last executing test programs: 1m5.660603081s ago: executing program 1 (id=418): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m4.634644453s ago: executing program 1 (id=426): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0xe0, 0x3}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) 1m4.41265639s ago: executing program 1 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, 0x0, 0x40) 1m2.704617395s ago: executing program 1 (id=437): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@jqfmt_vfsv1}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vI1cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRjMdZb2JvrM0Ph/jzkUbz3rxZf9+Ld97bfLPxC2Bs3Y6Ig4goRsT7ETGXXc9lR7zTOZL7Pjt8tHp0+Gg1F+32e//Ipe3Jtej5M4lb2WuWIuIH34n4ce503Obe/uZKrVbdyeoLrfr2QnNv/95GfWW9ul7dqlSWl5YX37r/ZuXCxvpKvZiVvvzp7w++8dOkW7PZld5xXKTO0AvHcRKTEfG9ywg2AhPZeIqj7gjPJB8RL0bEq+nzPxcT6bsJANxk7fZctOd66wDATRdpDiyXL2e5gNnI58vlTg7vpZjJ1xrN1t2Hjd2ttU6ubD4K+Ycbtepiliucj0IuqS+l5cf1yon6/Yh4ISJ+PjWd1surjdraCP/dAwDj7NaJ9f/fU531HwC44Uqj7gAAcOWs/wAwfqz/ADB+rP8AMH466//0UHcBADeDlR0Axo/1HwDGyvfffTc52kfZ51+vfbC3u9n44N5atblZru+ullcbO9vl9UZjPf3MnvpZr1drNLaX3ojdD+e/ud1sLTT39h/UG7tbrQfp53o/qBbSuw6uYGQAwCAvvPLJn3LJivz2dHpEz14OhZH2DLhs+VF3ABiZiVF3ABgZu33B+DrH9/jSA3BD9Nmi9wmlfr8g1N1ABPi/dOcL8v8wrnry//4XMIwZ+X8YX/L/ML7a7dywe/7HsDcCANebHD8w4Of/L2bn32Q/HPjR2sk7Pr7MXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD11t3/t5ztBT4b+Xy5HPFcRMxHIfdwo1ZdjIjnI+KPU4WppL404j4DAOeV/2su2//rztzrs080vXzruFiMiJ/88r1ffLjSau38IaKY++dU93rr4+x65ep7DwCcrbtOp+eeb+Q/O3y02j2usj9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuzuPgo4j4fL/x52I2zYF0dj49GT+J/dyVxs8/ET+ftnXOydficxfQFxg3nyTzzzv9nr983E7P/Z//UjpDnV82/yUvtXqUzoGP43fnv4kB89/tYWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Uh4//5Sy+/Oqit/auIO9E/fm+shVZ9e6G5t39vo76yXl2vblUqy0vLi2/df7OykOaoFwavBn9/++7zg9qS8c8MiF86Y/xfHXL8v/7v+z/8ylPif/21fvHz8dJT4idr4teGjL8y89vSoLYk/tqA8Z/1/t8dMv6nf9k/tW04ADA6zb39zZVarbqjcJ0Lxeztui79GVQoXXIPk6/B9Rjp6cK3ripWMfo3/ey1vn9J2u1nijVoxriIrBtwHRw/9BHxn1F3BgAAAAAAAAAAAAAA6OsqfmNp1GMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5vpfAAAA//9ZYMr3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x800, 0x5, 0x2, 0xffffffffffffffff, 0x3, 0x800000000008, 0x2, 0x9, 0x2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000980)={0xf4a1, 0x200, 0x800, 0x4b07}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 1m2.246883712s ago: executing program 1 (id=439): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0xfc4f362c4b451510, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000740)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd2b, 0x25dedbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 1m1.655370119s ago: executing program 1 (id=444): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) 1m1.165628898s ago: executing program 32 (id=444): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) 7.32453204s ago: executing program 3 (id=664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={r1, @in={{0x2, 0x4e23, @empty}}, [0x6, 0x1000200000000000, 0x80000001, 0x1, 0x4e4f, 0xe, 0x1, 0x8, 0x9, 0xd, 0x5, 0x3, 0x7, 0x31, 0x7]}, &(0x7f0000000440)=0x100) 6.931212642s ago: executing program 3 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) 6.244270726s ago: executing program 2 (id=667): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000340)=@can={0x1d, r2}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x11) 6.143397554s ago: executing program 3 (id=668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r5, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xbd3}, {&(0x7f0000000700)="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", 0x142}, {&(0x7f0000000440)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}], 0x4}, 0x8bb3a301eb085f) 6.048356931s ago: executing program 2 (id=669): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) fallocate(r4, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r6, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff}]) 4.717914977s ago: executing program 2 (id=673): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x6, 0x4, 0x12, 0x0, r0}, 0x50) socket$inet(0x2, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 3.632993693s ago: executing program 4 (id=675): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) 3.416613509s ago: executing program 4 (id=677): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000340)=@can={0x1d, r2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)}], 0x1}, 0x11) 1.904255859s ago: executing program 0 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) 1.89818724s ago: executing program 4 (id=679): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r0, 0x8004b709, 0x0) 1.8960907s ago: executing program 2 (id=680): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.814590526s ago: executing program 3 (id=681): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x101000, 0x0) poll(&(0x7f00000003c0)=[{r0, 0x2}], 0x1, 0xfdfd) 1.631733811s ago: executing program 4 (id=682): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @ib={0x1b, 0xe64c, 0x10000, {"c24ab1821a495d9106bec29d29ee68ec"}, 0x0, 0x8fc, 0x1}}}, 0x118) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 1.631372731s ago: executing program 0 (id=683): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) 1.573932425s ago: executing program 2 (id=684): r0 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 1.380545001s ago: executing program 0 (id=685): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) 1.202366114s ago: executing program 4 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) 1.13293384s ago: executing program 0 (id=687): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000340)=@can={0x1d, r2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)}], 0x1}, 0x11) 440.554605ms ago: executing program 3 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x31a, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0xfff8, 0x9}, {0xd, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 391.438089ms ago: executing program 2 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r5, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xbd3}, {&(0x7f0000000700)="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", 0x142}, {&(0x7f0000000440)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}], 0x4}, 0x8bb3a301eb085f) 304.197936ms ago: executing program 4 (id=690): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs289vFFUcAPDvTH8AIhQRf4CoVWLSaGxpQeXgRaOJMRhN9IDH2i6kYaGGViNIpBjjycSQ6Jl4NPoXeDMmRj2ZcPXkyZAQ5QJ4qpnZGViGXaB2y5bu55NM+97Mm5337Zsfb97rBtCzhiNiISLujYg/ImIoIpJqgeHGr8sXT05duXhyKonFxbf/TvJyly6enCqLlvttLDIjaUT6WdLYuWLu+InDk/V67ViRH5s/8v7Y3PETz354ZPJQ7VDt6MS+fXv3jL/w/MRzHYkzi+vSjk9md25/7d0zb0wdOPPer98nRdxRiaNThrPA/1nMVbc91emDddmmpnTS38WKsCR9EZE110B+/Q9FX1xrvKF49dOuVg5YUdmzaV37zQuLwBqWRLdrAHRH+aDP3n/L5Q51PVaFCy81XoCyuC8XS2NLf6RFmYHK+20nDUfEgYV/z2ZLrNA4BABAsy+mvt4/GBEfX/nu9azvMRQR5XjQg/nPP/Ofm4s5lC0RcV9EbI2I+yNiW0Q8UJR9KCIeXmZ9buz/pOeX+ZE3lfX/Xizmtq7v/5W9v9jSV+Q25fEPJAdn6rXdsS7/m4zEwLosP36TY/z4yrkv221r7v9lS3b8si9Y1ON8f2WAbnpyfjLvlHbAhdMRO/pbxZ9cnQlIImJ7ROxY2kdvLhMzT3+7s12h1vFfOntbR+jAPNPiN1l4C1n8C1GJv5Q0z0/O3DA/ObY+6rXdY42zopXffv/8rXbHv3X7r6wLtcbvpvavFtmSNM/XznX2+P/z/E8Hk3fyeebBYt1Hk/Pzx8YjBpP9ef669RPX9i3zZfns/B/Z1fr631rsk8X/SERkJ/GjEfFYRDxe1P2JiHgyInbdJMZfXr51/JF2qf1PR0y3vP9dPf8r7b/0RN/hn39od/zba/+9eWqkWJPf/26hVXWy20W1gsv52wEAAMDdIs3/Bz5JR6+m03R0tPE//NvinrQ+Ozf/zMHZD45Ox7nNjfHPtBzpGirGQ+sz9dp4slB8YmN8dKIYKy7HS/cU48Zf9W3I86NTs/XpLscOvW5jm+s/81dft2sHrLANLddODN7xigBdUJ1HT6/Pnnoz3AxgrfJ9behd5fXf5n2/+XswwBrj+Q+9q9X1f6qSNxcAa5PnP/Qu1z/0qPSnZezsrQDudp7/0JOW873+FUysXx3V6E5itTZKnogoE+mqqI/ECiW6fWcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojP8CAAD//68e5+k=") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x5, 0x4, 0x8}) 232.652521ms ago: executing program 0 (id=691): r0 = socket$caif_stream(0x25, 0x1, 0x5) recvfrom(r0, 0x0, 0x0, 0x12043, 0x0, 0x0) 224.120642ms ago: executing program 3 (id=692): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 0s ago: executing program 0 (id=693): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 77.772990][ T5756] cgroup: Unknown subsys name 'net' [ 77.940099][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.638179][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.169977][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.178639][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.187383][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.203962][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.211908][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.222976][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.252625][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.261658][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.270936][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.315140][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.322804][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.331356][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.341354][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.350538][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.357971][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.365668][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.373895][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.386153][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.394686][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.403539][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.412146][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.421415][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.432285][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.446209][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.731659][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 