last executing test programs: 17m24.18040914s ago: executing program 3 (id=172): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x23, &(0x7f0000000300)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x10, 0x4, 0x4, 0x2, 0x9}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) syz_emit_ethernet(0xfffffdf5, 0x0, 0x0) 17m23.077111229s ago: executing program 3 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) 17m19.931116966s ago: executing program 3 (id=180): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfffffdf5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 17m18.236385488s ago: executing program 3 (id=183): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f08000000000700000000008500000061000000850000009e0000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000003c0)=0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1dba71875c1b21ee"], 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x40091) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400bb30ce00001a000100000000000000dc08db89000000000000000000000000000007000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) close_range(r0, r2, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) syz_clone(0x1104000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x10}, 0x14) 17m14.852026652s ago: executing program 3 (id=195): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/221, 0xdd}, {&(0x7f0000001900)=""/4030, 0xfbe}, {&(0x7f00000048c0)=""/4117, 0x1015}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000006c0)=""/131, 0x83}], 0x5}, 0x10102) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17m7.964900197s ago: executing program 3 (id=215): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61000005000000fffe000000"], 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000340), 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x40}, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 17m6.814378478s ago: executing program 32 (id=215): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61000005000000fffe000000"], 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000340), 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x40}, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 11m31.917037587s ago: executing program 2 (id=1247): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x32080, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, 0x0) 11m31.751815597s ago: executing program 2 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 11m30.785022121s ago: executing program 2 (id=1251): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4428, &(0x7f000000c300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xc6000) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0xee6, &(0x7f0000001ec0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$rfkill(r3, &(0x7f0000000100)={0xcd, 0x4, 0x1, 0x1, 0x1}, 0x8) 11m29.702141594s ago: executing program 2 (id=1258): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40, 0x0) 11m29.464744301s ago: executing program 2 (id=1261): socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0xfffffff7]}}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) 11m28.52491763s ago: executing program 2 (id=1262): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x7, 0x0, &(0x7f0000000080)="63eced8e55dc3f", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 11m28.046283862s ago: executing program 33 (id=1262): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x7, 0x0, &(0x7f0000000080)="63eced8e55dc3f", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 10m40.777183957s ago: executing program 1 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 10m40.700651003s ago: executing program 1 (id=1410): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17a) 10m40.067924858s ago: executing program 1 (id=1411): syz_io_uring_setup(0x5a95, &(0x7f0000000140)={0x0, 0xb52f, 0x20000, 0x1, 0x2b7}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, 0x0, 0x0) 10m38.567626435s ago: executing program 1 (id=1417): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) 10m38.259986559s ago: executing program 1 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 10m34.984051732s ago: executing program 1 (id=1424): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 10m34.350804547s ago: executing program 34 (id=1424): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 10m10.14439537s ago: executing program 5 (id=1493): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'nr0\x00', 0x2}, 0x18) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200210325bd70000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10m8.064760681s ago: executing program 5 (id=1499): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 10m1.916063442s ago: executing program 5 (id=1510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x24040004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd, 0x0, 0x8000000000000000}, {0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffc}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 10m1.873088884s ago: executing program 5 (id=1511): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = getpid() write$cgroup_pid(r3, &(0x7f0000000100)=r5, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000800)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d75746681d1beb9c96824db02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c06c0a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3600ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYBLOB="dd7f3fe819c6c618f889b6a95049c3cd358ddc659a0d0bcb550a7da557b96adf1a28038e8066eb716a8ec2b63af2b0be713abfd6d451f3df862f82b7a1f39b23318e364961c33052bd08747ffa504ce4c626233fc745711bf2f26953c7f4d532915c3b006e941f0e48adc81fabd3389faee0910d43b17f2f5316bcc252d560db4cef282d2597e7c0d0cf8e87581e66869255ca9ea891d3414d9599595e2ee69c24f30adc3244c538291aa47e", @ANYRES8, @ANYRES16, @ANYRES8, @ANYRES32, @ANYRES8, @ANYBLOB="1d2dce88e861937322d751d56504262fbcca4a5241455bce980c6fcd834e6cffaa9839d68fdeed6fd70c3f166d0905bfe97fb71d73970eb847cddec885f46a41a6afd778dbab6602a0d5fb8a4a66091a7b3e7d2af5305d88f89ea2e0aded4eca0f49898b57c9b60de9533654b7077db404f410746d0ee846dae078c0ab8af2058ab59fa3eb2aad7f9662b36561ee2e3c19", @ANYRES32], 0x1, 0x343, &(0x7f0000000480)="$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") 10m0.677456246s ago: executing program 5 (id=1515): unshare(0x6020400) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 10m0.483428631s ago: executing program 5 (id=1516): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 9m43.735925902s ago: executing program 35 (id=1516): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 2.799646804s ago: executing program 4 (id=4984): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) unshare(0xe040400) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 2.481513758s ago: executing program 6 (id=4986): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400000011"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.252073818s ago: executing program 6 (id=4989): socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 2.016312856s ago: executing program 6 (id=4991): unshare(0x22020600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x200000006c832, 0xffffffffffffffff, 0x80000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) 2.014058336s ago: executing program 7 (id=4992): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f00000011c0)=""/168, 