968][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.305316][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.313294][ T5776] bridge_slave_0: entered allmulticast mode [ 85.320878][ T5776] bridge_slave_0: entered promiscuous mode [ 85.356289][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.365724][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.373240][ T5776] bridge_slave_1: entered allmulticast mode [ 85.381075][ T5776] bridge_slave_1: entered promiscuous mode [ 85.418371][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.425617][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.433158][ T5781] bridge_slave_0: entered allmulticast mode [ 85.440464][ T5781] bridge_slave_0: entered promiscuous mode [ 85.450538][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.458325][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.465556][ T5781] bridge_slave_1: entered allmulticast mode [ 85.473685][ T5781] bridge_slave_1: entered promiscuous mode [ 85.563399][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.590313][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.602564][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.622236][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.671882][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.679367][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.687754][ T5785] bridge_slave_0: entered allmulticast mode [ 85.695147][ T5785] bridge_slave_0: entered promiscuous mode [ 85.738956][ T5781] team0: Port device team_slave_0 added [ 85.745326][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.756800][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.764021][ T5785] bridge_slave_1: entered allmulticast mode [ 85.774179][ T5785] bridge_slave_1: entered promiscuous mode [ 85.784620][ T5776] team0: Port device team_slave_0 added [ 85.795198][ T5776] team0: Port device team_slave_1 added [ 85.825192][ T5781] team0: Port device team_slave_1 added [ 85.842999][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.850443][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.858617][ T5772] bridge_slave_0: entered allmulticast mode [ 85.865736][ T5772] bridge_slave_0: entered promiscuous mode [ 85.883668][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.891096][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.898450][ T5772] bridge_slave_1: entered allmulticast mode [ 85.905879][ T5772] bridge_slave_1: entered promiscuous mode [ 85.949215][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.956221][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.983064][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.997653][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.004679][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.030922][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.064636][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.074691][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.082060][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.108372][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.121670][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.128998][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.155503][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.187890][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.212398][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.257356][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.287532][ T5776] hsr_slave_0: entered promiscuous mode [ 86.294952][ T5776] hsr_slave_1: entered promiscuous mode [ 86.305282][ T5785] team0: Port device team_slave_0 added [ 86.315226][ T5785] team0: Port device team_slave_1 added [ 86.356102][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.363679][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.389977][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.434416][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.441819][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.468346][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.483281][ T5772] team0: Port device team_slave_0 added [ 86.508141][ T5781] hsr_slave_0: entered promiscuous mode [ 86.518515][ T5781] hsr_slave_1: entered promiscuous mode [ 86.525143][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.534056][ T5781] Cannot create hsr debugfs directory [ 86.548173][ T5782] Bluetooth: hci1: command tx timeout [ 86.549463][ T5084] Bluetooth: hci0: command tx timeout [ 86.564250][ T5772] team0: Port device team_slave_1 added [ 86.626555][ T5084] Bluetooth: hci2: command tx timeout [ 86.651309][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.660545][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.687150][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.706751][ T5084] Bluetooth: hci3: command tx timeout [ 86.733401][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.740545][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.767000][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.797148][ T5785] hsr_slave_0: entered promiscuous mode [ 86.803882][ T5785] hsr_slave_1: entered promiscuous mode [ 86.810635][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.818448][ T5785] Cannot create hsr debugfs directory [ 87.000476][ T5772] hsr_slave_0: entered promiscuous mode [ 87.008094][ T5772] hsr_slave_1: entered promiscuous mode [ 87.014455][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.022369][ T5772] Cannot create hsr debugfs directory [ 87.291504][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.309829][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.332418][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.368447][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.562277][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.590421][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.616117][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.663676][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.771000][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.796213][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.817935][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.828837][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.848091][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.925640][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.950874][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.961569][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.977391][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.000724][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.027172][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.034668][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.079180][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.086525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.174209][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.200548][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.275279][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.300756][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.343706][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.351085][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.370628][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.420867][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.428121][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.453755][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.461118][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.482872][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.490176][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.559210][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.627522][ T5084] Bluetooth: hci0: command tx timeout [ 88.628732][ T5782] Bluetooth: hci1: command tx timeout [ 88.654678][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.688560][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.695867][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.707844][ T5782] Bluetooth: hci2: command tx timeout [ 88.774197][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.781806][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.789658][ T5782] Bluetooth: hci3: command tx timeout [ 88.826317][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.019939][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.057826][ T5776] veth0_vlan: entered promiscuous mode [ 89.102800][ T5776] veth1_vlan: entered promiscuous mode [ 89.237410][ T5776] veth0_macvtap: entered promiscuous mode [ 89.253865][ T5776] veth1_macvtap: entered promiscuous mode [ 89.298411][ T5785] veth0_vlan: entered promiscuous mode [ 89.379039][ T5785] veth1_vlan: entered promiscuous mode [ 89.399751][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.438527][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.464828][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.501822][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.514774][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.524520][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.534076][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.581337][ T5785] veth0_macvtap: entered promiscuous mode [ 89.595046][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.620186][ T5785] veth1_macvtap: entered promiscuous mode [ 89.686105][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.699287][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.712954][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.735004][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.746135][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.758853][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.771683][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.780619][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.790131][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.799402][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.818766][ T5781] veth0_vlan: entered promiscuous mode [ 89.857921][ T5781] veth1_vlan: entered promiscuous mode [ 89.899331][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.926262][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.015915][ T5772] veth0_vlan: entered promiscuous mode [ 90.021912][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.036847][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.046263][ T5781] veth0_macvtap: entered promiscuous mode [ 90.071756][ T5781] veth1_macvtap: entered promiscuous mode [ 90.112603][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.123209][ T5772] veth1_vlan: entered promiscuous mode [ 90.145382][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.225031][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.237084][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.248565][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.260064][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.272348][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.281735][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.290591][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.312466][ T5772] veth0_macvtap: entered promiscuous mode [ 90.329114][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.343523][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.354941][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.386979][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.418070][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.434699][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.460111][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.470471][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.486253][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505445][ T5772] veth1_macvtap: entered promiscuous mode [ 90.613768][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.625454][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.636964][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.648967][ T5844] syz.3.4[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.658920][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.671171][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.683363][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.707726][ T5782] Bluetooth: hci0: command tx timeout [ 90.716302][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.726444][ T5782] Bluetooth: hci1: command tx timeout [ 90.755594][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.779250][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.797194][ T5782] Bluetooth: hci2: command tx