81.853721][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.861647][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.869865][ T5767] bridge_slave_0: entered allmulticast mode [ 81.877003][ T5767] bridge_slave_0: entered promiscuous mode [ 81.890592][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.897888][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.905196][ T5767] bridge_slave_1: entered allmulticast mode [ 81.912007][ T5767] bridge_slave_1: entered promiscuous mode [ 81.931674][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 82.019217][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.032324][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.167370][ T5767] team0: Port device team_slave_0 added [ 82.176985][ T5767] team0: Port device team_slave_1 added [ 82.283602][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.290714][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.346559][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.359404][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.366693][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.374197][ T5771] bridge_slave_0: entered allmulticast mode [ 82.381009][ T5771] bridge_slave_0: entered promiscuous mode [ 82.390444][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.401273][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.409042][ T5771] bridge_slave_1: entered allmulticast mode [ 82.419775][ T5771] bridge_slave_1: entered promiscuous mode [ 82.436548][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.450581][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.460737][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.489835][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.516433][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.622187][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.678808][ T5767] hsr_slave_0: entered promiscuous mode [ 82.688687][ T5767] hsr_slave_1: entered promiscuous mode [ 82.709107][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.789956][ T5771] team0: Port device team_slave_0 added [ 82.819392][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.829545][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.837203][ T5777] bridge_slave_0: entered allmulticast mode [ 82.845186][ T5777] bridge_slave_0: entered promiscuous mode [ 82.854172][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861498][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.868866][ T5777] bridge_slave_1: entered allmulticast mode [ 82.876676][ T5777] bridge_slave_1: entered promiscuous mode [ 82.889691][ T5771] team0: Port device team_slave_1 added [ 82.974109][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.986901][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.994569][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.001719][ T5772] bridge_slave_0: entered allmulticast mode [ 83.009133][ T5772] bridge_slave_0: entered promiscuous mode [ 83.017892][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.026535][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.053630][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.072372][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.083260][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.090677][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.098192][ T5772] bridge_slave_1: entered allmulticast mode [ 83.105190][ T5772] bridge_slave_1: entered promiscuous mode [ 83.113302][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.120679][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.147295][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.209485][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.231226][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.246370][ T5774] Bluetooth: hci0: command tx timeout [ 83.258834][ T5777] team0: Port device team_slave_0 added [ 83.270087][ T5777] team0: Port device team_slave_1 added [ 83.330919][ T5772] team0: Port device team_slave_0 added [ 83.369002][ T5772] team0: Port device team_slave_1 added [ 83.384697][ T5771] hsr_slave_0: entered promiscuous mode [ 83.391491][ T5771] hsr_slave_1: entered promiscuous mode [ 83.397831][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.406615][ T5771] Cannot create hsr debugfs directory [ 83.412944][ T5774] Bluetooth: hci2: command tx timeout [ 83.419720][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.427036][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.456195][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.482713][ T5774] Bluetooth: hci3: command tx timeout [ 83.482761][ T5780] Bluetooth: hci1: command tx timeout [ 83.505193][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.512287][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.543393][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.619023][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.626192][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.654791][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.668009][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.675656][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.702330][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.819868][ T5777] hsr_slave_0: entered promiscuous mode [ 83.827001][ T5777] hsr_slave_1: entered promiscuous mode [ 83.833901][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.841496][ T5777] Cannot create hsr debugfs directory [ 83.889740][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.909049][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.963469][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.975779][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.989042][ T5772] hsr_slave_0: entered promiscuous mode [ 83.997463][ T5772] hsr_slave_1: entered promiscuous mode [ 84.003913][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.011659][ T5772] Cannot create hsr debugfs directory [ 84.227183][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.238114][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.272238][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.293778][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.384539][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.396980][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.414116][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.435017][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.529525][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.546833][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.563076][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.577854][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.588614][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.622015][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.655359][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.662897][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.730394][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.737606][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.767275][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.816532][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.862220][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.869523][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.879775][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.886935][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.905848][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.956344][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.988435][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.015736][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.059902][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.067229][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.079243][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.086582][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.097032][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.104253][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.199924][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.207096][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.324428][ T5780] Bluetooth: hci0: command tx timeout [ 85.383836][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.485249][ T5780] Bluetooth: hci2: command tx timeout [ 85.551477][ T5767] veth0_vlan: entered promiscuous mode [ 85.565314][ T5780] Bluetooth: hci3: command tx timeout [ 85.570802][ T5780] Bluetooth: hci1: command tx timeout [ 85.620304][ T5767] veth1_vlan: entered promiscuous mode [ 85.698364][ T5767] veth0_macvtap: entered promiscuous mode [ 85.718965][ T5767] veth1_macvtap: entered promiscuous mode [ 85.815899][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.834989][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.845935][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.869415][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.895771][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.908351][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.920562][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.929620][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.938535][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.108587][ T5777] veth0_vlan: entered