0xa8}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f0000001280)=""/41, 0x29}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002700)=""/36, 0x24}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000002440)=""/233, 0xe9}, {&(0x7f0000002540)=""/210, 0xd2}], 0x9}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.732007656s ago: executing program 7 (id=4994): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000040)=""/64, 0x40) 1.731340566s ago: executing program 6 (id=4995): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.696484749s ago: executing program 4 (id=4996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r4, 0x0, 0x23, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000a31e75d7eb6aae39f732c440e023e41bd348ab365728cea236dd60d18c044d783c4e16ed8e31e80a14c2831ba33800799703e6b4c64d9d22dd360e2097900bc5c293a50ded5b4ed4774eb83ba43e9ba9d556633fa137af22c6968ce434ab86b595d045ca0bde09a75b", @ANYRES16, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.695444049s ago: executing program 0 (id=4997): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) 1.493955294s ago: executing program 0 (id=4998): socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc00", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.280249146s ago: executing program 6 (id=4999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4040) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6}, 0xfffffffffffffdd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.219259785s ago: executing program 4 (id=5000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) 1.218099575s ago: executing program 0 (id=5001): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 952.452428ms ago: executing program 4 (id=5002): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002840)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b45"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) 909.499331ms ago: executing program 4 (id=5003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff2ae3d84a31dbdf25030000"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 753.372593ms ago: executing program 4 (id=5004): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) unshare(0xe040400) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) socket$nl_route(0x10, 0x3, 0x0) 655.980026ms ago: executing program 7 (id=5005): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001180)="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", 0x37c}], 0x1}}], 0x1, 0x20000) 626.875891ms ago: executing program 0 (id=5006): unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 506.212849ms ago: executing program 7 (id=5007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000000108510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 397.44375ms ago: executing program 0 (id=5008): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc5) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 396.28767ms ago: executing program 6 (id=5009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x407, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) 263.531077ms ago: executing program 7 (id=5010): bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) 177.419631ms ago: executing program 0 (id=5011): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 0s ago: executing program 7 (id=5012): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x15944, 0xc) kernel console output (not intermixed with test programs): n, defaulting to 1000 [ 767.405021][T14598] lo speed is unknown, defaulting to 1000 [ 767.418424][T14598] lo speed is unknown, defaulting to 1000 [ 767.503205][T14598] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 767.838262][T14598] lo speed is unknown, defaulting to 1000 [ 767.853796][T14598] lo speed is unknown, defaulting to 1000 [ 767.869897][T14598] lo speed is unknown, defaulting to 1000 [ 767.886390][T14598] lo speed is unknown, defaulting to 1000 [ 768.330246][T14611] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 769.229136][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 769.302471][ T28] audit: type=1326 audit(1772134851.171:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14636 comm="syz.6.2548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x0 [ 771.033016][T14668] syz.4.2555: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 771.063609][T14668] CPU: 0 PID: 14668 Comm: syz.4.2555 Not tainted syzkaller #0 [ 771.071125][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 771.081208][T14668] Call Trace: [ 771.084501][T14668] [ 771.087449][T14668] dump_stack_lvl+0x18c/0x250 [ 771.092336][T14668] ? show_regs_print_info+0x20/0x20 [ 771.097573][T14668] ? load_image+0x400/0x400 [ 771.102119][T14668] ? __rcu_read_unlock+0x7c/0xd0 [ 771.107077][T14668] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 771.113493][T14668] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 771.120002][T14668] warn_alloc+0x246/0x340 [ 771.124335][T14668] ? zone_watermark_ok_safe+0x230/0x230 [ 771.129891][T14668] ? _raw_spin_unlock+0x28/0x40 [ 771.134750][T14668] __vmalloc_node_range+0x662/0x1330 [ 771.140037][T14668] ? __asan_memset+0x22/0x40 [ 771.144646][T14668] ? free_vm_area+0x50/0x50 [ 771.149151][T14668] ? kvmalloc_node+0x70/0x180 [ 771.153822][T14668] ? rcu_is_watching+0x15/0xb0 [ 771.158597][T14668] ? kvmalloc_node+0x70/0x180 [ 771.163367][T14668] ? trace_kmalloc+0x1f/0x90 [ 771.167985][T14668] kvmalloc_node+0x13f/0x180 [ 771.172589][T14668] ? translate_table+0x192/0x2090 [ 771.177618][T14668] translate_table+0x192/0x2090 [ 771.182496][T14668] ? ip6t_register_table+0x7e0/0x7e0 [ 771.187777][T14668] ? __might_fault+0xaa/0x120 [ 771.192470][T14668] ? __lock_acquire+0x7d40/0x7d40 [ 771.197492][T14668] ? __virt_addr_valid+0x18c/0x540 [ 771.202605][T14668] ? __might_fault+0xaa/0x120 [ 771.207274][T14668] ? __might_fault+0xc6/0x120 [ 771.211941][T14668] ? __might_fault+0xaa/0x120 [ 771.216614][T14668] do_ip6t_set_ctl+0x9fc/0xe10 [ 771.221474][T14668] ? ip6t_unregister_table_exit+0x230/0x230 [ 771.227366][T14668] ? __lock_acquire+0x7d40/0x7d40 [ 771.232393][T14668] ? rcu_is_watching+0x15/0xb0 [ 771.237259][T14668] ? trace_contention_end+0x39/0xe0 [ 771.242457][T14668] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 771.248091][T14668] ? mutex_unlock+0x10/0x10 [ 771.252594][T14668] ? mutex_lock_nested+0x20/0x20 [ 771.257621][T14668] nf_setsockopt+0x263/0x280 [ 771.262219][T14668] ? sock_common_recvmsg+0x190/0x190 [ 771.267505][T14668] smc_setsockopt+0x243/0xac0 [ 771.272220][T14668] ? smc_shutdown+0x9b0/0x9b0 [ 771.276897][T14668] ? __fget_files+0x28/0x4b0 [ 771.281488][T14668] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 771.287047][T14668] ? security_socket_setsockopt+0x7e/0xa0 [ 771.292784][T14668] ? smc_shutdown+0x9b0/0x9b0 [ 771.297475][T14668] do_sock_setsockopt+0x175/0x1a0 [ 771.302512][T14668] ? __fdget+0x180/0x210 [ 771.306851][T14668] __x64_sys_setsockopt+0x182/0x200 [ 771.312065][T14668] do_syscall_64+0x55/0xa0 [ 771.316495][T14668] ? clear_bhb_loop+0x40/0x90 [ 771.321259][T14668] ? clear_bhb_loop+0x40/0x90 [ 771.326193][T14668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.332107][T14668] RIP: 0033:0x7f1f5ef9c799 [ 771.336519][T14668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.356239][T14668] RSP: 002b:00007f1f5ff36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 771.364682][T14668] RAX: ffffffffffffffda RBX: 00007f1f5f215fa0 RCX: 00007f1f5ef9c799 [ 771.372736][T14668] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 771.380792][T14668] RBP: 00007f1f5f032bd9 R08: 0000000000000330 R09: 0000000000000000 [ 771.388758][T14668] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.396724][T14668] R13: 00007f1f5f216038 R14: 00007f1f5f215fa0 R15: 00007ffc350c0fa8 [ 771.404706][T14668] [ 771.422974][T14668] Mem-Info: [ 771.427426][T14668] active_anon:49784 inactive_anon:0 isolated_anon:0 [ 771.427426][T14668] active_file:14482 inactive_file:40659 isolated_file:0 [ 771.427426][T14668] unevictable:768 dirty:92 writeback:0 [ 771.427426][T14668] slab_reclaimable:11145 slab_unreclaimable:95069 [ 771.427426][T14668] mapped:24382 shmem:38153 pagetables:823 [ 771.427426][T14668] sec_pagetables:0 bounce:0 [ 771.427426][T14668] kernel_misc_reclaimable:0 [ 771.427426][T14668] free:1286881 free_pcp:8187 free_cma:0 [ 771.509231][T14668] Node 0 active_anon:196336kB inactive_anon:0kB active_file:57928kB inactive_file:162436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97528kB dirty:368kB writeback:0kB shmem:149376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11284kB pagetables:3192kB sec_pagetables:0kB all_unreclaimable? no [ 771.640531][T14668] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 771.685222][T14668] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.773531][T14668] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 771.797729][T14668] Node 0 DMA32 free:1240904kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:183496kB inactive_anon:0kB active_file:57928kB inactive_file:161604kB unevictable:1536kB writepending:368kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:28392kB local_pcp:14952kB free_cma:0kB [ 771.884640][T14668] lowmem_reserve[]: 0 0 0 0 0 [ 771.895740][T14668] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.968278][T14668] lowmem_reserve[]: 0 0 0 0 0 [ 772.020156][T14668] Node 1 Normal free:3891260kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21292kB local_pcp:14088kB free_cma:0kB [ 772.069673][T14668] lowmem_reserve[]: 0 0 0 0 0 [ 772.074545][T14668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 772.098450][T14668] Node 0 DMA32: 8*4kB (UME) 6*8kB (UE) 17*16kB (UE) 50*32kB (UME) 75*64kB (M) 52*128kB (UME) 35*256kB (UM) 43*512kB (UM) 9*1024kB (UME) 7*2048kB (UME) 286*4096kB (UM) = 1239392kB [ 772.117436][T14711] siw: device registration error -23 [ 772.141239][T14668] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 772.177528][T14668] Node 1 Normal: 109*4kB (UME) 23*8kB (UME) 15*16kB (UME) 25*32kB (UME) 5*64kB (UE) 5*128kB (UME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3891260kB [ 772.214708][T14668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 772.242437][T14668] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 772.290051][T14668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 772.316640][T14668] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 772.339425][T14668] 92307 total pagecache pages [ 772.344618][T14668] 0 pages in swap cache [ 772.349392][T14668] Free swap = 124660kB [ 772.354126][T14668] Total swap = 124996kB [ 772.362362][T14725] netlink: 'syz.6.2568': attribute type 10 has an invalid length. [ 772.388604][T14668] 2097051 pages RAM [ 772.392649][T14668] 0 pages HighMem/MovableOnly [ 772.397362][T14668] 416922 pages reserved [ 772.411101][T14668] 0 pages cma reserved [ 775.236926][T14775] siw: device registration error -23 [ 775.293989][T14773] siw: device registration error -23 [ 776.422795][T14818] siw: device registration error -23 [ 777.640946][T14841] netlink: 'syz.0.2601': attribute type 4 has an invalid length. [ 777.649173][T14841] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2601'. [ 778.583347][T14861] siw: device registration error -23 [ 778.642362][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 779.406170][T14868] vlan2: entered allmulticast mode [ 779.464877][T14868] syz_tun: entered allmulticast mode [ 780.491839][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.503791][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.513005][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.521150][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.532552][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 780.540149][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.705962][T14895] lo speed is unknown, defaulting to 1000 [ 781.526056][T14895] chnl_net:caif_netlink_parms(): no params data found [ 781.985635][T14895] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.029803][T14895] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.041243][T14895] bridge_slave_0: entered allmulticast mode [ 782.048813][T14895] bridge_slave_0: entered promiscuous mode [ 782.071737][T14895] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.082907][T14895] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.093686][T14895] bridge_slave_1: entered allmulticast mode [ 782.108370][T14895] bridge_slave_1: entered promiscuous mode [ 782.186742][T14895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.216498][T14895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.285860][T14895] team0: Port device team_slave_0 added [ 782.388201][T14895] team0: Port device team_slave_1 added [ 782.412020][T14929] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 782.596721][T14895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.603714][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.670257][T14895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.703892][ T5784] Bluetooth: hci2: command tx timeout [ 782.711114][T14895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.718618][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.745921][T14895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.176182][T14895] hsr_slave_0: entered promiscuous mode [ 783.183869][T14895] hsr_slave_1: entered promiscuous mode [ 783.254687][T14945] siw: device registration error -23 [ 784.927627][ T5784] Bluetooth: hci2: command tx timeout [ 785.145703][ T3552] hsr_slave_0: left promiscuous mode [ 785.171052][ T3552] hsr_slave_1: left promiscuous mode [ 785.182318][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.206042][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.214333][ T3552] bridge_slave_1: left allmulticast mode [ 785.223798][ T3552] bridge_slave_1: left promiscuous mode [ 785.236384][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.255344][ T3552] bridge_slave_0: left allmulticast mode [ 785.268213][ T3552] bridge_slave_0: left promiscuous mode [ 785.289589][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.169090][T15004] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2635'. [ 787.150909][ T5784] Bluetooth: hci2: command tx timeout [ 787.496753][T15009] siw: device registration error -23 [ 788.569220][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 788.636292][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 788.714596][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.783025][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.823060][ T3552] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 789.288174][ T3552] bond0 (unregistering): Released all slaves [ 789.374512][ T5784] Bluetooth: hci2: command tx timeout [ 789.393018][T15004] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2635'. [ 