timeout [ 90.803184][ T5844] loop3: detected capacity change from 0 to 2048 [ 90.812946][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.841482][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.866773][ T5782] Bluetooth: hci3: command tx timeout [ 90.875247][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.887429][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.900862][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.914630][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.945984][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.958872][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.981702][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.991442][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.857600][ T5782] Bluetooth: hci1: command tx timeout [ 92.863096][ T5782] Bluetooth: hci0: command tx timeout [ 92.868625][ T5782] Bluetooth: hci2: command tx timeout [ 92.888070][ T968] cfg80211: failed to load regulatory.db [ 92.946911][ T5782] Bluetooth: hci3: command tx timeout [ 93.180571][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.200960][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.297042][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.304956][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518352][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.526257][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.590977][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.607803][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.102174][ T5854] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 94.312390][ T5852] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 94.904606][ T5860] loop2: detected capacity change from 0 to 40427 [ 94.932796][ T5860] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.940951][ T5860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.536660][ T5860] F2FS-fs (loop2): invalid crc value [ 95.538345][ T5858] lo speed is unknown, defaulting to 1000 [ 95.548256][ T5858] lo speed is unknown, defaulting to 1000 [ 95.580127][ T5858] lo speed is unknown, defaulting to 1000 [ 95.595182][ T5858] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.613569][ T5858] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.650250][ T5860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.709624][ T5858] lo speed is unknown, defaulting to 1000 [ 95.718424][ T5858] lo speed is unknown, defaulting to 1000 [ 95.726619][ T5858] lo speed is unknown, defaulting to 1000 [ 95.733545][ T5858] lo speed is unknown, defaulting to 1000 [ 95.873512][ T5860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.882381][ T5860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.372414][ T27] audit: type=1800 audit(1780716836.199:2): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 97.874547][ T5875] loop0: detected capacity change from 0 to 256 [ 97.882123][ T5875] ======================================================= [ 97.882123][ T5875] WARNING: The mand mount option has been deprecated and [ 97.882123][ T5875] and is ignored by this kernel. Remove the mand [ 97.882123][ T5875] option from the mount to silence this warning. [ 97.882123][ T5875] ======================================================= [ 97.971787][ T5776] syz-executor: attempt to access beyond end of device [ 97.971787][ T5776] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 98.095712][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 98.106893][ T5875] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 100.607142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.348615][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 101.358906][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 101.368011][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 101.377565][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 101.388216][ T5885] Zero length message leads to an empty skb [ 103.576680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.986529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.446150][ T5918] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 109.629747][ T5919] loop3: detected capacity change from 0 to 2048 [ 109.702318][ T5919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.283026][ T5941] 9pnet_virtio: no channels available for device syz [ 112.380609][ T5941] 9pnet_virtio: no channels available for device syz [ 112.408653][ T5941] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 113.647386][ T5951] loop0: detected capacity change from 0 to 256 [ 113.726924][ T5952] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 114.603533][ T5956] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 115.694199][ T5968] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 124.041078][ T6015] tipc: Started in network mode [ 124.046200][ T6015] tipc: Node identity ac14140f, cluster identity 4711 [ 124.055219][ T6015] tipc: New replicast peer: 255.255.255.255 [ 124.063690][ T6015] tipc: Enabled bearer , priority 10 [ 124.071900][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 124.269462][ T6023] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 126.198314][ T5812] tipc: Node number set to 2886997007 [ 128.767015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.985412][ T6047] binder: 6043:6047 ioctl c0306201 0 returned -14 [ 130.714269][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 131.675148][ T6058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.112227][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121590][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.141810][ T6069] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 134.296626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.447082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 137.318757][ T6081] loop0: detected capacity change from 0 to 128 [ 138.589844][ T6088] hub 8-0:1.0: USB hub found [ 138.618493][ T6088] hub 8-0:1.0: 1 port detected [ 141.285166][ T6104] random: crng reseeded on system resumption [ 142.001703][ T6104] Restarting kernel threads ... done. [ 144.478628][ T6121] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 144.712831][ T6125] loop3: detected capacity change from 0 to 32768 [ 144.814766][ T6125] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 144.840805][ T6125] JBD2: Ignoring recovery information on journal [ 144.909510][ T6125] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.936693][ T6126] macvlan2: entered promiscuous mode [ 144.942097][ T6126] macvlan2: entered allmulticast mode [ 145.007756][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 146.810685][ T6139] overlayfs: missing 'workdir' [ 146.840011][ T27] audit: type=1800 audit(1780716886.859:3): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=17060 res=0 errno=0 [ 148.479507][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 148.823112][ T6154] loop2: detected capacity change from 0 to 164 [ 149.018350][ T6154] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.050660][ T6154] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.065313][ T6154] rock: directory entry would overflow storage [ 149.071666][ T6154] rock: sig=0x4f50, size=4, remaining=3 [ 149.077559][ T6154] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.807042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 156.430699][ T6185] loop3: detected capacity change from 0 to 256 [ 157.646969][ T6185] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 157.846623][ T6185] exFAT-fs (loop3): IO charset defaul not found [ 158.494726][ T6192] block device autoloading is deprecated and will be removed. [ 162.046991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 162.866505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 163.884289][ T6212] netlink: 'syz.0.78': attribute type 21 has an invalid length. [ 163.892840][ T6212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.78'. [ 163.913075][ T5812] IPVS: starting estimator thread 0... [ 164.026640][ T6213] IPVS: using max 16 ests per chain, 38400 per kthread [ 164.930489][ T6218] loop0: detected capacity change from 0 to 1024 [ 165.068223][ T6218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.269034][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.347891][ T6233] binder: 6229:6233 ioctl c0306201 0 returned -14 [ 169.726686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 174.962676][ T6259] loop3: detected capacity change from 0 to 32768 [ 175.236552][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 175.989207][ T6266] loop2: detected capacity change from 0 to 256 [ 176.482439][ T6272] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 182.906760][ T6305] netlink: 'syz.3.104': attribute type 11 has an invalid length. [ 182.914749][ T6305] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.104'. [ 183.406573][ T6310] binder: 6303:6310 ioctl c0306201 0 returned -14 [ 184.372518][ T6318] loop0: detected capacity change from 0 to 164 [ 184.412659][ T6319] loop1: detected capacity change from 0 to 256 [ 185.718126][ T6329] NILFS (nullb0): couldn't find nilfs on the device [ 186.576249][ T6334] syz.0.115 uses obsolete (PF_INET,SOCK_PACKET) [ 186.686267][ T6339] loop3: detected capacity change from 0 to 164 [ 186.883095][ T6339] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.904665][ T6339] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.919322][ T6339] rock: directory entry would overflow storage [ 186.925611][ T6339] rock: sig=0x4f50, size=4, remaining=3 [ 186.931762][ T6339] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 187.820334][ T6336] kAFS: unable to lookup cell '' [ 189.808945][ T6358] bridge_slave_0: left allmulticast mode [ 189.814823][ T6358] bridge_slave_0: left promiscuous mode [ 189.822879][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.530107][ T6358] bridge_slave_1: left allmulticast mode [ 190.535899][ T6358] bridge_slave_1: left promiscuous mode [ 190.542340][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.633839][ T6358] bond0: (slave bond_slave_0): Releasing backup interface [ 190.887458][ T6358] bond0: (slave bond_slave_1): Releasing backup interface [ 190.927726][ T6358] team0: Port device team_slave_0 removed [ 190.950209][ T6358] team0: Port device team_slave_1 removed [ 190.957472][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.964910][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.204087][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.212082][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.429789][ T6387] kAFS: unable to lookup cell '' [ 194.560425][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.639564][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.120812][ T6397] loop1: detected capacity change from 0 to 128 [ 198.133438][ T6397] FAT-fs (loop1): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 201.762885][ T6417] loop3: detected capacity change from 0 to 128 [ 202.355284][ T6419] netlink: 180 bytes leftover after parsing attributes in process `syz.2.137'. [ 202.452331][ T6419] overlayfs: failed to resolve './file1': -2 [ 204.002981][ T6426] process 'syz.2.139' launched './file1' with NULL argv: empty string added [ 204.030998][ T6426] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.271067][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 208.277820][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 208.283963][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 209.065847][ T6452] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 210.781933][ T6457] loop3: detected capacity change from 0 to 128 [ 212.127670][ T6463] xt_connbytes: Forcing CT accounting to be enabled [ 212.135026][ T6463] Cannot find set identified by id 0 to match [ 212.377905][ T6457] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 212.390975][ T5775] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 212.400224][ T5775] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 212.919490][ T6465] sctp: failed to load transform for md5: -2 [ 213.049212][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.135330][ T5775] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 216.468627][ T5775] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 216.477819][ T5775] Bluetooth: hci0: Injecting HCI hardware error event [ 216.486897][ T5782] Bluetooth: hci0: hardware error 0x00 [ 217.713110][ T6490] syz.0.150 (6490) used greatest stack depth: 19976 bytes left [ 218.091293][ T6496] loop2: detected capacity change from 0 to 32768 [ 218.936581][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 219.591828][ T5782] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 