promiscuous mode [ 86.118200][ T5772] veth0_vlan: entered promiscuous mode [ 86.137474][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.147020][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.167973][ T5771] veth0_vlan: entered promiscuous mode [ 86.180414][ T5777] veth1_vlan: entered promiscuous mode [ 86.200422][ T5772] veth1_vlan: entered promiscuous mode [ 86.241376][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.256392][ T5771] veth1_vlan: entered promiscuous mode [ 86.262395][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.305707][ T5777] veth0_macvtap: entered promiscuous mode [ 86.344549][ T5772] veth0_macvtap: entered promiscuous mode [ 86.361978][ T5777] veth1_macvtap: entered promiscuous mode [ 86.379985][ T5772] veth1_macvtap: entered promiscuous mode [ 86.394041][ T5771] veth0_macvtap: entered promiscuous mode [ 86.415526][ T5771] veth1_macvtap: entered promiscuous mode [ 86.444907][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.456173][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.474338][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.491659][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.515635][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.542947][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.559298][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.579726][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.594963][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.608152][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.628513][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.639269][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.652869][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.669467][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.689550][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.737378][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.748808][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.767717][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.779627][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.799313][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.809686][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.826929][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.839474][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.851840][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.868874][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.880321][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.891563][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.905779][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.916580][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.929911][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.958055][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.968998][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.985224][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.994162][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.020337][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.034679][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.048411][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.060122][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.085938][ T966] cfg80211: failed to load regulatory.db [ 87.110313][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.122093][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.141421][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.150865][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.562820][ T5780] Bluetooth: hci2: command tx timeout [ 87.643133][ T5780] Bluetooth: hci3: command tx timeout [ 87.653016][ T5780] Bluetooth: hci1: command tx timeout [ 88.110442][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.117203][ T5842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.130759][ T5842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.139312][ T5842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.145904][ T5842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.154287][ T5842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.161225][ T5842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.168213][ T5842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.177108][ T5842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.184920][ T5842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.191430][ T5842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.199533][ T5842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.336045][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.349825][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.426318][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.460435][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.503060][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.511044][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.562198][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.575231][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.621934][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.631378][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.667010][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.675628][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.405534][ T5780] Bluetooth: hci0: command 0x0419 tx timeout [ 89.420003][ T5875] syz.0.17[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.447259][ T5875] loop0: detected capacity change from 0 to 128 [ 89.620958][ T28] audit: type=1804 audit(1776412969.212:2): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.17" name="/newroot/8/file0/cgroup.controllers" dev="loop0" ino=1048592 res=1 errno=0 [ 89.726052][ T11] kworker/u4:0: attempt to access beyond end of device [ 89.726052][ T11] loop0: rw=1, sector=145, nr_sectors = 96 limit=128 [ 90.163449][ T5882] syzkaller0: entered promiscuous mode [ 90.203143][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.210012][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.220208][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.298316][ T5882] syzkaller0: entered allmulticast mode [ 90.597200][ T5885] loop1: detected capacity change from 0 to 512 [ 90.630311][ T5882] tc action pedit offset 128 out of bounds [ 90.638834][ T5885] ======================================================= [ 90.638834][ T5885] WARNING: The mand mount option has been deprecated and [ 90.638834][ T5885] and is ignored by this kernel. Remove the mand [ 90.638834][ T5885] option from the mount to silence this warning. [ 90.638834][ T5885] ======================================================= [ 91.149202][ T5899] Zero length message leads to an empty skb [ 91.226242][ T5901] loop0: detected capacity change from 0 to 128 [ 91.283078][ T28] audit: type=1804 audit(1776412970.882:3): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.28" name="/newroot/13/file0/cgroup.controllers" dev="loop0" ino=1048594 res=1 errno=0 [ 91.335308][ T11] kworker/u4:0: attempt to access beyond end of device [ 91.335308][ T11] loop0: rw=1, sector=145, nr_sectors = 96 limit=128 [ 91.485582][ T5774] Bluetooth: hci0: command 0x0419 tx timeout [ 92.070071][ T5923] loop0: detected capacity change from 0 to 128 [ 92.119141][ T5863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.158310][ T28] audit: type=1804 audit(1776412971.752:4): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.38" name="/newroot/21/file0/cgroup.controllers" dev="loop0" ino=1048595 res=1 errno=0 [ 92.209379][ T5925] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 92.277128][ T1024] kworker/u4:5: attempt to access beyond end of device [ 92.277128][ T1024] loop0: rw=1, sector=145, nr_sectors = 96 limit=128 [ 92.291459][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.292742][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.297553][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.031538][ T5949] loop2: detected capacity change from 0 to 8192 [ 93.086740][ T5949] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.474817][ T5955] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 93.562736][ T5774] Bluetooth: hci0: command 0x0419 tx timeout [ 93.824743][ T5959] loop2: detected capacity change from 0 to 128 [ 94.369527][ T5774] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.376594][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.382935][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.078713][ T5979] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 95.385076][ T5984] loop1: detected capacity change from 0 to 128 [ 95.834183][ T5780] Bluetooth: hci0: command 0x0419 tx timeout [ 96.860080][ T6001] loop1: detected capacity change from 0 to 128 [ 97.059561][ T43] kworker/u4:3: attempt to access beyond end of device [ 97.059561][ T43] loop1: rw=1, sector=145, nr_sectors = 96 limit=128 [ 97.481420][ T6010] loop2: detected capacity change from 0 to 4096 [ 97.504604][ T6010] EXT4-fs: Ignoring removed bh option [ 97.601603][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.785073][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.097455][ T6024] syzkaller0: entered promiscuous mode [ 98.142954][ T6024] syzkaller0: entered allmulticast mode [ 98.960134][ T6037] loop3: detected capacity change from 0 to 128 [ 99.121756][ T12] kworker/u4:1: attempt to access beyond end of device [ 99.121756][ T12] loop3: rw=1, sector=145, nr_sectors = 96 limit=128 [ 99.598949][ T6043] loop0: detected capacity change from 0 to 4096 [ 99.619779][ T6043] EXT4-fs: Ignoring removed bh option [ 