789.402406][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 789.674456][T14895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.786271][T14895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 789.822041][T14895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 789.838968][T14895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 790.876540][T14895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.916120][T14895] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.959463][T14895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 790.975372][T14895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.999487][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.006663][T12609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.065552][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.072830][T12609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.660046][T14895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.982571][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 792.266113][T14895] veth0_vlan: entered promiscuous mode [ 792.304610][T14895] veth1_vlan: entered promiscuous mode [ 792.350802][T14895] veth0_macvtap: entered promiscuous mode [ 792.393054][T14895] veth1_macvtap: entered promiscuous mode [ 792.456090][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.483072][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.517702][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.554966][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.572749][T14895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.622500][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.658163][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.689062][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.720782][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.747137][T14895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.781989][T14895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.821071][T14895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.830477][T14895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.856962][T14895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.021527][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2660'. [ 793.305854][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.384994][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.464704][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.503433][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.740794][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 794.030657][T15139] loop4: detected capacity change from 0 to 1024 [ 794.108018][T15139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.930450][ T28] audit: type=1800 audit(1772134875.136:74): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2665" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 794.965644][ T28] audit: type=1800 audit(1772134875.164:75): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2665" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 795.065231][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2669'. [ 795.092131][T14895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.374882][T15190] loop4: detected capacity change from 0 to 512 [ 796.490610][T15190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.505164][T15190] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.522733][T15190] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.2678: corrupted xattr block 33: invalid checksum [ 796.735389][T14895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.572832][T15253] loop4: detected capacity change from 0 to 512 [ 799.586775][T15253] FAT-fs (loop4): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 801.939659][T15294] lo speed is unknown, defaulting to 1000 [ 801.945511][T15294] lo speed is unknown, defaulting to 1000 [ 801.953396][T15294] lo speed is unknown, defaulting to 1000 [ 801.971695][T15294] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 801.997968][T15294] lo speed is unknown, defaulting to 1000 [ 802.005376][T15294] lo speed is unknown, defaulting to 1000 [ 802.012636][T15294] lo speed is unknown, defaulting to 1000 [ 802.019806][T15294] lo speed is unknown, defaulting to 1000 [ 803.912840][T15327] loop4: detected capacity change from 0 to 512 [ 803.930144][T15327] EXT4-fs: Ignoring removed orlov option [ 803.978212][T15327] EXT4-fs (loop4): 1 truncate cleaned up [ 804.011432][T15327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.154148][T14895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.443762][T15369] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 807.643878][T15392] siw: device registration error -23 [ 807.689056][T15392] loop4: detected capacity change from 0 to 512 [ 809.616440][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2738'. [ 809.736216][T15417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.767578][T15422] loop4: detected capacity change from 0 to 256 [ 809.809788][T15423] bond_slave_0: entered promiscuous mode [ 809.816090][T15423] bond_slave_1: entered promiscuous mode [ 809.863142][ T28] audit: type=1804 audit(1772134889.111:76): pid=15422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2740" name="/newroot/20/file0/file0" dev="loop4" ino=1048637 res=1 errno=0 [ 809.914683][T15423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 809.988958][T15423] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 810.041329][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2739'. [ 810.054829][T15429] (null): rxe_set_mtu: Set mtu to 1024 [ 810.097486][T15429] rdma_rxe: rxe_newlink: failed to add bond0 [ 810.675603][T15451] netlink: 'syz.4.2749': attribute type 1 has an invalid length. [ 810.691167][T15451] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2749'. [ 810.821058][T15451] NCSI netlink: No device for ifindex 0 [ 811.476135][T15456] loop4: detected capacity change from 0 to 1024 [ 811.513525][T15456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 811.537856][T15456] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.591370][T15456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2750: bg 0: block 112: padding at end of block bitmap is not set [ 811.607828][T15456] EXT4-fs error (device loop4): ext4_free_blocks:6692: comm syz.4.2750: Freeing blocks not in datazone - block = 0, count = 16 [ 812.472111][T14895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 813.522181][T15496] autofs4:pid:15496:autofs_fill_super: called with bogus options [ 813.805705][T15507] bridge0: port 1(syz_tun) entered blocking state [ 813.835762][T15507] bridge0: port 1(syz_tun) entered disabled state [ 813.844178][T15507] syz_tun: entered allmulticast mode [ 813.891135][T15507] syz_tun: entered promiscuous mode [ 813.911058][T15514] netlink: 'syz.7.2770': attribute type 3 has an invalid length. [ 813.920537][T15514] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2770'. [ 813.939518][T15507] bridge0: port 1(syz_tun) entered blocking state [ 813.946845][T15507] bridge0: port 1(syz_tun) entered forwarding state [ 815.662285][T15518] loop4: detected capacity change from 0 to 40427 [ 815.687170][T15518] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 815.735180][T15518] F2FS-fs (loop4): invalid crc value [ 815.753985][T15518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 815.870804][T15518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 