220.958069][ T6513] overlayfs: failed to resolve './file0': -2 [ 222.104305][ T6519] bridge_slave_0: left allmulticast mode [ 222.110164][ T6519] bridge_slave_0: left promiscuous mode [ 222.116094][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.942439][ T6519] bridge_slave_1: left allmulticast mode [ 222.948681][ T6519] bridge_slave_1: left promiscuous mode [ 222.954412][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.968171][ T6519] bond0: (slave bond_slave_0): Releasing backup interface [ 223.008102][ T6519] bond0: (slave bond_slave_1): Releasing backup interface [ 223.104878][ T6519] team0: Port device team_slave_0 removed [ 223.172718][ T6519] team0: Port device team_slave_1 removed [ 223.180061][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.187856][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.275484][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.284656][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.254176][ T6531] loop0: detected capacity change from 0 to 128 [ 226.298237][ T6531] FAT-fs (loop0): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 227.189001][ T6535] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 228.066302][ C0] sched: RT throttling activated [ 228.544219][ T6538] bond1: (slave bridge1): making interface the new active one [ 228.585883][ T6538] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 228.608565][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 228.618550][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 228.628104][ T6539] netlink: 6 bytes leftover after parsing attributes in process `syz.2.164'. [ 228.651166][ T6540] macvlan2: entered promiscuous mode [ 228.796971][ T6540] macvlan2: entered allmulticast mode [ 228.880856][ T6540] bond1: entered promiscuous mode [ 228.980806][ T6540] bridge1: entered promiscuous mode [ 228.999483][ T6540] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.025875][ T6540] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 229.070405][ T6540] bond1: left promiscuous mode [ 229.094017][ T6540] bridge1: left promiscuous mode [ 229.228186][ T6547] Bluetooth: MGMT ver 1.22 [ 229.242193][ T6547] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 230.825664][ T6559] loop0: detected capacity change from 0 to 128 [ 231.864258][ T6565] xt_connbytes: Forcing CT accounting to be enabled [ 231.871163][ T6565] Cannot find set identified by id 0 to match [ 232.396739][ T5782] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 232.405378][ T5782] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 232.536791][ T27] audit: type=1326 audit(1780716971.349:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 232.733036][ T6559] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.916672][ T27] audit: type=1326 audit(1780716971.349:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 232.951131][ T6559] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.986231][ T27] audit: type=1326 audit(1780716971.349:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.029994][ T27] audit: type=1326 audit(1780716971.349:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.073351][ T27] audit: type=1326 audit(1780716971.349:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.099811][ T6570] loop2: detected capacity change from 0 to 1024 [ 233.325119][ T27] audit: type=1326 audit(1780716971.359:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.357993][ T27] audit: type=1326 audit(1780716971.359:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.413625][ T6575] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 233.482629][ T27] audit: type=1326 audit(1780716971.359:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.506767][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.635088][ T27] audit: type=1326 audit(1780716971.359:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 233.659056][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.863923][ T27] audit: type=1326 audit(1780716971.359:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f2935d68e code=0x7ffc0000 [ 234.054202][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.451813][ T6583] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 236.466501][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 236.476119][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 236.492170][ T5775] Bluetooth: hci1: hardware error 0x00 [ 240.066440][ T5775] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 240.519596][ T6595] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 243.439188][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 244.519325][ T6632] x_tables: duplicate underflow at hook 1 [ 244.756674][ T6633] netlink: 'syz.0.184': attribute type 3 has an invalid length. [ 246.619365][ T6640] netem: change failed [ 247.394111][ T6642] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 247.680602][ T6645] bond1: (slave bridge1): making interface the new active one [ 248.025323][ T6645] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 248.387192][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.189'. [ 248.588614][ T6645] macvlan2: entered promiscuous mode [ 248.618678][ T6645] macvlan2: entered allmulticast mode [ 248.625125][ T6645] bond1: entered promiscuous mode [ 248.660161][ T6645] bridge1: entered promiscuous mode [ 248.673480][ T6645] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.703220][ T6645] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 248.743300][ T6645] bond1: left promiscuous mode [ 248.753000][ T6645] bridge1: left promiscuous mode [ 249.535929][ T6668] netlink: 180 bytes leftover after parsing attributes in process `syz.0.187'. [ 249.664981][ T6666] hub 8-0:1.0: USB hub found [ 249.689425][ T6666] hub 8-0:1.0: 1 port detected [ 250.915319][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 254.182436][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 254.549039][ T6706] netlink: 180 bytes leftover after parsing attributes in process `syz.3.201'. [ 255.537295][ T6709] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 255.992412][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.999333][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.874657][ T6718] loop2: detected capacity change from 0 to 128 [ 256.883064][ T6718] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 256.912509][ T6710] bond1: (slave bridge1): making interface the new active one [ 256.948830][ T6710] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 258.641925][ T6715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.202'. [ 258.829057][ T6709] macvlan2: entered promiscuous mode [ 258.834448][ T6709] macvlan2: entered allmulticast mode [ 258.894681][ T6709] bond1: entered promiscuous mode [ 258.917524][ T6709] bridge1: entered promiscuous mode [ 258.942212][ T6709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 258.981734][ T6709] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 259.073242][ T6709] bond1: left promiscuous mode [ 259.086846][ T6709] bridge1: left promiscuous mode [ 259.310836][ T5849] IPVS: starting estimator thread 0... [ 259.876479][ T6729] IPVS: using max 16 ests per chain, 38400 per kthread [ 260.328538][ T6735] loop1: detected capacity change from 0 to 256 [ 260.349112][ T6735] exfat: Deprecated parameter 'namecase' [ 260.370486][ T6735] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 262.729725][ T6754] kAFS: unable to lookup cell '' [ 264.995622][ T6771] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 265.110433][ T6775] bond1: (slave bridge1): making interface the new active one [ 265.181532][ T6775] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 265.217554][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'. [ 265.600383][ T6771] macvlan2: entered promiscuous mode [ 265.605790][ T6771] macvlan2: entered allmulticast mode [ 265.633717][ T6771] bond1: entered promiscuous mode [ 265.639882][ T6771] bridge1: entered promiscuous mode [ 265.669564][ T6771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.693798][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 265.767423][ T6771] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 266.043207][ T6771] bond1: left promiscuous mode [ 266.107908][ T6771] bridge1: left promiscuous mode [ 275.083339][ T5782] Bluetooth: hci3: link tx timeout [ 275.089302][ T5782] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.333329][ T6825] loop3: detected capacity change from 0 to 256 [ 278.600795][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 280.491215][ T6825] FAT-fs (loop3): Directory bread(block 64) failed [ 280.502244][ T6825] FAT-fs (loop3): Directory bread(block 65) failed [ 280.512189][ T6825] FAT-fs (loop3): Directory bread(block 66) failed [ 280.526417][ T6825] FAT-fs (loop3): Directory bread(block 67) failed [ 280.547265][ T6825] FAT-fs (loop3): Directory bread(block 68) failed [ 280.566675][ T6825] FAT-fs (loop3): Directory bread(block 69) failed [ 280.573439][ T6825] FAT-fs (loop3): Directory bread(block 70) failed [ 280.585139][ T6825] FAT-fs (loop3): Directory bread(block 71) failed [ 280.594292][ T6825] FAT-fs (loop3): Directory bread(block 72) failed [ 280.604980][ T6825] FAT-fs (loop3): Directory bread(block 73) failed [ 280.757890][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 282.233378][ T6842] loop2: detected capacity change from 0 to 8192 [ 282.331378][ T6842] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 282.373194][ T6842] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 282.384166][ T6842] REISERFS (device loop2): using ordered data mode [ 282.415018][ T6842] reiserfs: using flush barriers [ 282.532498][ T6851] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 283.280259][ T6842] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.127305][ T6842] REISERFS (device loop2): checking transaction log (loop2) [ 284.570178][ T6842] REISERFS (device loop2): Using r5 hash to sort names [ 284.905949][ T6842] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 287.051163][ T6870] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 287.205382][ T6871] bond2: (slave bridge2): making interface the new active one [ 287.249033][ T6871] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 287.413056][ T6870] macvlan2: entered promiscuous mode [ 287.452309][ T6870] macvlan2: entered allmulticast mode [ 287.459498][ T6870] bond2: entered promiscuous mode [ 287.464608][ T6870] bridge2: entered promiscuous mode [ 287.470812][ T6870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.479191][ T6870] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 287.524978][ T6870] bond2: left promiscuous mode [ 287.549283][ T6870] bridge2: left promiscuous mode [ 289.788705][ T6884] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 291.491556][ T6895] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 292.517759][ T6902] loop3: detected capacity change from 0 to 64 [ 292.641217][ T6902] syz.3.253: attempt to access beyond end of device [ 292.641217][ T6902] loop3: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 294.461518][ T6902] Buffer I/O error on dev loop3, logical block 22533, async page read [ 294.518170][ T6902] syz.3.253: attempt to access beyond end of device [ 294.518170][ T6902] loop3: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 294.569557][ T6902] Buffer I/O error on dev loop3, logical block 22533, async page read [ 294.621607][ T6908] syz.3.253: attempt to access beyond end of device [ 294.621607][ T6908] loop3: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 294.666671][ T6908] Buffer I/O error on dev loop3, logical block 22533, async page read [ 294.714227][ T6908] syz.3.253: attempt to access beyond end of device [ 294.714227][ T6908] loop3: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 294.751496][ T6908] Buffer I/O error on dev loop3, logical block 22533, async page read [ 294.841061][ T6902] syz.3.253: attempt to access beyond end of device [ 294.841061][ T6902] loop3: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 294.875139][ T6902] Buffer I/O error on dev loop3, logical block 22533, async page read [ 299.048931][ T6935] loop2: detected capacity change from 0 to 2048 [ 299.129601][ T6935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.392463][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 303.333376][ T6958] loop2: detected capacity change from 0 to 128 [ 303.357475][ T6958] FAT-fs (loop2): bogus logical sector size 65535 [ 303.366512][ T6958] FAT-fs (loop2): Can't find a valid FAT filesystem [ 305.000525][ T6969] netlink: 168 bytes leftover after parsing attributes in process `syz.1.266'. [ 309.100086][ T6984] warning: `syz.1.