99.706402][ T6045] loop3: detected capacity change from 0 to 128 [ 100.474558][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.692488][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.471944][ T6070] loop1: detected capacity change from 0 to 128 [ 102.545881][ T28] audit: type=1804 audit(1776412982.142:5): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.91" name="/newroot/24/file0/cgroup.controllers" dev="loop1" ino=1048602 res=1 errno=0 [ 103.093140][ T6083] loop1: detected capacity change from 0 to 128 [ 103.856252][ T28] audit: type=1326 audit(1776412983.442:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c8179c819 code=0x0 [ 104.932340][ T6098] loop2: detected capacity change from 0 to 128 [ 105.022063][ T28] audit: type=1804 audit(1776412984.612:7): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.102" name="/newroot/20/file0/cgroup.controllers" dev="loop2" ino=1048604 res=1 errno=0 [ 105.140115][ T6102] loop0: detected capacity change from 0 to 1024 [ 105.248302][ T6102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.590711][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.790911][ T6116] loop2: detected capacity change from 0 to 128 [ 105.914900][ T28] audit: type=1800 audit(1776412985.442:8): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.107" name="bus" dev="loop2" ino=1048605 res=0 errno=0 [ 106.718546][ T6120] loop1: detected capacity change from 0 to 512 [ 106.774378][ T6120] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 106.810404][ T6120] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 106.819218][ T6120] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.111: iget: bad i_size value: 12154757448730 [ 106.856343][ T6120] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.111: couldn't read orphan inode 13 (err -117) [ 106.885808][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.002167][ T6120] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 107.015962][ T6120] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 107.114344][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.704738][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 107.715824][ T6149] netlink: 212 bytes leftover after parsing attributes in process `syz.2.120'. [ 107.726351][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 107.747173][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 107.801106][ T6150] loop0: detected capacity change from 0 to 128 [ 107.902863][ T28] audit: type=1800 audit(1776412987.482:9): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="bus" dev="loop0" ino=1048606 res=0 errno=0 [ 109.030776][ T6159] loop1: detected capacity change from 0 to 512 [ 109.171066][ T6159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.283116][ T6159] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.392835][ T6168] syz.2.126 uses obsolete (PF_INET,SOCK_PACKET) [ 109.492291][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.792910][ T6178] syzkaller0: entered promiscuous mode [ 109.825767][ T6178] syzkaller0: entered allmulticast mode [ 109.994587][ T6183] tipc: Started in network mode [ 109.999617][ T6183] tipc: Node identity 9e9c5e7dd585, cluster identity 4711 [ 110.007642][ T6183] tipc: Enabled bearer , priority 0 [ 110.024641][ T6180] tipc: Disabling bearer [ 110.098157][ T6185] syzkaller0: entered promiscuous mode [ 110.103907][ T6185] syzkaller0: entered allmulticast mode [ 110.299454][ T6189] loop2: detected capacity change from 0 to 1024 [ 110.305957][ T6187] loop0: detected capacity change from 0 to 4096 [ 110.318529][ T6187] EXT4-fs: Ignoring removed bh option [ 110.397649][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.434402][ T6189] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.470159][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.661109][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.707010][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.327238][ T6209] syzkaller0: entered promiscuous mode [ 111.341313][ T6209] syzkaller0: entered allmulticast mode [ 111.349489][ T6211] tipc: Enabled bearer , priority 0 [ 111.434045][ T6210] tipc: Disabling bearer [ 111.452269][ T6213] syzkaller0: entered promiscuous mode [ 111.460158][ T6213] syzkaller0: entered allmulticast mode [ 111.679014][ T6219] loop2: detected capacity change from 0 to 1024 [ 111.757818][ T6219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.814291][ T6219] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.961860][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.444001][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 113.455921][ T6243] netlink: 212 bytes leftover after parsing attributes in process `syz.3.154'. [ 113.492636][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 113.504752][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 113.616215][ T6246] tipc: Enabled bearer , priority 0 [ 113.676249][ T6245] tipc: Disabling bearer [ 114.160935][ T6261] syzkaller0: entered promiscuous mode [ 114.502767][ T1188] IPVS: starting estimator thread 0... [ 114.612709][ T6265] IPVS: using max 18 ests per chain, 43200 per kthread [ 114.864781][ T6271] syzkaller0: entered promiscuous mode [ 114.870609][ T6271] syzkaller0: entered allmulticast mode [ 115.059010][ T6276] tipc: Started in network mode [ 115.079062][ T6276] tipc: Node identity ae528e5d3326, cluster identity 4711 [ 115.126947][ T6276] tipc: Enabled bearer , priority 0 [ 115.181313][ T6275] tipc: Disabling bearer [ 115.807467][ T6299] loop3: detected capacity change from 0 to 128 [ 115.853272][ T28] audit: type=1804 audit(1776412995.442:10): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.176" name="/newroot/34/file0/cgroup.controllers" dev="loop3" ino=1048607 res=1 errno=0 [ 115.901104][ T6299] syz.3.176: attempt to access beyond end of device [ 115.901104][ T6299] loop3: rw=0, sector=121, nr_sectors = 8 limit=128 [ 115.989710][ T3496] kworker/u4:9: attempt to access beyond end of device [ 115.989710][ T3496] loop3: rw=1, sector=145, nr_sectors = 96 limit=128 [ 116.047514][ T6301] syzkaller0: entered promiscuous mode [ 116.066654][ T6301] syzkaller0: entered allmulticast mode [ 116.471750][ T6308] tipc: Enabled bearer , priority 0 [ 116.517630][ T6306] tipc: Disabling bearer [ 116.888606][ T6317] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 116.995457][ T6317] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.008529][ T6317] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 117.120540][ T6321] bond1: (slave gretap1): making interface the new active one [ 117.160999][ T6321] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 117.199200][ T6317] macvlan2: entered promiscuous mode [ 117.233813][ T6317] macvlan2: entered allmulticast mode [ 117.251492][ T6317] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 117.355268][ T6321] syz.3.184 (6321) used greatest stack depth: 20048 bytes left [ 117.761423][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 117.800352][ T6333] vlan2: entered promiscuous mode [ 117.820321][ T6333] syz_tun: entered promiscuous mode [ 118.060690][ T6336] tipc: Started in network mode [ 118.079741][ T6336] tipc: Node identity e68a5f996ae2, cluster identity 4711 [ 118.104121][ T6336] tipc: Enabled bearer , priority 0 [ 118.145199][ T6335] tipc: Disabling bearer [ 118.209516][ T6338] loop0: detected capacity change from 0 to 1024 [ 118.329343][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.364504][ T6343] loop3: detected capacity change from 0 to 164 [ 118.426285][ T5758] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.600378][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.774265][ T6349] loop0: detected capacity change from 0 to 512 [ 118.793841][ T6349] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.084319][ T6349] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 119.165204][ T6349] loop0: detected capacity change from 0 to 256 [ 119.192708][ T6357] loop1: detected capacity change from 0 to 128 [ 119.463634][ T6362] loop1: detected capacity change from 0 to 512 [ 119.491422][ T6364] tipc: Enabling of bearer rejected, failed to enable media [ 119.565953][ T6362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.652778][ T6362] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.850420][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.030825][ T6374] loop1: detected capacity change from 0 to 1024 [ 120.091931][ T6374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.246554][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.667565][ T6389] loop0: detected capacity change from 0 to 512 [ 120.688673][ T6389] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.947247][ T6389] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 121.045848][ T6389] loop0: detected capacity change from 0 to 256 [ 121.715178][ T6398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 121.742555][ T6398] netlink: 43 bytes leftover after parsing attributes in process `syz.1.212'. [ 121.751502][ T6398] netlink: 'syz.1.212': attribute type 6 has an invalid length. [ 121.773268][ T6398] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 121.792623][ T6398] netlink: 43 bytes leftover after parsing attributes in process `syz.1.212'. [ 122.025554][ T6406] loop1: detected capacity change from 0 to 1024 [ 122.094753][ T6406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.196261][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.546963][ T6415] loop0: detected capacity change from 0 to 512 [ 122.571057][ T6415] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.906443][ T6415] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 122.975316][ T6411] IPv6: addrconf: prefix option has invalid lifetime [ 123.015164][ T6415] loop0: detected capacity change from 0 to 256 [ 123.804171][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 123.843868][ T6431] netlink: 212 bytes leftover after parsing attributes in process `syz.1.223'. [ 123.875040][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 123.896844][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 124.437041][ T6449] netlink: 76 bytes leftover after parsing attributes in process `syz.1.230'. [ 124.498911][ T6451] syzkaller0: entered promiscuous mode [ 124.512753][ T6451] syzkaller0: entered allmulticast mode [ 124.618862][ T6453] IPv6: addrconf: prefix option has invalid lifetime [ 125.243668][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 125.273943][ T6464] netlink: 212 bytes leftover after parsing attributes in process `syz.0.236'. [ 125.598100][ T6468] loop2: detected capacity change from 0 to 512 [ 125.644761][ T6468] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.697645][ T6468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.765311][ T6468] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.809706][ T6468] EXT4-fs (loop2): 1 truncate cleaned up [ 125.819598][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.434363][ T6489] syzkaller0: entered promiscuous mode [ 126.464278][ T6489] syzkaller0: entered allmulticast mode [ 126.521901][ T28] audit: type=1800 audit(1776413006.112:11): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.237" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 126.545918][ T6490] loop1: detected capacity change from 0 to 128 [ 126.622046][ T6490] syz.1.243: attempt to access beyond end of device [ 126.622046][ T6490] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 126.635113][ T28] audit: type=1800 audit(1776413006.162:12): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="bus" dev="loop1" ino=1048609 res=0 errno=0 [ 126.718405][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.858128][ T9] kernel write not supported for file /vcs (pid: 9 comm: kworker/0:1) [ 127.023824][ T6501] loop0: detected capacity change from 0 to 128 [ 127.480333][ T6510] capability: warning: `syz.1.250' uses 32-bit capabilities (legacy support in use) [ 127.513501][ T6510] program syz.1.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.856759][ T6520] syzkaller0: entered promiscuous mode [ 127.862340][ T6520] syzkaller0: entered allmulticast mode [ 129.529845][ T6540] loop1: detected capacity change from 0 to 128 [ 129.570412][ T6543] __nla_validate_parse: 2 callbacks suppressed [ 129.570431][ T6543] netlink: 14 bytes leftover after parsing attributes in process `syz.3.264'. [ 129.879479][ T6543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.888432][ T6552] loop0: detected capacity change from 0 to 128 [ 129.898245][ T6550] loop2: detected capacity change from 0 to 512 [ 129.947110][ T6550] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.268: bg 0: block 4: invalid block bitmap [ 129.979475][ T6550] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 129.980122][ T6543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.004561][ T6550] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.268: invalid indirect mapped block 1 (level 1) [ 130.032421][ T6550] EXT4-fs (loop2): 1 truncate cleaned up [ 130.043490][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.134068][ T6543] bond0 (unregistering): Released all slaves [ 130.192444][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 130.213174][ T6556] netlink: 212 bytes leftover after parsing attributes in process `syz.0.270'. [ 130.218067][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.222599][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 130.272705][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 130.363481][ T6558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.271'. [ 130.911895][ T6574] loop1: detected capacity change from 0 to 128 [ 131.069476][ T6579] tipc: Enabling of bearer rejected, failed to enable media [ 131.245513][ T6584] loop2: detected capacity change from 0 to 128 [ 131.449138][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 131.471665][ T6588] netlink: 212 bytes leftover after parsing attributes in process `syz.0.283'. [ 131.510384][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 131.529531][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 132.138224][ T6607] loop3: detected capacity change from 0 to 128 [ 132.369430][ T6608] loop1: detected capacity change from 0 to 128 [ 132.401015][ T28] audit: type=1800 audit(1776413011.992:13): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.288" name="bus" dev="loop1" ino=1048610 res=0 errno=0 [ 132.459147][ T6611] syz.1.288: attempt to access beyond end of device [ 132.459147][ T6611] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 133.173402][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181264][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.507608][ T6633] loop0: detected capacity change from 0 to 128 [ 133.716072][ T6635] loop3: detected capacity change from 0 to 128 [ 134.586999][ T6642] loop0: detected capacity change from 0 to 128 [ 135.248865][ T6657] loop2: detected capacity change from 0 to 128 [ 135.296234][ T28] audit: type=1800 audit(1776413014.862:14): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.304" name="bus" dev="loop2" ino=1048612 res=0 errno=0 [ 135.353572][ T6657] syz.2.304: attempt to access beyond end of device [ 135.353572][ T6657] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 135.395035][ T6660] IPv6: addrconf: prefix option has invalid lifetime [ 135.933723][ T6669] syzkaller0: entered promiscuous mode [ 136.225273][ T6674] loop2: detected capacity change from 0 to 128 [ 136.425880][ T6678] loop2: detected capacity change from 0 to 128 [ 136.496458][ T28] audit: type=1804 audit(1776413016.092:15): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.311" name="/newroot/67/file0/cgroup.controllers" dev="loop2" ino=1048613 res=1 errno=0 [ 137.778576][ T6709] loop3: detected capacity change from 0 to 128 [ 137.976498][ T6714] loop2: detected capacity change from 0 to 128 [ 138.021799][ T28] audit: type=1804 audit(1776413017.612:16): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.321" name="/newroot/71/file0/cgroup.controllers" dev="loop2" ino=1048614 res=1 errno=0 [ 140.619547][ T6766] loop1: detected capacity change from 0 to 512 [ 140.633969][ T6766] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.812463][ T6766] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 140.886169][ T6766] loop1: detected capacity change from 0 to 256 [ 143.098573][ T6793] loop0: detected capacity change from 0 to 128 [ 144.047362][ T6803] IPv6: addrconf: prefix option has invalid lifetime [ 145.045425][ T6809] tipc: Enabled bearer , priority 0 [ 145.064963][ T6808] tipc: Disabling bearer [ 145.319529][ T6814] netlink: 'syz.3.355': attribute type 13 has an invalid length. [ 146.547992][ T6836] tipc: Enabled bearer , priority 0 [ 146.570984][ T6835] tipc: Disabling bearer [ 147.624314][ T6847] loop1: detected capacity change from 0 to 128 [ 147.649061][ T28] audit: type=1800 audit(1776413027.242:17): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.369" name="bus" dev="loop1" ino=1048616 res=0 errno=0 [ 147.724017][ T6847] syz.1.369: attempt to access beyond end of device [ 147.724017][ T6847] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 148.104438][ T6852] loop1: detected capacity change from 0 to 512 [ 148.162394][ T6852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.210146][ T6852] EXT4-fs (loop1): 1 truncate cleaned up [ 148.217741][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.315741][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.737462][ T6861] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.778121][ T6861] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.378196][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 150.340735][ T6881] 9pnet_fd: Insufficient options for proto=fd [ 151.023293][ T6891] loop1: detected capacity change from 0 to 128 [ 151.162748][ T6887] IPv6: addrconf: prefix option has invalid lifetime [ 152.566260][ T6900] loop0: detected capacity change from 0 to 128 [ 152.819887][ T6814] Set syz1 is full, maxelem 65536 reached [ 153.492404][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 154.860736][ T6929] loop1: detected capacity change from 0 to 128 [ 155.421481][ T6932] loop3: detected capacity change from 0 to 4096 [ 155.487780][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.718633][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.916984][ T6942] loop1: detected capacity change from 0 to 512 [ 155.942947][ T6942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.986756][ T6942] EXT4-fs (loop1): 1 truncate cleaned up [ 156.022382][ T6942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.093354][ T6944] IPv6: addrconf: prefix option has invalid lifetime [ 156.421675][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.470942][ T6958] loop2: detected capacity change from 0 to 128 [ 156.694715][ T6961] loop3: detected capacity change from 0 to 512 [ 156.770945][ T6961] EXT4-fs: Ignoring removed nobh option [ 156.939399][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.952729][ T6961] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.334619][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 157.363997][ T6970] netlink: 212 bytes