816.783132][T15563] netlink: 'syz.4.2786': attribute type 10 has an invalid length. [ 816.804966][T15563] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.827340][T15563] bond0: (slave team0): Enslaving as an active interface with an up link [ 818.126244][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2798'. [ 828.790875][T15746] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2855'. [ 828.803436][T15746] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2855'. [ 830.619726][T15770] tipc: Enabling of bearer rejected, failed to enable media [ 831.833114][T15788] SET target dimension over the limit! [ 833.076523][T15802] lo speed is unknown, defaulting to 1000 [ 834.253639][T15834] SET target dimension over the limit! [ 837.384025][T15872] lo speed is unknown, defaulting to 1000 [ 837.640184][T15878] siw: device registration error -23 [ 839.409866][T15903] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2908'. [ 846.356384][T15980] siw: device registration error -23 [ 846.450891][T15981] overlayfs: failed to clone upperpath [ 847.640322][T15990] fuse: Bad value for 'fd' [ 848.875810][T16001] overlayfs: missing 'lowerdir' [ 851.466903][T16013] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2936'. [ 852.555971][T16020] siw: device registration error -23 [ 854.958925][T16033] lo speed is unknown, defaulting to 1000 [ 855.931060][ T28] audit: type=1326 audit(1772134932.176:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.035608][ T28] audit: type=1326 audit(1772134932.176:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.144150][ T28] audit: type=1326 audit(1772134932.186:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.175197][ T28] audit: type=1326 audit(1772134932.186:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.198758][ T28] audit: type=1326 audit(1772134932.223:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.222247][ T28] audit: type=1326 audit(1772134932.223:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.250674][T16039] 9pnet_fd: Insufficient options for proto=fd [ 856.272523][ T28] audit: type=1326 audit(1772134932.223:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 856.507045][T16053] 9pnet_fd: Insufficient options for proto=fd [ 856.672327][T16047] xt_CT: No such helper "snmp_trap" [ 856.994878][T16051] xt_CT: No such helper "snmp_trap" [ 857.088887][ T28] audit: type=1326 audit(1772134932.233:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 857.196164][ T28] audit: type=1326 audit(1772134932.233:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 857.225730][ T28] audit: type=1326 audit(1772134932.233:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16044 comm="syz.6.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147939c799 code=0x7ffc0000 [ 858.592768][T16073] siw: device registration error -23 [ 859.430504][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 861.918758][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 862.595371][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2968'. [ 862.651592][T16098] x_tables: duplicate underflow at hook 3 [ 862.949909][T16112] siw: device registration error -23 [ 863.053301][T16117] overlayfs: failed to resolve './bus': -2 [ 863.804585][T16129] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2976'. [ 863.814161][T16129] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2976'. [ 865.530310][T16147] netlink: 'syz.7.2983': attribute type 10 has an invalid length. [ 865.615826][T16147] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.662381][T16147] bond0: (slave team0): Enslaving as an active interface with an up link [ 865.956448][T16153] xt_hashlimit: size too large, truncated to 1048576 [ 866.322808][T16160] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2987'. [ 866.332452][T16160] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2987'. [ 867.542786][T16170] siw: device registration error -23 [ 869.784873][T16197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3000'. [ 869.991148][T16200] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2998'. [ 870.510110][T16200] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2998'. [ 872.363650][T16214] netlink: 'syz.6.3003': attribute type 2 has an invalid length. [ 872.371760][T16214] netlink: 'syz.6.3003': attribute type 1 has an invalid length. [ 872.381908][T16214] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3003'. [ 875.392894][T16233] siw: device registration error -23 [ 875.469442][T16241] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3010'. [ 875.478976][T16241] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3010'. [ 876.693854][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3013'. [ 877.277838][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 878.530523][T16276] siw: device registration error -23 [ 878.731002][T16281] SET target dimension over the limit! [ 879.939155][T16287] C: renamed from team_slave_0 (while UP) [ 879.954961][T16287] netlink: 'syz.7.3029': attribute type 4 has an invalid length. [ 879.971077][T16289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3031'. [ 879.974098][T16287] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3029'. [ 879.997746][T16287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 880.018090][T16289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3031'. [ 880.039350][T16294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3031'. [ 880.082004][T16289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3031'. [ 880.550529][T16306] overlayfs: failed to clone upperpath [ 880.558533][T16310] SET target dimension over the limit! [ 882.903390][T16308] siw: device registration error -23 [ 883.900332][T16325] netlink: 'syz.6.3043': attribute type 14 has an invalid length. [ 883.932929][T16325] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3043'. [ 884.240498][T16335] siw: device registration error -23 [ 884.772247][T16349] overlayfs: failed to clone upperpath [ 885.425854][T16356] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3051'. [ 885.435463][T16356] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3051'. [ 886.281483][T16373] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3062'. [ 888.280136][T16423] overlayfs: failed to clone upperpath [ 888.541847][T16429] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3073'. [ 888.551078][T16429] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3073'. [ 889.029196][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 889.281921][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 889.469526][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 892.495308][T16527] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3113'. [ 892.505099][T16527] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3113'. [ 893.842738][T16559] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3126'. [ 893.852342][T16559] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3126'. [ 894.622673][T16570] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3135'. [ 894.799105][T16582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3139'. [ 894.816293][T16582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3139'. [ 895.600185][T16621] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3156'. [ 896.535738][T16664] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3173'. [ 