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 317.444885][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.451451][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.469223][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 319.469352][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'. [ 327.616968][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 327.625862][ T7064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 328.792356][ T7072] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 328.982088][ T7073] bond3: (slave bridge3): making interface the new active one [ 329.043895][ T7073] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 329.292322][ T7072] macvlan2: entered promiscuous mode [ 329.297949][ T7072] macvlan2: entered allmulticast mode [ 329.306870][ T7072] bond3: entered promiscuous mode [ 329.334010][ T7072] bridge3: entered promiscuous mode [ 329.787545][ T7072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.800969][ T7072] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 329.949899][ T7072] bond3: left promiscuous mode [ 329.954768][ T7072] bridge3: left promiscuous mode [ 329.979311][ T7082] xt_CT: No such helper "pptp" [ 330.262812][ T7088] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 330.537968][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.294'. [ 330.556660][ T7095] macvlan2: entered promiscuous mode [ 330.563724][ T7095] macvlan2: entered allmulticast mode [ 331.037275][ T7095] bond2: entered promiscuous mode [ 331.043250][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 331.057166][ T7095] bond2: left promiscuous mode [ 331.828532][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 331.841577][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.298'. [ 332.555544][ T7108] loop2: detected capacity change from 0 to 512 [ 333.015558][ T7108] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.149640][ T7108] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 333.169399][ T7108] __quota_error: 31 callbacks suppressed [ 333.169443][ T7108] Quota error (device loop2): write_blk: dquota write failed [ 333.183854][ T7108] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 333.195199][ T7108] Quota error (device loop2): write_blk: dquota write failed [ 333.204149][ T7108] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 333.214882][ T7108] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.297: Failed to acquire dquot type 1 [ 333.253229][ T7108] EXT4-fs (loop2): 1 truncate cleaned up [ 333.272776][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.991554][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.441191][ T7119] loop1: detected capacity change from 0 to 2048 [ 336.021904][ T7119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.088754][ T27] audit: type=1800 audit(1780717076.099:45): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.300" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 339.252827][ T7144] loop1: detected capacity change from 0 to 2048 [ 339.300478][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.951273][ T7155] input: syz0 as /devices/virtual/input/input5 [ 340.105283][ T7154] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 340.111181][ T7154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 340.111846][ T7154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 340.111846][ T7154] [ 340.112179][ T7154] EXT4-fs (loop1): Total free blocks count 0 [ 340.112782][ T7154] EXT4-fs (loop1): Free/Dirty block details [ 340.113987][ T7154] EXT4-fs (loop1): free_blocks=2415919504 [ 340.115069][ T7154] EXT4-fs (loop1): dirty_blocks=48 [ 340.115411][ T7154] EXT4-fs (loop1): Block reservation details [ 340.116129][ T7154] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 341.204781][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.243998][ T7158] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 341.711444][ T7163] bond2: (slave bridge2): making interface the new active one [ 341.721966][ T7166] kAFS: unable to lookup cell '' [ 343.082369][ T7163] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 343.193421][ T7168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.308'. [ 343.266079][ T7158] macvlan2: entered promiscuous mode [ 343.295474][ T7158] macvlan2: entered allmulticast mode [ 343.303734][ T7158] bond2: entered promiscuous mode [ 343.316583][ T7158] bridge2: entered promiscuous mode [ 343.341178][ T7158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.348936][ T7175] loop1: detected capacity change from 0 to 16 [ 343.360521][ T7158] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 343.394958][ T7175] erofs: (device loop1): mounted with root inode @ nid 36. [ 343.434931][ T7158] bond2: left promiscuous mode [ 343.452559][ T7158] bridge2: left promiscuous mode [ 347.544842][ T7197] loop2: detected capacity change from 0 to 2048 [ 347.894988][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 348.478700][ T7197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.252882][ T7211] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 349.268613][ T7211] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 349.281376][ T7211] EXT4-fs (loop2): This should not happen!! Data will be lost [ 349.281376][ T7211] [ 349.291130][ T7211] EXT4-fs (loop2): Total free blocks count 0 [ 349.297193][ T7211] EXT4-fs (loop2): Free/Dirty block details [ 349.303202][ T7211] EXT4-fs (loop2): free_blocks=2415919504 [ 349.309032][ T7211] EXT4-fs (loop2): dirty_blocks=48 [ 349.314253][ T7211] EXT4-fs (loop2): Block reservation details [ 349.320306][ T7211] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 349.381000][ T7211] input: syz0 as /devices/virtual/input/input6 [ 350.727491][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.600934][ T7228] kAFS: unable to lookup cell '' [ 354.847639][ T7240] loop2: detected capacity change from 0 to 256 [ 354.923562][ T7240] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 362.232035][ T7279] loop2: detected capacity change from 0 to 32768 [ 362.507020][ T7279] mmap: syz.2.332 (7279) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 362.635192][ T7281] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.334'. [ 362.661436][ T7281] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.334'. [ 363.325607][ T7285] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 364.896072][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 365.157475][ T5849] IPVS: starting estimator thread 0... [ 365.297206][ T7299] IPVS: using max 17 ests per chain, 40800 per kthread [ 368.111317][ T7348] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 369.551900][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 373.092423][ T7398] xt_CT: No such helper "pptp" [ 376.199414][ T7415] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 376.768161][ T7425] bond3: (slave bridge3): making interface the new active one [ 376.934991][ T7425] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 377.102994][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 377.240113][ T7415] macvlan2: entered promiscuous mode [ 377.245594][ T7415] macvlan2: entered allmulticast mode [ 377.293700][ T7415] bond3: entered promiscuous mode [ 377.316314][ T7415] bridge3: entered promiscuous mode [ 377.323847][ T7415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 377.342178][ T7415] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 377.367038][ T7415] bond3: left promiscuous mode [ 377.372129][ T7415] bridge3: left promiscuous mode [ 382.408383][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.431263][ T7441] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 382.440905][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.957990][ T7441] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 384.469478][ T7465] input: syz0 as /devices/virtual/input/input7 [ 385.963075][ T7484] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 387.073710][ T7488] bond4: (slave bridge4): making interface the new active one [ 387.083525][ T7488] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 387.093217][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 387.118491][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 387.134722][ T7496] macvlan2: entered promiscuous mode [ 387.194705][ T7496] macvlan2: entered allmulticast mode [ 387.205195][ T7496] bond4: entered promiscuous mode [ 387.216792][ T7496] bridge4: entered promiscuous mode [ 387.223336][ T7496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.238398][ T7496] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 387.268015][ T7496] bond4: left promiscuous mode [ 387.272939][ T7496] bridge4: left promiscuous mode [ 387.386973][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 387.489356][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.517062][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 387.537620][ T5873] usb 1-1: can't read configurations, error -71 [ 390.472163][ T7518] Cannot find add_set index 65532 as target [ 393.301855][ T7534] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 394.190216][ T7538] bond5: (slave bridge5): making interface the new active one [ 394.281000][ T7538] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 394.374578][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 394.433469][ T7538] macvlan2: entered promiscuous mode [ 394.482491][ T7538] macvlan2: entered allmulticast mode [ 394.619049][ T7546] overlayfs: failed to clone upperpath [ 394.928197][ T7538] bond5: entered promiscuous mode [ 394.978580][ T7538] bridge5: entered promiscuous mode [ 395.048824][ T7538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.560366][ T7538] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 395.639927][ T7538] bond5: left promiscuous mode [ 395.650627][ T7538] bridge5: left promiscuous mode [ 396.594101][ T7554] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 396.804685][ T7556] bond2: (slave bridge2): making interface the new active one [ 396.839763][ T7556] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 396.874506][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 396.936985][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 397.029632][ T7559] macvlan2: entered promiscuous mode [ 397.035030][ T7559] macvlan2: entered allmulticast mode [ 397.283142][ T7559] bond2: entered promiscuous mode [ 397.290148][ T7559] bridge2: entered promiscuous mode [ 397.297079][ T7559] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 397.304937][ T7559] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 397.993907][ T7559] bond2: left promiscuous mode [ 398.005491][ T7559] bridge2: left promiscuous mode [ 398.127170][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.383'. [ 398.136133][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 398.532134][ T7569] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7569] [ 400.229096][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 407.470593][ T7626] kAFS: unable to lookup cell '' [ 408.340611][ T7633] siw: device registration error -23 [ 408.691397][ T7636] kAFS: unable to lookup cell '' [ 409.760576][ T7641] tipc: Started in network mode [ 409.760609][ T7641] tipc: Node identity 4, cluster identity 4711 [ 409.760624][ T7641] tipc: Node number set to 4 [ 415.137540][ T970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 415.349348][ T970] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 415.951359][ T7672] kAFS: unable to lookup cell '' [ 417.282736][ T7679] loop1: detected capacity change from 0 to 512 [ 417.322115][ T7679] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 417.339673][ T7679] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: comm syz.1.409: inode #1792: comm syz.1.409: iget: illegal inode # [ 417.380214][ T7679] EXT4-fs (loop1): Remounting filesystem read-only [ 417.387568][ T7679] EXT4-fs (loop1): no journal found [ 417.392910][ T7679] EXT4-fs (loop1): can't get journal size [ 417.469935][ T7679] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 417.483915][ T7679] EXT4-fs (loop1): failed to initialize system zone (-22) [ 417.495086][ T7679] EXT4-fs (loop1): mount failed [ 420.703869][ T7688] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 421.942191][ T7688] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 423.841288][ T7711] loop1: detected capacity change from 0 to 1024 [ 423.915277][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 423.981598][ T7711] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.121865][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 438.160480][ T7772] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 438.249218][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 439.579006][ T7786] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 440.311900][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.323916][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.767864][ T7802] overlayfs: failed to clone upperpath [ 442.346649][ T7806] siw: device registration error -23 [ 443.722588][ T7812] loop1: detected capacity change from 0 to 32768 [ 445.604307][ T6474] read_mapping_page failed! [ 445.757773][ T7828] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 446.080411][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 446.105177][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 446.118448][ T6474] ERROR: (device loop1): txCommit: [ 446.118448][ T6474] [ 446.182089][ T5838] IPVS: starting estimator thread 0... [ 446.451144][ T6474] jfs_write_inode: jfs_commit_inode failed! [ 446.561124][ T7833] IPVS: using max 17 ests per chain, 40800 per kthread [ 447.505071][ T7844] loop2: detected capacity change from 0 to 1024 [ 450.224756][ T7863] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 450.240044][ T7863] input: syz0 as /devices/virtual/input/input8 [ 450.691246][ T5775] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 451.483970][ T7870] loop2: detected capacity change from 0 to 32768 [ 453.855524][ T7357] read_mapping_page failed! [ 453.866852][ T7357] ERROR: (device loop2): txCommit: [ 453.866852][ T7357] [ 453.874892][ T7357] jfs_write_inode: jfs_commit_inode failed! [ 456.709736][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.455'. [ 456.758982][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 461.827764][ T7929] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 462.101079][ T7929] bond6: (slave bridge6): making interface the new active one [ 462.263364][ T7929] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 462.279770][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 462.377273][ T7938] macvlan2: entered promiscuous mode [ 462.394092][ T7938] macvlan2: entered allmulticast mode [ 462.413374][ T7938] bond6: entered promiscuous mode [ 462.430408][ T7938] bridge6: entered promiscuous mode [ 462.443920][ T7938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 462.477456][ T7938] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 462.543028][ T7938] bond6: left promiscuous mode [ 462.563941][ T7938] bridge6: left promiscuous mode [ 463.971059][ T7945] Process accounting resumed [ 464.240792][ T7952] vivid-000: ================= START STATUS ================= [ 464.249718][ T7952] vivid-000: RDS Tx I/O Mode: Controls [ 464.256973][ T7952] vivid-000: RDS Program ID: 32904 [ 464.262277][ T7952] vivid-000: RDS Program Type: 3 [ 464.267517][ T7952] vivid-000: RDS PS Name: VIVID-TX [ 464.273102][ T7952] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 464.283965][ T7952] vivid-000: RDS Stereo: true [ 464.289134][ T7952] vivid-000: RDS Artificial Head: false [ 464.295177][ T7952] vivid-000: RDS Compressed: false [ 464.301004][ T7952] vivid-000: RDS Dynamic PTY: false [ 464.306563][ T7952] vivid-000: RDS Traffic Announcement: false [ 464.312789][ T7952] vivid-000: RDS Traffic Program: true [ 464.319088][ T7952] vivid-000: RDS Music: true [ 464.324058][ T7952] vivid-000: ================== END STATUS ================== [ 467.523840][ T7971] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 468.306595][ T7971] bond7: (slave bridge7): making interface the new active one [ 468.350949][ T7971] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 468.369587][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 468.460343][ T7979] macvlan2: entered promiscuous mode [ 468.490222][ T7979] macvlan2: entered allmulticast mode [ 468.537657][ T7979] bond7: entered promiscuous mode [ 468.542868][ T7979] bridge7: entered promiscuous mode [ 468.799887][ T7979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 468.817621][ T7979] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 469.321793][ T7979] bond7: left promiscuous mode [ 469.336861][ T7986] loop1: detected capacity change from 0 to 4096 [ 469.346789][ T7979] bridge7: left promiscuous mode [ 469.370875][ T7986] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 469.383419][ T7986] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 469.400582][ T7986] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 469.412703][ T7986] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 469.426757][ T7986] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 469.452322][ T7986] ntfs: volume version 3.1. [ 469.467582][ T7986] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 469.480569][ T7986] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 469.497587][ T7986] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 469.509717][ T7986] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 469.521832][ T7986] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 470.552383][ T8000] lo speed is unknown, defaulting to 1000 [ 470.567842][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 479.775383][ T8038] loop2: detected capacity change from 0 to 164 [ 479.863687][ T8038] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 483.787198][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 484.441920][ T8055] can: request_module (can-proto-3) failed. [ 486.087786][ T8071] loop2: detected capacity change from 0 to 1764 [ 491.411008][ T8094] kAFS: unable to lookup cell '' [ 493.666596][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 495.210562][ T8103] loop1: detected capacity change from 0 to 256 [ 497.703469][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 499.668492][ T8137] kAFS: unable to lookup cell '' [ 499.918573][ T5775] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 500.859653][ T8145] gtp0: entered promiscuous mode [ 500.864793][ T8145] gtp0: entered allmulticast mode [ 502.297176][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.303638][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.103396][ T8180] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 508.173699][ T8185] bond4: (slave bridge4): making interface the new active one [ 508.208635][ T8185] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 508.245502][ T8190] macvlan2: entered promiscuous mode [ 508.258397][ T8190] macvlan2: entered allmulticast mode [ 508.309205][ T8190] bond4: entered promiscuous mode [ 508.327097][ T8190] bridge4: entered promiscuous mode [ 508.343233][ T8190] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.388623][ T8190] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 508.468781][ T8190] bond4: left promiscuous mode [ 508.493083][ T8190] bridge4: left promiscuous mode [ 511.034528][ T8208] loop2: detected capacity change from 0 to 32768 [ 511.110585][ T8208] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 511.931776][ T8208] XFS (loop2): Ending clean mount [ 512.152916][ T8208] XFS (loop2): Quotacheck needed: Please wait. [ 512.776674][ T8208] XFS (loop2): Quotacheck: Done. [ 513.641094][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 513.641144][ T27] audit: type=1804 audit(1780717253.649:46): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.526" name="/newroot/131/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=1 errno=0 [ 513.846774][ T8229] kAFS: unable to lookup cell '' [ 513.973083][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 516.394823][ T8245] loop1: detected capacity change from 0 to 64 [ 516.822115][ T8248] xt_connbytes: Forcing CT accounting to be enabled [ 520.009190][ T8261] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 520.178972][ T8263] bond8: (slave bridge8): making interface the new active one [ 520.354779][ T8263] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 523.931673][ T8279] lo speed is unknown, defaulting to 1000 [ 523.944226][ T8279] lo speed is unknown, defaulting to 1000 [ 523.957560][ T8279] lo speed is unknown, defaulting to 1000 [ 524.027672][ T8279] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 524.195502][ T8279] lo speed is unknown, defaulting to 1000 [ 524.220217][ T8279] lo speed is unknown, defaulting to 1000 [ 524.240024][ T8279] lo speed is unknown, defaulting to 1000 [ 524.255230][ T8279] lo speed is unknown, defaulting to 1000 [ 527.292672][ T8303] loop1: detected capacity change from 0 to 2048 [ 527.509984][ T8303] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 527.524102][ T8303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.560516][ T8305] loop2: detected capacity change from 0 to 128 [ 538.933804][ T8352] loop2: detected capacity change from 0 to 8 [ 540.100218][ T8352] netlink: 'syz.2.559': attribute type 10 has an invalid length. [ 540.109425][ T8352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 540.119977][ T8352] batman_adv: batadv0: Adding interface: vlan1 [ 540.126697][ T8352] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.152952][ T8352] batman_adv: batadv0: Interface activated: vlan1 [ 543.066402][ T27] audit: type=1800 audit(1780717283.089:47): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.562" name="file0" dev="overlay" ino=807 res=0 errno=0 [ 544.189283][ T8376] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 544.989818][ T8376] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 547.254468][ T8387] NILFS (nullb0): couldn't find nilfs on the device [ 547.302294][ T8391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.353727][ T8402] loop2: detected capacity change from 0 to 2048 [ 550.371311][ T8402] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 550.567116][ T8402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.600524][ T8425] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 556.485555][ T8434] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 557.051618][ T8442] Can't find a SQUASHFS superblock on nullb0 [ 559.229253][ T8455] input: syz1 as /devices/virtual/input/input9 [ 559.342723][ T27] audit: type=1400 audit(2000000000.560:48): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 562.416386][ T5850] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 564.563989][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.571056][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.260999][ T8483] sctp: failed to load transform for md5: -2 [ 565.996357][ T8497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.628803][ T7357] Bluetooth: (null): Invalid header checksum [ 567.780943][ T7357] Bluetooth: (null): Invalid header checksum [ 567.910585][ T7357] Bluetooth: (null): Invalid header checksum [ 568.012140][ T7357] Bluetooth: (null): Invalid header checksum [ 569.032777][ T5838] Process accounting resumed [ 569.113259][ T8518] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.596'. [ 570.967309][ T8534] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 571.147360][ T8538] siw: device registration error -23 [ 571.155165][ T8536] bond3: (slave bridge2): making interface the new active one [ 571.189988][ T8536] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 571.224040][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 571.255836][ T8542] macvlan3: entered promiscuous mode [ 571.382826][ T8542] macvlan3: entered allmulticast mode [ 571.434643][ T8542] bond3: entered promiscuous mode [ 571.467050][ T8542] bridge2: entered promiscuous mode [ 571.482663][ T8542] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 571.764685][ T8542] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 571.882927][ T8542] bond3: left promiscuous mode [ 571.918633][ T8542] bridge2: left promiscuous mode [ 573.803916][ T8559] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 573.813621][ T8559] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 573.822705][ T8559] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 574.335466][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 574.357388][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 577.067747][ T8571] syz.1.605 (8571) used greatest stack depth: 17352 bytes left [ 577.200623][ T8582] siw: device registration error -23 [ 583.443784][ T8618] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 583.819000][ T8623] bond9: (slave bridge9): making interface the new active one [ 583.857005][ T8623] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 583.881723][ T8618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.614'. [ 585.423228][ T8618] macvlan2: entered promiscuous mode [ 585.442654][ T8618] macvlan2: entered allmulticast mode [ 585.482491][ T8618] bond9: entered promiscuous mode [ 585.513732][ T8618] bridge9: entered promiscuous mode [ 585.534962][ T8637] binder: 8630:8637 ioctl c0306201 0 returned -14 [ 585.553457][ T8618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.596365][ T8618] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 585.701624][ T8618] bond9: left promiscuous mode [ 585.724457][ T8618] bridge9: left promiscuous mode [ 586.082589][ T8645] siw: device registration error -23 [ 590.472175][ T8681] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 591.155196][ T8687] bond4: (slave bridge3): making interface the new active one [ 591.230635][ T8687] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 591.588613][ T8689] macvlan3: entered promiscuous mode [ 591.594414][ T8689] macvlan3: entered allmulticast mode [ 591.602242][ T8689] bond4: entered promiscuous mode [ 591.608425][ T8689] bridge3: entered promiscuous mode [ 591.614475][ T8689] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 591.623769][ T8689] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 591.644899][ T8689] bond4: left promiscuous mode [ 591.650747][ T8689] bridge3: left promiscuous mode [ 595.557545][ T8721] siw: device registration error -23 [ 595.777805][ T8723] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 595.907367][ T8725] bond10: (slave bridge10): making interface the new active one [ 595.917849][ T8725] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 595.927009][ T8728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'. [ 595.982783][ T8723] macvlan2: entered promiscuous mode [ 595.996230][ T8723] macvlan2: entered allmulticast mode [ 596.007386][ T8723] bond10: entered promiscuous mode [ 596.023033][ T8723] bridge10: entered promiscuous mode [ 596.033873][ T8723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 596.054659][ T8723] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 596.119859][ T8723] bond10: left promiscuous mode [ 596.158822][ T8723] bridge10: left promiscuous mode [ 598.977443][ T8752] GUP no longer grows the stack in syz.0.636 (8752): 200000006000-200000009000 (200000004000) [ 598.988835][ T8752] CPU: 0 PID: 8752 Comm: syz.0.636 Not tainted syzkaller #0 [ 598.996176][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.006384][ T8752] Call Trace: [ 599.009793][ T8752] [ 599.012855][ T8752] dump_stack_lvl+0x18c/0x250 [ 599.017722][ T8752] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 599.023593][ T8752] ? show_regs_print_info+0x20/0x20 [ 599.028846][ T8752] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 599.034572][ T8752] fixup_user_fault+0x642/0x700 [ 599.039534][ T8752] fault_in_user_writeable+0x71/0xd0 [ 599.044889][ T8752] futex_lock_pi+0x274/0x9b0 [ 599.049530][ T8752] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 599.054999][ T8752] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 599.060748][ T8752] ? mas_find_setup+0x493/0x590 [ 599.065972][ T8752] do_futex+0x23d/0x3e0 [ 599.070211][ T8752] ? __ia32_sys_get_robust_list+0x110/0x110 [ 599.076170][ T8752] __se_sys_futex+0x3a9/0x440 [ 599.080921][ T8752] ? __x64_sys_futex+0xf0/0xf0 [ 599.085740][ T8752] ? __x64_sys_futex+0x21/0xf0 [ 599.090564][ T8752] do_syscall_64+0x55/0xb0 [ 599.095047][ T8752] ? clear_bhb_loop+0x40/0x90 [ 599.099763][ T8752] ? clear_bhb_loop+0x40/0x90 [ 599.104481][ T8752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.110467][ T8752] RIP: 0033:0x7f7166d9ce59 [ 599.115291][ T8752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.135082][ T8752] RSP: 002b:00007f7167cdb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 599.144225][ T8752] RAX: ffffffffffffffda RBX: 00007f7167016180 RCX: 00007f7166d9ce59 [ 599.152258][ T8752] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 599.160446][ T8752] RBP: 00007f7166e32d6f R08: 0000000000000000 R09: 0000000000000082 [ 599.168463][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.176478][ T8752] R13: 00007f7167016218 R14: 00007f7167016180 R15: 00007ffc5bee1d08 [ 599.184548][ T8752] [ 599.773016][ T8762] bridge_slave_1: left allmulticast mode [ 599.779003][ T8762] bridge_slave_1: left promiscuous mode [ 599.785642][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.814753][ T8762] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 602.845574][ T8793] siw: device registration error -23 [ 606.224748][ T8823] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 606.234467][ T8823] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 606.234580][ T8823] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 607.219369][ T8834] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 607.226992][ T8834] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 607.258994][ T8834] hsr0: entered promiscuous mode [ 607.297167][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 607.334811][ T8831] EXT4-fs: Conflicting test_dummy_encryption options [ 607.363701][ T8836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.923248][ T8866] siw: device registration error -23 [ 614.147869][ T8875] ceph: No mds server is up or the cluster is laggy [ 614.190373][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 614.199554][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 614.655624][ T8892] loop2: detected capacity change from 0 to 16 [ 615.274111][ T8892] erofs: (device loop2): mounted with root inode @ nid 36. [ 615.463652][ T8893] nfs4: Unknown parameter 'no' [ 621.523850][ T8928] siw: device registration error -23 [ 622.655597][ T8939] blktrace: Concurrent blktraces are not allowed on loop4 [ 623.791598][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 624.630383][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.638003][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.307632][ T8995] block device autoloading is deprecated and will be removed. [ 630.706786][ T968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 630.849272][ T8998] siw: device registration error -23 [ 630.959550][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 631.033927][ T968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.218354][ T968] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.247981][ T968] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 631.265133][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.274475][ T968] usb 3-1: Product: syz [ 631.280139][ T968] usb 3-1: Manufacturer: syz [ 631.285241][ T968] usb 3-1: SerialNumber: syz [ 631.625005][ T968] usb 3-1: config 0 descriptor?? [ 633.004140][ T968] usb 3-1: can't set config #0, error -71 [ 633.071631][ T968] usb 3-1: USB disconnect, device number 2 [ 633.329498][ T9006] bridge_slave_0: entered promiscuous mode [ 633.927593][ T9017] SET target dimension over the limit! [ 633.956864][ T9017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 635.337846][ T9022] input: syz0 as /devices/virtual/input/input10 [ 637.231995][ T9033] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 637.822958][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.835486][ T9033] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 639.110225][ T9059] blktrace: Concurrent blktraces are not allowed on loop6 [ 639.533441][ T9059] relay: one or more items not logged [item size (56) > sub-buffer size (14)] [ 639.572889][ T9057] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 641.577047][ T9074] loop0: detected capacity change from 0 to 8 [ 642.279441][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.291053][ T9057] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 642.517886][ T5434] veth0_macvtap: left promiscuous mode [ 642.559134][ T27] audit: type=1326 audit(2000000083.730:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.3.696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 643.970037][ T27] audit: type=1326 audit(2000000083.770:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.3.696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 644.013494][ T27] audit: type=1326 audit(2000000083.880:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.3.696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 644.126838][ T27] audit: type=1326 audit(2000000085.160:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.3.696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 644.196727][ T27] audit: type=1326 audit(2000000085.160:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.3.696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2939ce59 code=0x7ffc0000 [ 644.739100][ T9011] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 645.098923][ T9011] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 645.404085][ T9011] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 645.614960][ T9095] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 645.634437][ T9095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.701'. [ 645.769041][ T9011] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.923908][ T9011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 647.443488][ T9095] wlan1: mtu less than device minimum [ 647.514427][ T9011] usb 3-1: SerialNumber: syz [ 647.630163][ T9011] usb 3-1: can't set config #1, error -71 [ 647.681197][ T9011] usb 3-1: USB disconnect, device number 3 [ 647.871010][ T9101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.979671][ T9123] MTD: Couldn't look up '/dev/nullb0': -15 [ 654.501821][ T9152] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 654.545030][ T9148] IPVS: stopping master sync thread 9152 ... [ 654.668821][ T9154] : renamed from bond_slave_0 [ 655.653739][ T9155] netlink: 376 bytes leftover after parsing attributes in process `syz.2.712'. [ 656.289877][ T9158] syzkaller0: entered allmulticast mode [ 656.308179][ T9158] syzkaller0: entered promiscuous mode [ 656.519346][ T9158] syzkaller0 (unregistering): left allmulticast mode [ 656.526763][ T9158] syzkaller0 (unregistering): left promiscuous mode [ 661.575094][ T9180] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 661.641769][ T9180] bond5: (slave bridge5): making interface the new active one [ 661.651716][ T9180] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 661.668873][ T9180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.709'. [ 661.687055][ T9180] macvlan3: entered promiscuous mode [ 661.692543][ T9180] macvlan3: entered allmulticast mode [ 661.699654][ T9180] bond5: entered promiscuous mode [ 661.704890][ T9180] bridge5: entered promiscuous mode [ 661.711648][ T9180] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 661.720319][ T9180] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 661.741524][ T9180] bond5: left promiscuous mode [ 661.752631][ T9180] bridge5: left promiscuous mode [ 662.810438][ T9196] kernel profiling enabled (shift: 9) [ 663.430378][ T9196] nfs4: Unknown parameter 'no' [ 670.635740][ T9246] siw: device registration error -23 [ 671.414337][ T9254] nfs4: Unknown parameter 'no' [ 674.591430][ T9261] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 674.714052][ T9264] loop1: detected capacity change from 0 to 2048 [ 674.778333][ T9265] bond5: (slave bridge4): making interface the new active one [ 674.827640][ T9264] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 674.844816][ T9265] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 674.863221][ T9264] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 674.875601][ T9261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.736'. [ 676.055777][ T9268] macvlan3: entered promiscuous mode [ 676.066060][ T9264] UDF-fs: Scanning with blocksize 512 failed [ 676.074806][ T9268] macvlan3: entered allmulticast mode [ 676.088094][ T9268] bond5: entered promiscuous mode [ 676.097292][ T9268] bridge4: entered promiscuous mode [ 676.115354][ T9268] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 676.147892][ T9268] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 676.187511][ T9264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.222920][ T9268] bond5: left promiscuous mode [ 676.251337][ T9268] bridge4: left promiscuous mode [ 678.316750][ T9289] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 678.403470][ T9289] netlink: 152 bytes leftover after parsing attributes in process `syz.0.740'. [ 678.492401][ T9289] wlan1: mtu less than device minimum [ 678.550510][ T27] audit: type=1326 audit(2000000119.770:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 679.893836][ T27] audit: type=1326 audit(2000000119.770:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.013221][ T27] audit: type=1326 audit(2000000119.800:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.112753][ T27] audit: type=1326 audit(2000000119.800:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.216851][ T27] audit: type=1326 audit(2000000119.800:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.290945][ T27] audit: type=1326 audit(2000000119.800:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.388763][ T27] audit: type=1326 audit(2000000119.800:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.533374][ T27] audit: type=1326 audit(2000000119.800:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.644612][ T27] audit: type=1326 audit(2000000119.800:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 680.752644][ T27] audit: type=1326 audit(2000000119.800:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.2.