leftover after parsing attributes in process `syz.0.410'. [ 157.383397][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 157.412989][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 158.074312][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.509286][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 158.519733][ T6996] netlink: 212 bytes leftover after parsing attributes in process `syz.2.420'. [ 158.528828][ T6985] IPv6: addrconf: prefix option has invalid lifetime [ 158.536550][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 158.548549][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 159.351617][ T7016] loop3: detected capacity change from 0 to 128 [ 159.565062][ T7020] loop0: detected capacity change from 0 to 512 [ 159.591846][ T7020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.642274][ T7020] EXT4-fs (loop0): 1 truncate cleaned up [ 159.676192][ T7020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.976094][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.372681][ T7030] IPv6: addrconf: prefix option has invalid lifetime [ 161.221286][ T7047] loop1: detected capacity change from 0 to 512 [ 161.239012][ T7047] EXT4-fs: Ignoring removed orlov option [ 161.245595][ T7047] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.261019][ T7047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.289255][ T7047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.306235][ T7047] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.652904][ T5771] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 161.705381][ T5771] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 162.079436][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.120492][ T7064] IPv6: addrconf: prefix option has invalid lifetime [ 162.145710][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.394825][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.528520][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.688888][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.777053][ T7071] 9pnet_fd: Insufficient options for proto=fd [ 163.468424][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.478892][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.488200][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.501184][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.509277][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.516954][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.594926][ T5843] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.685393][ T5843] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.847481][ T7082] chnl_net:caif_netlink_parms(): no params data found [ 165.300172][ T34] hsr_slave_0: left promiscuous mode [ 165.375383][ T34] hsr_slave_1: left promiscuous mode [ 165.433197][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.467901][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.488990][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.510314][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.514145][ T7135] 9pnet_fd: Insufficient options for proto=fd [ 165.525360][ T7137] IPv6: addrconf: prefix option has invalid lifetime [ 165.553969][ T34] bridge_slave_1: left allmulticast mode [ 165.559873][ T34] bridge_slave_1: left promiscuous mode [ 165.572624][ T5774] Bluetooth: hci2: command tx timeout [ 165.612836][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.702417][ T34] bridge_slave_0: left allmulticast mode [ 165.708792][ T34] bridge_slave_0: left promiscuous mode [ 165.731105][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.830116][ T34] veth1_macvtap: left promiscuous mode [ 165.836435][ T34] veth0_macvtap: left promiscuous mode [ 165.842522][ T34] veth1_vlan: left promiscuous mode [ 165.849319][ T34] veth0_vlan: left promiscuous mode [ 166.660111][ T34] team0 (unregistering): Port device team_slave_1 removed [ 166.707559][ T34] team0 (unregistering): Port device team_slave_0 removed [ 166.750130][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.799432][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.140941][ T34] bond0 (unregistering): Released all slaves [ 167.480934][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.499777][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.510413][ T7082] bridge_slave_0: entered allmulticast mode [ 167.530311][ T7082] bridge_slave_0: entered promiscuous mode [ 167.559136][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.596215][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.613620][ T7082] bridge_slave_1: entered allmulticast mode [ 167.621275][ T7082] bridge_slave_1: entered promiscuous mode [ 167.648556][ T5774] Bluetooth: hci2: command tx timeout [ 167.787582][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.831759][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.918521][ T7163] 9pnet_fd: Insufficient options for proto=fd [ 167.963975][ T7082] team0: Port device team_slave_0 added [ 167.995021][ T7082] team0: Port device team_slave_1 added [ 168.089031][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.125704][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.187943][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.205434][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.212886][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.256198][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.361115][ T7082] hsr_slave_0: entered promiscuous mode [ 168.378643][ T7082] hsr_slave_1: entered promiscuous mode [ 168.386618][ T7082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.394692][ T7082] Cannot create hsr debugfs directory [ 168.795399][ T7082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.821638][ T7082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.834394][ T7082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.847291][ T7082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.202018][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.260206][ T7082] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.359996][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.367823][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.407103][ T7199] 9pnet_fd: Insufficient options for proto=fd [ 169.444674][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.451977][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.654438][ T7203] loop2: detected capacity change from 0 to 512 [ 169.739432][ T5774] Bluetooth: hci2: command tx timeout [ 170.007774][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 170.021720][ T7203] ext4 filesystem being mounted at /117/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.915941][ T7082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.202480][ C0] sched: RT throttling activated [ 171.803530][ T5774] Bluetooth: hci2: command tx timeout [ 171.911165][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.103620][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 172.116909][ T7233] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 172.758807][ T7249] loop3: detected capacity change from 0 to 512 [ 172.953567][ T7249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 172.966863][ T7249] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.625532][ T7082] veth0_vlan: entered promiscuous mode [ 174.732915][ T7082] veth1_vlan: entered promiscuous mode [ 175.126149][ T7082] veth0_macvtap: entered promiscuous mode [ 175.142019][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 175.207090][ T7082] veth1_macvtap: entered promiscuous mode [ 175.297400][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.325465][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.345642][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.362057][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.383571][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.408783][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.433254][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.467594][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.514917][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.563567][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.592751][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.624992][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.652942][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.681345][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.748945][ T7082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.781881][ T7082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.821932][ T7082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.841368][ T7082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.386106][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.413600][ T7297] IPv6: addrconf: prefix option has invalid lifetime [ 176.420521][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.549933][ T7208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.561852][ T7301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'. [ 176.564622][ T7303] 9pnet_fd: Insufficient options for proto=fd [ 176.579617][ T7208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.208527][ T7319] netlink: 144 bytes leftover after parsing attributes in process `syz.0.500'. [ 177.580153][ T7329] IPv6: addrconf: prefix option has invalid lifetime [ 177.812830][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 178.905448][ T7356] IPv6: addrconf: prefix option has invalid lifetime [ 179.452775][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 180.524017][ T7392] IPv6: addrconf: prefix option has invalid lifetime [ 180.786521][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.525'. [ 181.040045][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 181.068283][ T7406] netlink: 212 bytes leftover after parsing attributes in process `syz.3.526'. [ 181.085253][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 181.119124][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 181.316667][ T7411] syzkaller0: entered promiscuous mode [ 181.322315][ T7411] syzkaller0: entered allmulticast mode [ 183.656984][ T7429] IPv6: addrconf: prefix option has invalid lifetime [ 183.930366][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 183.940583][ T7437] netlink: 212 bytes leftover after parsing attributes in process `syz.4.537'. [ 183.950379][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 183.961004][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 188.204777][ T7477] IPv6: addrconf: prefix option has invalid lifetime [ 188.230204][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 188.966670][ T7496] loop3: detected capacity change from 0 to 4096 [ 188.984206][ T7496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.017523][ T7496] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 189.050358][ T7496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.071412][ T7496] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 189.079777][ T7496] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 189.134068][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.809162][ T7514] loop2: detected capacity change from 0 to 512 [ 189.824019][ T7514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.862232][ T7514] EXT4-fs (loop2): 1 truncate cleaned up [ 189.886683][ T7514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.982359][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.066532][ T7521] IPv6: addrconf: prefix option has invalid lifetime [ 190.342594][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 190.687521][ T7538] xt_hashlimit: size too large, truncated to 1048576 [ 191.741316][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 191.943579][ T7552] IPv6: addrconf: prefix option has invalid lifetime [ 193.864092][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 194.077529][ T7580] IPv6: addrconf: prefix option has invalid lifetime [ 194.608678][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.641403][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.357248][ T7597] loop0: detected capacity change from 0 to 512 [ 195.385449][ T7597] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.416512][ T7597] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.431601][ T7597] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 195.457401][ T7597] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.581: attempt to clear invalid blocks 2 len 1 [ 195.590495][ T7597] EXT4-fs (loop0): Remounting filesystem read-only [ 195.636145][ T7597] EXT4-fs (loop0): 1 truncate cleaned up [ 195.644925][ T7597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.834307][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.917698][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.586'. [ 197.035950][ T7627] IPv6: addrconf: prefix option has invalid lifetime [ 199.081610][ T7655] tipc: Enabled bearer , priority 0 [ 199.110674][ T7655] syzkaller0: entered promiscuous mode [ 199.132758][ T7655] syzkaller0: entered allmulticast mode [ 199.359789][ T7655] tipc: Resetting bearer [ 199.408476][ T7655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.599' sets config #1 [ 199.472823][ T7654] tipc: Resetting bearer [ 199.563410][ T7654] tipc: Disabling bearer [ 199.981328][ T7672] IPv6: addrconf: prefix option has invalid lifetime [ 200.296454][ T7695] loop3: detected capacity change from 0 to 512 [ 200.404433][ T7695] EXT4-fs: Ignoring removed nobh option [ 201.283873][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.392864][ T7695] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.124188][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.260794][ T7731] loop2: detected capacity change from 0 to 128 [ 202.406768][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.425425][ T28] audit: type=1800 audit(1776413082.002:18): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.610" name="bus" dev="loop2" ino=1048625 res=0 errno=0 [ 202.692001][ T7734] syz.2.610: attempt to access beyond end of device [ 202.692001][ T7734] loop2: rw=2049, sector=553, nr_sectors = 488 limit=128 [ 202.696037][ T7737] loop3: detected capacity change from 0 to 2048 [ 202.811242][ T7737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.859954][ T7737] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 202.919299][ T7737] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 202.945396][ T7737] EXT4-fs (loop3): This should not happen!! Data will be lost [ 202.945396][ T7737] [ 202.993855][ T7737] EXT4-fs (loop3): Total free blocks count 0 [ 203.032832][ T7737] EXT4-fs (loop3): Free/Dirty block details [ 203.084949][ T7737] EXT4-fs (loop3): free_blocks=66060288 [ 203.115060][ T7737] EXT4-fs (loop3): dirty_blocks=48 [ 203.122572][ T7737] EXT4-fs (loop3): Block reservation details [ 203.139086][ T7737] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 203.242179][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.122712][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 204.134128][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.630703][ T7792] loop3: detected capacity change from 0 to 8192 [ 205.646503][ T7797] loop4: detected capacity change from 0 to 512 [ 205.770537][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.840275][ T7797] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.090424][ T7082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.020869][ T7818] syzkaller0: entered promiscuous mode [ 207.106054][ T7818] syzkaller0: entered allmulticast mode [ 207.564122][ T7835] loop4: detected capacity change from 0 to 512 [ 207.571513][ T7835] EXT4-fs: Ignoring removed nobh option [ 207.996669][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.032229][ T7850] IPv6: addrconf: prefix option has invalid lifetime [ 208.121966][ T7835] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.876848][ T7082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.961641][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029401400: rx timeout, send abort [ 209.467210][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029400c00: rx timeout, send abort [ 209.476386][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029401400: abort rx timeout. Force session deactivation [ 209.985317][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029400c00: abort rx timeout. Force session deactivation [ 211.532359][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 211.921085][ T7884] syzkaller0: entered promiscuous mode [ 212.228847][ T7903] IPv6: addrconf: prefix option has invalid lifetime [ 213.243875][ T7921] loop4: detected capacity change from 0 to 128 [ 213.606639][ T7921] syz.4.651: attempt to access beyond end of device [ 213.606639][ T7921] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 213.671811][ T28] audit: type=1800 audit(1776413092.892:19): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.651" name="bus" dev="loop4" ino=1048626 res=0 errno=0 [ 216.184987][ T7942] IPv6: addrconf: prefix option has invalid lifetime [ 216.487483][ T7958] loop0: detected capacity change from 0 to 256 [ 216.601079][ T7958] FAT-fs (loop0): Directory bread(block 64) failed [ 216.653521][ T7958] FAT-fs (loop0): Directory bread(block 65) failed [ 216.698580][ T7958] FAT-fs (loop0): Directory bread(block 66) failed [ 216.720303][ T7958] FAT-fs (loop0): Directory bread(block 67) failed [ 216.727413][ T7958] FAT-fs (loop0): Directory bread(block 68) failed [ 216.734148][ T7958] FAT-fs (loop0): Directory bread(block 69) failed [ 216.742177][ T7958] FAT-fs (loop0): Directory bread(block 70) failed [ 216.748959][ T7958] FAT-fs (loop0): Directory bread(block 71) failed [ 216.764238][ T7958] FAT-fs (loop0): Directory bread(block 72) failed [ 216.770848][ T7958] FAT-fs (loop0): Directory bread(block 73) failed [ 217.658792][ T28] audit: type=1800 audit(1776413097.232:20): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.662" name="bus" dev="loop0" ino=1048627 res=0 errno=0 [ 217.974344][ T7974] syzkaller0: entered promiscuous mode [ 218.202647][ T7984] loop2: detected capacity change from 0 to 128 [ 218.569955][ T28] audit: type=1800 audit(1776413097.862:21): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.669" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 218.800362][ T7984] syz.2.669: attempt to access beyond end of device [ 218.800362][ T7984] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 218.979493][ T7983] IPv6: addrconf: prefix option has invalid lifetime [ 222.583130][ T8022] IPv6: addrconf: prefix option has invalid lifetime [ 223.647483][ T8043] loop4: detected capacity change from 0 to 512 [ 223.686515][ T8043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.756805][ T8043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.690: bg 0: block 127: padding at end of block bitmap is not set [ 223.778353][ T8041] syzkaller0: entered promiscuous mode [ 223.900065][ T8043] ------------[ cut here ]------------ [ 223.907092][ T8043] EA inode 11 i_nlink=0 [ 223.946245][ T8043] WARNING: CPU: 1 PID: 8043 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 223.961236][ T8043] Modules linked in: [ 223.965339][ T8043] CPU: 1 