897.602812][T16701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3186'. [ 897.636985][T16700] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3184'. [ 897.646658][T16700] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3184'. [ 897.709623][T16704] netlink: 'syz.7.3187': attribute type 29 has an invalid length. [ 897.719029][T16704] netlink: 'syz.7.3187': attribute type 29 has an invalid length. [ 897.751530][T16704] netlink: 'syz.7.3187': attribute type 29 has an invalid length. [ 898.175910][T16718] netlink: 'syz.7.3192': attribute type 22 has an invalid length. [ 899.492426][T16785] siw: device registration error -23 [ 901.701320][T16819] siw: device registration error -23 [ 902.808838][T16835] C: renamed from team_slave_0 (while UP) [ 902.820997][T16835] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 902.829550][T16835] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3243'. [ 902.839335][T16835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 903.040232][T16839] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3244'. [ 903.055242][T16841] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3245'. [ 903.738880][T16866] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3253'. [ 903.889908][T16871] netlink: 'syz.7.3255': attribute type 22 has an invalid length. [ 903.973301][T16874] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3257'. [ 906.783653][T16945] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3282'. [ 906.792972][T16945] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3282'. [ 907.032186][T16962] netlink: 'syz.0.3292': attribute type 21 has an invalid length. [ 907.040451][T16962] netlink: 'syz.0.3292': attribute type 6 has an invalid length. [ 908.811653][T17001] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3304'. [ 908.821030][T17001] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3304'. [ 910.317160][T17049] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3325'. [ 910.326805][T17049] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3325'. [ 910.570848][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 910.621762][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 911.286433][T17086] SET target dimension over the limit! [ 911.391300][T17092] siw: device registration error -23 [ 914.160307][T17152] overlayfs: failed to clone upperpath [ 916.466288][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 917.169806][T17192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.517569][T17201] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3385'. [ 917.572082][T17192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 917.595694][T17201] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3385'. [ 918.502714][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 918.779812][T17242] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3397'. [ 919.890547][T17242] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3397'. [ 920.238111][T17250] tipc: Enabling of bearer rejected, failed to enable media [ 921.440135][T17309] tipc: Enabling of bearer rejected, failed to enable media [ 921.546065][T17303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3422'. [ 921.815597][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'. [ 923.207294][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3450'. [ 923.995628][T17413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3461'. [ 924.363096][T17421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.450663][T17424] IPv6: NLM_F_REPLACE set, but no existing node found! [ 924.897256][T17443] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3471'. [ 924.945682][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3472'. [ 924.962060][T17446] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 925.107996][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.183752][T17458] SET target dimension over the limit! [ 925.494244][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3478'. [ 925.503932][T17460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.599408][T17460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.212957][T17466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3481'. [ 928.190613][T17511] SET target dimension over the limit! [ 930.199634][T17550] siw: device registration error -23 [ 930.769837][T17561] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3509'. [ 930.804103][T17561] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3509'. [ 932.412998][T17580] SET target dimension over the limit! [ 932.426088][T17581] tipc: Enabling of bearer rejected, failed to enable media [ 932.984433][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3518'. [ 933.038410][T17583] siw: device registration error -23 [ 934.625520][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3526'. [ 935.060947][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3532'. [ 935.084298][T17625] (null): rxe_set_mtu: Set mtu to 1024 [ 936.104719][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.129009][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.151697][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.161416][T17644] SET target dimension over the limit! [ 936.646359][T17625] infiniband syz2: set down [ 936.652743][ T5772] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.661335][T17625] infiniband syz2: added ip6_vti0 [ 936.668615][T17625] syz2: rxe_create_cq: returned err = -12 [ 936.675598][T17625] infiniband syz2: Couldn't create ib_mad CQ [ 936.683441][T17625] infiniband syz2: Couldn't open port 1 [ 936.746063][T17625] RDS/IB: syz2: added [ 936.758733][T17625] smc: adding ib device syz2 with port count 1 [ 936.773856][T17625] smc: ib device syz2 port 1 has pnetid [ 936.785480][ T5772] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.802700][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.048466][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.097727][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3543'. [ 937.329036][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.592550][T17625] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.849617][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 937.849633][ T28] audit: type=1107 audit(1772135008.832:152): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ç·Hbãh9ïð«óiYcHУñãÂ7a»q–IÛã'{ÛgkYì·VE¯Ì]}ïöʘ ¢>«/”ÖmôP^fè#ÜF+ýa[ô-œ]W°(' [ 939.996962][T17732] siw: device registration error -23 [ 941.075803][T17747] netlink: 'syz.6.3577': attribute type 9 has an invalid length. [ 942.466127][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3586'. [ 942.864853][T17796] (null): rxe_set_mtu: Set mtu to 1024 [ 942.873926][T17796] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 943.023794][ T5813] lo speed is unknown, defaulting to 1000 [ 943.080776][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 943.349977][T17820] SET target dimension over the limit! [ 944.342352][T17844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.357095][T17844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.371918][T17844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.383945][T17844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.422907][T17844] ipvlan2: entered allmulticast mode [ 944.444180][T17844] batadv_slave_1: entered allmulticast mode [ 944.480415][T17844] batman_adv: batadv0: Adding interface: ipvlan2 [ 944.501952][T17844] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.546494][T17844] batman_adv: batadv0: Interface activated: ipvlan2 [ 945.162112][T17869] netlink: 'syz.0.3621': attribute type 10 has an invalid length. [ 945.253723][T17869] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 945.277609][T17869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 945.356096][T17880] hsr0: VLAN not yet supported [ 945.374832][T17882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3624'. [ 945.503548][T17885] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3626'. [ 946.067148][T17907] overlayfs: failed to clone upperpath [ 946.278211][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3640'. [ 946.456957][T17921] siw: device registration error -23 [ 947.309572][T17932] fuse: Bad value for 'fd' [ 948.159275][T17948] siw: device registration error -23 [ 949.268505][T18015] UBIFS error (pid: 18015): cannot open "./file0", error -22 [ 949.518628][T18027] syz2: rxe_newlink: already configured on ip6_vti0 [ 949.990340][T18049] syz2: rxe_newlink: already configured on ip6_vti0 [ 950.083973][T18050] siw: device registration error -23 [ 951.423056][T18076] overlayfs: failed to clone upperpath [ 954.011690][T18087] siw: device registration error -23 [ 957.366041][T18166] fuse: Bad value for 'fd' [ 957.452948][T18165] overlayfs: failed to clone upperpath [ 958.392890][ T5784] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 960.124224][T18190] overlayfs: failed to clone upperpath [ 961.023259][T18203] (null): rxe_set_mtu: Set mtu to 1024 [ 961.029321][T18203] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 961.719262][T18229] UBIFS error (pid: 18229): cannot open "./file0", error -22 [ 962.659912][T18248] UBIFS error (pid: 18248): cannot open "./file0", error -22 [ 963.812736][T18250] overlayfs: failed to clone upperpath [ 965.140419][T18254] siw: device registration error -23 [ 966.365132][T18279] UBIFS error (pid: 18279): cannot open "./file0", error -22 [ 966.708848][T18294] SET target dimension over the limit! [ 968.675911][T18315] UBIFS error (pid: 18315): cannot open "./file0", error -22 [ 969.306927][T18326] overlayfs: failed to clone upperpath [ 972.275878][T18335] SET target dimension over the limit! [ 973.021134][T18343] UBIFS error (pid: 18343): cannot open "./file0", error -22 [ 973.150890][T18350] UBIFS error (pid: 18350): cannot open "./file0", error -22 [ 973.861210][T18372] SET target dimension over the limit! [ 974.657206][T18385] UBIFS error (pid: 18385): cannot open "./file0", error -22 [ 975.107591][T18391] overlayfs: failed to clone upperpath [ 978.007350][ T5784] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 979.394193][T18430] overlayfs: failed to clone upperpath [ 980.172675][ T5784] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 983.883953][T18518] (null): rxe_set_mtu: Set mtu to 512 [ 983.890020][T18518] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 984.264502][T18410] Set syz1 is full, maxelem 65536 reached [ 984.590919][T18537] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3870'. [ 984.619238][T18537] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3870'. [ 984.954940][T18543] SET target dimension over the limit! [ 985.218832][T18545] (null): rxe_set_mtu: Set mtu to 512 [ 985.224620][T18545] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 986.598157][T18567] overlayfs: failed to clone upperpath [ 989.216883][T18582] overlayfs: failed to clone upperpath [ 989.498239][T18596] (null): rxe_set_mtu: Set mtu to 512 [ 989.509146][T18596] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 989.982558][T17155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 989.996680][T17155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 990.009871][T17155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 990.032527][T17155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 990.048232][T17155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 990.055991][T17155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 990.111894][T10848] bridge0: port 1(syz_tun) entered disabled state [ 990.161862][T10848] syz_tun (unregistering): left allmulticast mode [ 990.169211][T10848] syz_tun (unregistering): left promiscuous mode [ 990.175782][T10848] bridge0: port 1(syz_tun) entered disabled state [ 990.193294][T18600] netlink: 'syz.4.3895': attribute type 10 has an invalid length. [ 990.216084][T18600] batman_adv: batadv0: Adding interface: netdevsim0 [ 990.227232][T18600] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.262946][T18600] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 990.295834][T18601] lo speed is unknown, defaulting to 1000 [ 990.304091][T18601] ip6_vti0 speed is unknown, defaulting to 1000 [ 990.533083][T12610] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.676417][T12610] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.751597][T18622] UBIFS error (pid: 18622): cannot open "./file0", error -22 [ 990.781426][T12610] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.803941][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.815672][T18617] netlink: 'syz.4.3901': attribute type 4 has an invalid length. [ 990.874381][T12610] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.102971][T18601] chnl_net:caif_netlink_parms(): no params data found [ 991.566180][T18601] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.573355][T18601] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.595725][T18601] bridge_slave_0: entered allmulticast mode [ 991.616129][T18601] bridge_slave_0: entered promiscuous mode [ 991.632719][T18601] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.651949][T18601] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.659382][T18601] bridge_slave_1: entered allmulticast mode [ 991.677887][T18601] bridge_slave_1: entered promiscuous mode [ 991.874779][T18601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.924482][T18601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.150719][T18601] team0: Port device team_slave_0 added [ 992.180392][T18601] team0: Port device team_slave_1 added [ 992.239576][T17155] Bluetooth: hci1: command tx timeout [ 992.317121][T18601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.324200][T18601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.351844][T18601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.432026][T18665] netlink: 'syz.7.3912': attribute type 10 has an invalid length. [ 992.440590][T11129] IPVS: starting estimator thread 0... [ 992.440610][T18665] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3912'. [ 992.550412][T18669] IPVS: using max 22 ests per chain, 52800 per kthread [ 992.942573][T18601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.951143][T18601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.978814][T18601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.068580][T12610] IPVS: stopping backup sync thread 17446 ... [ 993.109397][T18601] hsr_slave_0: entered promiscuous mode [ 993.151252][T18601] hsr_slave_1: entered promiscuous mode [ 993.158717][T18601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.167117][T18601] Cannot create hsr debugfs directory [ 993.798021][T12610] hsr_slave_0: left promiscuous mode [ 993.819110][T12610] hsr_slave_1: left promiscuous mode [ 993.827096][T12610] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 993.847277][T12610] batman_adv: batadv0: Removing interface: ipvlan2 [ 