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4619ce59 code=0x7ffc0000 [ 683.444045][ T9333] syz.1.744 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 683.476791][ T9333] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by " [ 684.292239][ T9335] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 684.401394][ T9335] VFS: Can't find a romfs filesystem on dev nullb0. [ 684.401394][ T9335] [ 685.223478][ T9344] NILFS (nullb0): couldn't find nilfs on the device [ 686.092232][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.120739][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.0.748'. [ 686.241971][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.626487][ T9338] dccp_close: ABORT with 4570 bytes unread [ 686.928301][ T9356] bond0: (slave batadv0): Releasing backup interface [ 686.982707][ T9356] bridge_slave_0: left allmulticast mode [ 687.016152][ T9356] bridge_slave_0: left promiscuous mode [ 687.022659][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.059731][ T9356] bridge_slave_1: left allmulticast mode [ 687.089706][ T9356] bridge_slave_1: left promiscuous mode [ 687.095594][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.229899][ T9356] bond0: (slave bond_slave_0): Releasing backup interface [ 687.432606][ T9362] loop1: detected capacity change from 0 to 1024 [ 687.610070][ T9362] hfsplus: failed to load extents file [ 687.948654][ T9356] bond0: (slave bond_slave_1): Releasing backup interface [ 687.987650][ T9367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 688.105234][ T9356] team0: Port device team_slave_0 removed [ 688.149194][ T9356] team0: Port device team_slave_1 removed [ 688.199174][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.207022][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.229776][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.240095][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.043139][ T9356] bond0: (slave wlan1): Releasing backup interface [ 689.103917][ T9356] bond1: (slave bridge1): Releasing active interface [ 689.308383][ T9356] bond3: (slave bridge2): Releasing active interface [ 691.592983][ T9356] bond4: (slave bridge3): Releasing active interface [ 691.651348][ T9356] bond5: (slave bridge4): Releasing active interface [ 692.153133][ T9359] team0: Mode changed to "activebackup" [ 692.352086][ T9385] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 692.365578][ T9385] VFS: Can't find a romfs filesystem on dev nullb0. [ 692.365578][ T9385] [ 694.580731][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 701.573364][ T9450] loop0: detected capacity change from 0 to 512 [ 701.635237][ T9450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.708286][ T9450] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.367392][ T9458] overlayfs: failed to clone upperpath [ 703.984121][ T9474] loop2: detected capacity change from 0 to 16 [ 704.041394][ T9474] erofs: (device loop2): mounted with root inode @ nid 36. [ 704.947829][ T9476] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 705.210346][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.262719][ T9478] bond3: (slave bridge3): making interface the new active one [ 705.355565][ T9478] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 705.830227][ T9476] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 708.880876][ T9504] input: syz0 as /devices/virtual/input/input11 [ 710.686870][ T9502] program syz.2.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 716.267888][ T9533] siw: device registration error -23 [ 719.230821][ T9547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.849337][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 725.561206][ T9576] netlink: 'syz.1.801': attribute type 13 has an invalid length. [ 725.580935][ T9576] netlink: 'syz.1.801': attribute type 17 has an invalid length. [ 725.674176][ T9586] Bluetooth: MGMT ver 1.22 [ 725.712101][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 726.365036][ T9576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.506484][ T5838] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 726.706320][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 726.744033][ T9606] syz.0.807: attempt to access beyond end of device [ 726.744033][ T9606] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 726.758914][ T9606] syz.0.807: attempt to access beyond end of device [ 726.758914][ T9606] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 726.772032][ T9606] Mount JFS Failure: -5 [ 726.858645][ T5838] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 726.939484][ T5838] usb 3-1: config 0 has no interface number 0 [ 727.046189][ T5838] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 727.192734][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.306951][ T5838] usb 3-1: Product: syz [ 727.368429][ T5838] usb 3-1: Manufacturer: syz [ 727.440154][ T5838] usb 3-1: SerialNumber: syz [ 727.642394][ T5838] usb 3-1: config 0 descriptor?? [ 727.736463][ T5838] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 727.924178][ T5838] usb 3-1: selecting invalid altsetting 1 [ 727.943786][ T5838] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 730.381044][ T5838] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 730.433381][ T5838] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 730.468101][ T9619] loop1: detected capacity change from 0 to 8 [ 731.243719][ T5838] usb 3-1: media controller created [ 731.270569][ T9619] SQUASHFS error: lzo decompression failed, data probably corrupt [ 731.279565][ T9619] SQUASHFS error: Failed to read block 0x91: -5 [ 731.286167][ T9619] SQUASHFS error: Unable to read metadata cache entry [8f] [ 731.293419][ T9619] SQUASHFS error: Unable to read inode 0x11f [ 731.354256][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 731.403019][ T9620] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 731.431615][ T5838] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 731.440769][ T5838] zl10353_read_register: readreg error (reg=127, ret==-71) [ 731.456579][ T5838] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 732.199539][ T9625] netlink: 628 bytes leftover after parsing attributes in process `syz.0.811'. [ 733.294411][ T5838] usb 3-1: USB disconnect, device number 4 [ 733.488554][ T9624] bond4: (slave bridge4): making interface the new active one [ 733.547763][ T9624] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 734.870812][ T9638] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 735.058420][ T9640] bond5: (slave bridge5): making interface the new active one [ 735.079325][ T9640] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 735.192924][ T9638] netlink: 60 bytes leftover after parsing attributes in process `syz.3.815'. [ 735.251628][ T9638] macvlan3: entered promiscuous mode [ 735.270493][ T9638] macvlan3: entered allmulticast mode [ 735.302353][ T9638] bond5: entered promiscuous mode [ 735.326709][ T9638] bridge5: entered promiscuous mode [ 735.333309][ T9638] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 735.341428][ T9638] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 735.388674][ T9638] bond5: left promiscuous mode [ 735.393568][ T9638] bridge5: left promiscuous mode [ 738.721257][ T9667] gtp0: entered promiscuous mode [ 738.726410][ T9667] gtp0: entered allmulticast mode [ 741.715884][ T9678] loop1: detected capacity change from 0 to 16 [ 741.722869][ T9678] erofs: Unknown parameter '€' [ 742.712184][ T9323] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 745.403875][ T9714] siw: device registration error -23 [ 747.497165][ T9723] netlink: 324 bytes leftover after parsing attributes in process `syz.0.830'. [ 748.090535][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.097459][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.151292][ T9725] Cannot find add_set index 65532 as target [ 748.526725][ T5850] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 748.569936][ T9728] netlink: 'syz.3.831': attribute type 30 has an invalid length. [ 748.638496][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 748.691998][ T9728] bond0: option arp_missed_max: invalid value (0) [ 748.738646][ T5850] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 748.756251][ T9728] bond0: option arp_missed_max: allowed values 1 - 255 [ 748.775907][ T5850] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 748.826714][ T5850] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 748.845333][ T5850] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.886755][ T5850] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 748.895892][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.052652][ T5850] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 749.080509][ T5850] usb 1-1: invalid MIDI out EP 0 [ 749.121364][ T9732] netlink: 'syz.1.823': attribute type 1 has an invalid length. [ 749.638316][ T9734] bond6: (slave bridge6): making interface the new active one [ 749.673102][ T9734] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 749.689503][ T9323] udevd[9323]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 749.757857][ T9323] udevd[9323]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 749.793228][ T5850] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 749.846784][ T5850] usb 1-1: USB disconnect, device number 5 [ 750.833035][ T9741] autofs4:pid:9741:autofs_fill_super: called with bogus options [ 751.613840][ T9741] loop1: detected capacity change from 0 to 64 [ 752.604771][ T9753] smc: net device wlan0 applied user defined pnetid SYZ0 [ 753.702274][ T9759] siw: device registration error -23 [ 754.046726][ T9760] loop2: detected capacity change from 0 to 1024 [ 754.363539][ T9765] hfsplus: unknown catalog record type 0 [ 755.139034][ T6474] Bluetooth: hci4: Frame reassembly failed (-84) [ 756.991781][ T5775] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 757.494816][ T11] hfsplus: b-tree write err: -5, ino 25 [ 757.508285][ T11] hfsplus: b-tree write err: -5, ino 4 [ 757.514430][ T11] hfsplus: b-tree write err: -5, ino 2 [ 757.542833][ T11] hfsplus: b-tree write err: -5, ino 22 [ 759.404203][ T9780] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 760.278555][ T9787] bond11: (slave bridge12): making interface the new active one [ 760.897569][ T9787] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 761.909099][ T9813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.850'. [ 764.223152][ T9826] loop2: detected capacity change from 0 to 2048 [ 764.235159][ T9826] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 765.864275][ T9827] siw: device registration error -23 [ 766.238314][ T9738] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.111123][ T9846] loop2: detected capacity change from 0 to 1024 [ 772.481566][ T9856] overlayfs: failed to clone lowerpath [ 774.407093][ T9869] xt_TCPMSS: Only works on TCP SYN packets [ 774.873709][ T9866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.851840][ T9888] loop1: detected capacity change from 0 to 256 [ 785.945228][ T9925] netlink: 96 bytes leftover after parsing attributes in process `syz.2.868'. [ 786.342175][ T9915] dccp_close: ABORT with 4578 bytes unread [ 789.255359][ T9934] tipc: Enabling of bearer rejected, failed to enable media [ 789.694275][ T9940] loop0: detected capacity change from 0 to 128 [ 796.578967][ T9961] loop2: detected capacity change from 0 to 512 [ 796.607734][ T9961] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 796.647969][ T9961] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 796.713122][ T9961] EXT4-fs (loop2): 1 truncate cleaned up [ 796.760815][ T9961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.165131][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.613496][ T9975] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 798.802071][ T9978] bond6: (slave bridge5): making