PID: 8043 Comm: syz.4.690 Not tainted syzkaller #0 [ 223.972776][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.982943][ T8043] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 223.989696][ T8043] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 65 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 34 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 7e d5 3f 08 [ 224.010351][ T8043] RSP: 0018:ffffc900042cf2e0 EFLAGS: 00010246 [ 224.017203][ T8043] RAX: fde3ab97d74d4c00 RBX: 0000000000000000 RCX: 0000000000080000 [ 224.025727][ T8043] RDX: ffffc9000cb29000 RSI: 0000000000039168 RDI: 0000000000039169 [ 224.035100][ T8043] RBP: ffffc900042cf3d0 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 224.043560][ T8043] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 224.051856][ T8043] R13: ffff88805de1c0a8 R14: ffff88805de1beb0 R15: ffff88805de1bf00 [ 224.060288][ T8043] FS: 00007fee2e0e16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 224.069729][ T8043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.076436][ T8043] CR2: 000000110c39fc3a CR3: 000000002b765000 CR4: 00000000003506e0 [ 224.084612][ T8043] Call Trace: [ 224.087952][ T8043] [ 224.090948][ T8043] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 224.096791][ T8043] ? __ext4_journal_ensure_credits+0x30/0x450 [ 224.102972][ T8043] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 224.109041][ T8043] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 224.115947][ T8043] ? __ext4_journal_ensure_credits+0x450/0x450 [ 224.122343][ T8043] ext4_xattr_delete_inode+0xb3e/0xd10 [ 224.128077][ T8043] ? up_write+0x1c3/0x410 [ 224.132620][ T8043] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 224.138767][ T8043] ext4_evict_inode+0xaaf/0xea0 [ 224.143778][ T8043] ? _raw_spin_unlock+0x28/0x40 [ 224.148685][ T8043] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.154726][ T8043] ? do_raw_spin_unlock+0x121/0x230 [ 224.159979][ T8043] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.166004][ T8043] evict+0x4ca/0x8d0 [ 224.169973][ T8043] ? proc_nr_inodes+0x230/0x230 [ 224.174917][ T8043] ? do_raw_spin_unlock+0x121/0x230 [ 224.180162][ T8043] ? _raw_spin_unlock+0x28/0x40 [ 224.185143][ T8043] ? iput+0x706/0x920 [ 224.189340][ T8043] ext4_orphan_cleanup+0xbec/0x1420 [ 224.194638][ T8043] ? ext4_orphan_del+0xbf0/0xbf0 [ 224.199644][ T8043] ? ext4_register_li_request+0x183/0x940 [ 224.205630][ T8043] ? errseq_check_and_advance+0x66/0x120 [ 224.211414][ T8043] ext4_fill_super+0x5eea/0x67b0 [ 224.216925][ T8043] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 224.223430][ T8043] ? __might_sleep+0xe0/0xe0 [ 224.228083][ T8043] ? read_lock_is_recursive+0x20/0x20 [ 224.233807][ T8043] ? snprintf+0xe9/0x140 [ 224.238189][ T8043] ? down_read_killable+0x340/0x340 [ 224.243576][ T8043] ? setup_bdev_super+0x56b/0x660 [ 224.248638][ T8043] get_tree_bdev+0x3f3/0x520 [ 224.253350][ T8043] ? vfs_parse_fs_string+0x170/0x170 [ 224.258676][ T8043] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 224.264990][ T8043] ? setup_bdev_super+0x660/0x660 [ 224.270052][ T8043] ? apparmor_capable+0x137/0x1a0 [ 224.275165][ T8043] ? bpf_lsm_capable+0x9/0x10 [ 224.279990][ T8043] ? security_capable+0x89/0xb0 [ 224.285001][ T8043] vfs_get_tree+0x8c/0x280 [ 224.289847][ T8043] do_new_mount+0x24b/0xa40 [ 224.294689][ T8043] __se_sys_mount+0x2e7/0x3d0 [ 224.299432][ T8043] ? __x64_sys_mount+0xc0/0xc0 [ 224.304341][ T8043] ? lockdep_hardirqs_on+0x98/0x150 [ 224.309597][ T8043] ? __x64_sys_mount+0x20/0xc0 [ 224.315155][ T8043] do_syscall_64+0x55/0xa0 [ 224.319735][ T8043] ? clear_bhb_loop+0x40/0x90 [ 224.324657][ T8043] ? clear_bhb_loop+0x40/0x90 [ 224.329381][ T8043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.335373][ T8043] RIP: 0033:0x7fee2d19da8a [ 224.339919][ T8043] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.359699][ T8043] RSP: 002b:00007fee2e0e0e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.368310][ T8043] RAX: ffffffffffffffda RBX: 00007fee2e0e0ee0 RCX: 00007fee2d19da8a [ 224.376588][ T8043] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fee2e0e0ea0 [ 224.385008][ T8043] RBP: 0000200000000180 R08: 00007fee2e0e0ee0 R09: 0000000000000000 [ 224.393118][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 224.401219][ T8043] R13: 00007fee2e0e0ea0 R14: 000000000000047a R15: 00002000000001c0 [ 224.409422][ T8043] [ 224.412575][ T8043] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.419984][ T8043] CPU: 1 PID: 8043 Comm: syz.4.690 Not tainted syzkaller #0 [ 224.427327][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.437403][ T8043] Call Trace: [ 224.440697][ T8043] [ 224.443656][ T8043] dump_stack_lvl+0x18c/0x250 [ 224.448369][ T8043] ? show_regs_print_info+0x20/0x20 [ 224.453625][ T8043] ? load_image+0x420/0x420 [ 224.458169][ T8043] panic+0x2dc/0x730 [ 224.462095][ T8043] ? bpf_jit_dump+0xd0/0xd0 [ 224.466899][ T8043] __warn+0x2e0/0x470 [ 224.470901][ T8043] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 224.477191][ T8043] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 224.483203][ T8043] report_bug+0x2be/0x4f0 [ 224.487575][ T8043] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 224.493673][ T8043] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 224.499678][ T8043] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 224.505766][ T8043] handle_bug+0xcf/0x120 [ 224.510121][ T8043] exc_invalid_op+0x1a/0x50 [ 224.514762][ T8043] asm_exc_invalid_op+0x1a/0x20 [ 224.519639][ T8043] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 224.526252][ T8043] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 65 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 34 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 7e d5 3f 08 [ 224.546049][ T8043] RSP: 0018:ffffc900042cf2e0 EFLAGS: 00010246 [ 224.552133][ T8043] RAX: fde3ab97d74d4c00 RBX: 0000000000000000 RCX: 0000000000080000 [ 224.560290][ T8043] RDX: ffffc9000cb29000 RSI: 0000000000039168 RDI: 0000000000039169 [ 224.568366][ T8043] RBP: ffffc900042cf3d0 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 224.576356][ T8043] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 224.584342][ T8043] R13: ffff88805de1c0a8 R14: ffff88805de1beb0 R15: ffff88805de1bf00 [ 224.592460][ T8043] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 224.598238][ T8043] ? __ext4_journal_ensure_credits+0x30/0x450 [ 224.604476][ T8043] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 224.610518][ T8043] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 224.616181][ T8043] ? __ext4_journal_ensure_credits+0x450/0x450 [ 224.622369][ T8043] ext4_xattr_delete_inode+0xb3e/0xd10 [ 224.627875][ T8043] ? up_write+0x1c3/0x410 [ 224.632332][ T8043] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 224.638606][ T8043] ext4_evict_inode+0xaaf/0xea0 [ 224.643572][ T8043] ? _raw_spin_unlock+0x28/0x40 [ 224.648446][ T8043] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.654444][ T8043] ? do_raw_spin_unlock+0x121/0x230 [ 224.659663][ T8043] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 224.665574][ T8043] evict+0x4ca/0x8d0 [ 224.669669][ T8043] ? proc_nr_inodes+0x230/0x230 [ 224.674533][ T8043] ? do_raw_spin_unlock+0x121/0x230 [ 224.679855][ T8043] ? _raw_spin_unlock+0x28/0x40 [ 224.684892][ T8043] ? iput+0x706/0x920 [ 224.688893][ T8043] ext4_orphan_cleanup+0xbec/0x1420 [ 224.694114][ T8043] ? ext4_orphan_del+0xbf0/0xbf0 [ 224.699070][ T8043] ? ext4_register_li_request+0x183/0x940 [ 224.704971][ T8043] ? errseq_check_and_advance+0x66/0x120 [ 224.710625][ T8043] ext4_fill_super+0x5eea/0x67b0 [ 224.715633][ T8043] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 224.722094][ T8043] ? __might_sleep+0xe0/0xe0 [ 224.726711][ T8043] ? read_lock_is_recursive+0x20/0x20 [ 224.732104][ T8043] ? snprintf+0xe9/0x140 [ 224.736392][ T8043] ? down_read_killable+0x340/0x340 [ 224.741629][ T8043] ? setup_bdev_super+0x56b/0x660 [ 224.746680][ T8043] get_tree_bdev+0x3f3/0x520 [ 224.751298][ T8043] ? vfs_parse_fs_string+0x170/0x170 [ 224.756611][ T8043] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 224.762958][ T8043] ? setup_bdev_super+0x660/0x660 [ 224.767996][ T8043] ? apparmor_capable+0x137/0x1a0 [ 224.773141][ T8043] ? bpf_lsm_capable+0x9/0x10 [ 224.777835][ T8043] ? security_capable+0x89/0xb0 [ 224.782708][ T8043] vfs_get_tree+0x8c/0x280 [ 224.787229][ T8043] do_new_mount+0x24b/0xa40 [ 224.791753][ T8043] __se_sys_mount+0x2e7/0x3d0 [ 224.796519][ T8043] ? __x64_sys_mount+0xc0/0xc0 [ 224.801382][ T8043] ? lockdep_hardirqs_on+0x98/0x150 [ 224.806594][ T8043] ? __x64_sys_mount+0x20/0xc0 [ 224.811434][ T8043] do_syscall_64+0x55/0xa0 [ 224.815871][ T8043] ? clear_bhb_loop+0x40/0x90 [ 224.820565][ T8043] ? clear_bhb_loop+0x40/0x90 [ 224.825350][ T8043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.831357][ T8043] RIP: 0033:0x7fee2d19da8a [ 224.835877][ T8043] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.855952][ T8043] RSP: 002b:00007fee2e0e0e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.864483][ T8043] RAX: ffffffffffffffda RBX: 00007fee2e0e0ee0 RCX: 00007fee2d19da8a [ 224.872474][ T8043] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fee2e0e0ea0 [ 224.880566][ T8043] RBP: 0000200000000180 R08: 00007fee2e0e0ee0 R09: 0000000000000000 [ 224.888637][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 224.896738][ T8043] R13: 00007fee2e0e0ea0 R14: 000000000000047a R15: 00002000000001c0 [ 224.904836][ T8043] [ 224.907999][ T8043] Kernel Offset: disabled [ 224.912398][ T8043] Rebooting in 86400 seconds..