interface the new active one [ 798.848255][ T9978] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 802.068677][ T9999] loop2: detected capacity change from 0 to 2048 [ 802.519084][ T9999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.890445][T10005] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 803.083463][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.355596][T10016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.896'. [ 805.744223][T10013] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 805.855795][T10012] IPVS: stopping master sync thread 10013 ... [ 808.202834][T10030] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 809.069407][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.078211][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.740323][T10065] NILFS (nullb0): couldn't find nilfs on the device [ 815.221345][T10073] loop0: detected capacity change from 0 to 1024 [ 815.247424][T10078] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 815.260096][T10077] IPVS: stopping master sync thread 10078 ... [ 816.004199][T10079] overlayfs: missing 'lowerdir' [ 816.150657][T10082] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 816.174008][T10075] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 816.405618][ T5781] hfsplus: small file entry [ 816.419769][T10082] bond6: (slave bridge6): making interface the new active one [ 816.505394][T10082] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 822.232490][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.563431][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.858047][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.902589][ T9767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 825.919288][ T9767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 825.928910][ T9767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 825.942413][ T9767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 825.952154][ T9767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 825.959978][ T9767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.980659][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 826.182597][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 826.192543][T10136] syz.2.927: attempt to access beyond end of device [ 826.192543][T10136] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 826.208269][T10136] syz.2.927: attempt to access beyond end of device [ 826.208269][T10136] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 826.222577][T10136] Mount JFS Failure: -5 [ 826.245275][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 826.331585][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 826.345059][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 826.400143][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 826.924406][T10143] siw: device registration error -23 [ 826.967911][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.125984][T10134] lo speed is unknown, defaulting to 1000 [ 827.555259][T10134] chnl_net:caif_netlink_parms(): no params data found [ 828.726333][ T9767] Bluetooth: hci2: command tx timeout [ 828.770451][ T55] tipc: Left network mode [ 829.653242][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.668433][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.675866][T10134] bridge_slave_0: entered allmulticast mode [ 829.691539][T10134] bridge_slave_0: entered promiscuous mode [ 829.704205][T10176] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 829.897311][T10182] bond12: (slave bridge13): making interface the new active one [ 829.916476][T10182] bond12: (slave bridge13): Enslaving as an active interface with an up link [ 830.155130][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.163374][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.172501][T10134] bridge_slave_1: entered allmulticast mode [ 830.180220][T10134] bridge_slave_1: entered promiscuous mode [ 830.636695][T10194] siw: device registration error -23 [ 830.894420][ T9767] Bluetooth: hci2: command tx timeout [ 832.095826][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.120239][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.289886][T10134] team0: Port device team_slave_0 added [ 832.638625][T10134] team0: Port device team_slave_1 added [ 832.913791][T10223] gtp0: entered promiscuous mode [ 832.919953][T10223] gtp0: entered allmulticast mode [ 832.932394][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.940594][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.969188][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.982157][ T9767] Bluetooth: hci2: command tx timeout [ 833.053560][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.094923][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.156705][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.009774][T10134] hsr_slave_0: entered promiscuous mode [ 835.027482][ T9767] Bluetooth: hci2: command tx timeout [ 835.254015][T10134] hsr_slave_1: entered promiscuous mode [ 835.275070][T10134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.292581][T10134] Cannot create hsr debugfs directory [ 835.303300][T10240] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 836.132305][T10244] bond8: (slave bridge7): making interface the new active one [ 836.158434][T10244] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 836.299765][ T55] ------------[ cut here ]------------ [ 836.306728][ T55] WARNING: CPU: 0 PID: 55 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 836.317817][ T55] Modules linked in: [ 836.321804][ T55] CPU: 0 PID: 55 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 836.329314][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 836.339586][ T55] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 836.344644][ T55] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 836.352034][ T55] Code: 7c 2d 00 00 74 08 48 89 df e8 68 4f d4 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 d4 85 00 e8 2c 0f 7c f7 <0f> 0b eb c5 48 c7 c1 1c 9b 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 836.372172][ T55] RSP: 0018:ffffc9000130f548 EFLAGS: 00010293 [ 836.378553][ T55] RAX: ffffffff8a0b1c64 RBX: ffff88807fd45618 RCX: ffff88801d641e00 [ 836.386820][ T55] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.394918][ T55] RBP: 0000000000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 836.403140][ T55] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88807fd46c88 [ 836.411481][ T55] R13: 1ffff1100ffa8ac3 R14: ffff88807fd46440 R15: dffffc0000000000 [ 836.419682][ T55] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 836.429110][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.435767][ T55] CR2: 000055715e41e950 CR3: 000000001a792000 CR4: 00000000003506f0 [ 836.444205][ T55] Call Trace: [ 836.447619][ T55] [ 836.450616][ T55] ? trace_drv_return_void+0x1c0/0x1c0 [ 836.456364][ T55] unregister_netdevice_many_notify+0x133d/0x1900 [ 836.462907][ T55] ? lock_chain_count+0x20/0x20 [ 836.468333][ T55] ? unregister_netdevice_many+0x20/0x20 [ 836.474057][ T55] ? kernfs_remove_by_name_ns+0x117/0x150 [ 836.479936][ T55] ? __lock_acquire+0x7d40/0x7d40 [ 836.485062][ T55] unregister_netdevice_queue+0x32c/0x370 [ 836.490962][ T55] ? list_netdevice+0x730/0x730 [ 836.495904][ T55] ? kernfs_remove_by_name_ns+0x117/0x150 [ 836.501833][ T55] _cfg80211_unregister_wdev+0x16b/0x580 [ 836.507769][ T55] ieee80211_remove_interfaces+0x49e/0x690 [ 836.513672][ T55] ? ieee80211_do_stop+0x1e20/0x1e20 [ 836.519158][ T55] ? rcu_is_watching+0x15/0xb0 [ 836.524020][ T55] ieee80211_unregister_hw+0x5d/0x2a0 [ 836.529645][ T55] mac80211_hwsim_del_radio+0x289/0x480 [ 836.535331][ T55] ? rhashtable_remove_fast+0xc00/0xc00 [ 836.541023][ T55] hwsim_exit_net+0x58d/0x650 [ 836.545791][ T55] ? hwsim_init_net+0x90/0x90 [ 836.550671][ T55] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 836.556710][ T55] cleanup_net+0x70a/0xbb0 [ 836.561206][ T55] ? ops_free_list+0x3b0/0x3b0 [ 836.566240][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 836.571606][ T55] ? process_scheduled_works+0x96f/0x15d0 [ 836.577508][ T55] ? process_scheduled_works+0x96f/0x15d0 [ 836.583320][ T55] process_scheduled_works+0xa5d/0x15d0 [ 836.589072][ T55] ? worker_attach_to_pool+0x380/0x380 [ 836.594746][ T55] ? assign_work+0x3d2/0x5d0 [ 836.599538][ T55] worker_thread+0xa55/0xfc0 [ 836.604335][ T55] kthread+0x2fa/0x390 [ 836.608568][ T55] ? pr_cont_work+0x560/0x560 [ 836.613448][ T55] ? kthread_blkcg+0xd0/0xd0 [ 836.618185][ T55] ret_from_fork+0x48/0x80 [ 836.622792][ T55] ? kthread_blkcg+0xd0/0xd0 [ 836.628151][ T55] ret_from_fork_asm+0x11/0x20 [ 836.633069][ T55] [ 836.636477][ T55] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 836.643898][ T55] CPU: 0 PID: 55 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 836.651373][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 836.661491][ T55] Workqueue: netns cleanup_net [ 836.666404][ T55] Call Trace: [ 836.669728][ T55] [ 836.672701][ T55] dump_stack_lvl+0x18c/0x250 [ 836.677440][ T55] ? show_regs_print_info+0x20/0x20 [ 836.682693][ T55] ? load_image+0x420/0x420 [ 836.687290][ T55] panic+0x2dc/0x730 [ 836.691338][ T55] ? bpf_jit_dump+0xd0/0xd0 [ 836.695987][ T55] ? ret_from_fork_asm+0x11/0x20 [ 836.701000][ T55] __warn+0x2e0/0x470 [ 836.705197][ T55] ? ieee80211_link_release_channel+0x154/0x180 [ 836.711829][ T55] ? ieee80211_link_release_channel+0x154/0x180 [ 836.718114][ T55] report_bug+0x2be/0x4f0 [ 836.722487][ T55] ? ieee80211_link_release_channel+0x154/0x180 [ 836.728777][ T55] ? ieee80211_link_release_channel+0x154/0x180 [ 836.735063][ T55] ? ieee80211_link_release_channel+0x156/0x180 [ 836.741341][ T55] handle_bug+0xcf/0x120 [ 836.745629][ T55] exc_invalid_op+0x1a/0x50 [ 836.750275][ T55] asm_exc_invalid_op+0x1a/0x20 [ 836.755169][ T55] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 836.762145][ T55] Code: 7c 2d 00 00 74 08 48 89 df e8 68 4f d4 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 d4 85 00 e8 2c 0f 7c f7 <0f> 0b eb c5 48 c7 c1 1c 9b 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 836.781907][ T55] RSP: 0018:ffffc9000130f548 EFLAGS: 00010293 [ 836.788208][ T55] RAX: ffffffff8a0b1c64 RBX: ffff88807fd45618 RCX: ffff88801d641e00 [ 836.796227][ T55] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.804243][ T55] RBP: 0000000000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 836.812338][ T55] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88807fd46c88 [ 836.820344][ T55] R13: 1ffff1100ffa8ac3 R14: ffff88807fd46440 R15: dffffc0000000000 [ 836.828410][ T55] ? ieee80211_link_release_channel+0x154/0x180 [ 836.834723][ T55] ? ieee80211_link_release_channel+0x154/0x180 [ 836.841036][ T55] ? trace_drv_return_void+0x1c0/0x1c0 [ 836.846557][ T55] unregister_netdevice_many_notify+0x133d/0x1900 [ 836.853146][ T55] ? lock_chain_count+0x20/0x20 [ 836.858140][ T55] ? unregister_netdevice_many+0x20/0x20 [ 836.863827][ T55] ? kernfs_remove_by_name_ns+0x117/0x150 [ 836.869630][ T55] ? __lock_acquire+0x7d40/0x7d40 [ 836.874719][ T55] unregister_netdevice_queue+0x32c/0x370 [ 836.880483][ T55] ? list_netdevice+0x730/0x730 [ 836.885376][ T55] ? kernfs_remove_by_name_ns+0x117/0x150 [ 836.891141][ T55] _cfg80211_unregister_wdev+0x16b/0x580 [ 836.896817][ T55] ieee80211_remove_interfaces+0x49e/0x690 [ 836.902689][ T55] ? ieee80211_do_stop+0x1e20/0x1e20 [ 836.908023][ T55] ? rcu_is_watching+0x15/0xb0 [ 836.913014][ T55] ieee80211_unregister_hw+0x5d/0x2a0 [ 836.918524][ T55] mac80211_hwsim_del_radio+0x289/0x480 [ 836.924124][ T55] ? rhashtable_remove_fast+0xc00/0xc00 [ 836.929717][ T55] hwsim_exit_net+0x58d/0x650 [ 836.934439][ T55] ? hwsim_init_net+0x90/0x90 [ 836.939167][ T55] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 836.945113][ T55] cleanup_net+0x70a/0xbb0 [ 836.949596][ T55] ? ops_free_list+0x3b0/0x3b0 [ 836.954421][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 836.959665][ T55] ? process_scheduled_works+0x96f/0x15d0 [ 836.965460][ T55] ? process_scheduled_works+0x96f/0x15d0 [ 836.971231][ T55] process_scheduled_works+0xa5d/0x15d0 [ 836.976862][ T55] ? worker_attach_to_pool+0x380/0x380 [ 836.982382][ T55] ? assign_work+0x3d2/0x5d0 [ 836.987031][ T55] worker_thread+0xa55/0xfc0 [ 836.991694][ T55] kthread+0x2fa/0x390 [ 836.995802][ T55] ? pr_cont_work+0x560/0x560 [ 837.000524][ T55] ? kthread_blkcg+0xd0/0xd0 [ 837.005154][ T55] ret_from_fork+0x48/0x80 [ 837.009701][ T55] ? kthread_blkcg+0xd0/0xd0 [ 837.014326][ T55] ret_from_fork_asm+0x11/0x20 [ 837.019149][ T55] [ 837.022793][ T55] Kernel Offset: disabled [ 837.027275][ T55] Rebooting in 86400 seconds..