993.933324][T12610] veth1_macvtap: left promiscuous mode [ 993.945226][T12610] veth0_macvtap: left promiscuous mode [ 993.955642][T12610] veth1_vlan: left promiscuous mode [ 993.967825][T12610] veth0_vlan: left promiscuous mode [ 994.474137][T17155] Bluetooth: hci1: command tx timeout [ 995.007432][T18714] siw: device registration error -23 [ 996.595124][T18729] UBIFS error (pid: 18729): cannot open "./file0", error -22 [ 996.686986][T17155] Bluetooth: hci1: command tx timeout [ 996.953514][T12610] bond0 (unregistering): Released all slaves [ 998.548761][T18601] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 998.586450][T18601] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 998.645534][T18601] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 998.740114][T18601] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 998.910548][T17155] Bluetooth: hci1: command tx timeout [ 998.979818][T18601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.060365][T18601] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.106939][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.114126][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.183950][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.191145][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.313938][T18798] netlink: 'syz.0.3955': attribute type 3 has an invalid length. [ 1000.741956][T18601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.840947][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1001.618724][T18601] veth0_vlan: entered promiscuous mode [ 1001.640198][T18601] veth1_vlan: entered promiscuous mode [ 1001.698094][T18601] veth0_macvtap: entered promiscuous mode [ 1001.719865][T18601] veth1_macvtap: entered promiscuous mode [ 1001.763631][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.788590][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.814840][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.847171][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.873426][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.893243][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.920860][T18601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.960557][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.992608][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.009715][T18601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.032376][T18601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.055914][T18601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.091821][T18601] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.112414][T18601] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.149785][T18601] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.158548][T18601] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.365354][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.373687][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.491138][T12610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.516461][T12610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.886130][T18923] UBIFS error (pid: 18923): cannot open "./file0", error -22 [ 1004.004415][T18929] syzkaller1: entered promiscuous mode [ 1004.018678][T18929] syzkaller1: entered allmulticast mode [ 1005.512965][T18955] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4001'. [ 1005.524327][T18955] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4001'. [ 1006.251765][T17155] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1006.478513][T18964] UBIFS error (pid: 18964): cannot open "./file0", error -22 [ 1006.670314][T18968] lo speed is unknown, defaulting to 1000 [ 1006.684500][T18968] lo speed is unknown, defaulting to 1000 [ 1006.695548][T18968] lo speed is unknown, defaulting to 1000 [ 1006.768599][T18968] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1006.939771][T18969] loop6: detected capacity change from 0 to 512 [ 1007.035414][T18968] lo speed is unknown, defaulting to 1000 [ 1007.051002][T18968] lo speed is unknown, defaulting to 1000 [ 1007.066531][T18968] lo speed is unknown, defaulting to 1000 [ 1007.082673][T18968] lo speed is unknown, defaulting to 1000 [ 1007.162619][T18969] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.4005: corrupted in-inode xattr: bad e_name length [ 1007.179144][T18969] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.4005: couldn't read orphan inode 15 (err -117) [ 1007.193051][T18969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.221390][T18965] EXT4-fs error (device loop6): ext4_xattr_set_entry:1670: inode #2: comm syz.6.4005: corrupted xattr entries [ 1007.253217][T18965] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.4005: dx entry: limit 0 != root limit 125 [ 1007.265144][T18965] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.4005: Corrupt directory, running e2fsck is recommended [ 1007.531391][T18601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.094981][T18990] loop6: detected capacity change from 0 to 512 [ 1009.094090][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1009.105450][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1009.115492][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1009.126280][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1009.134711][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1009.154154][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1009.212878][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0028 [ 1009.362917][T19003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.371495][T19003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.675195][T19003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.065430][T19016] IPv4: Oversized IP packet from 127.202.26.0 [ 1010.088450][T19003] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.098878][T19003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.118242][T19003] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.127412][T19003] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.356987][T12610] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.426017][T18999] ip6_vti0 speed is unknown, defaulting to 1000 [ 1010.519720][T12610] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.566278][T19027] netlink: 'syz.6.4027': attribute type 10 has an invalid length. [ 1010.614860][T19027] batman_adv: batadv0: Adding interface: netdevsim0 [ 1010.647832][T19027] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.681212][T19027] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1010.773008][T12610] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.863082][T18999] lo speed is unknown, defaulting to 1000 [ 1010.925337][T12610] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.427416][T18999] chnl_net:caif_netlink_parms(): no params data found [ 1011.434872][ T5784] Bluetooth: hci3: command tx timeout [ 1011.994055][T18999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.063713][T19063] overlayfs: failed to clone upperpath [ 1012.304584][T18999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.401360][T18999] bridge_slave_0: entered allmulticast mode [ 1012.519300][T18999] bridge_slave_0: entered promiscuous mode [ 1012.722225][T18999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.959886][T18999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.136171][T18999] bridge_slave_1: entered allmulticast mode [ 1013.453435][T18999] bridge_slave_1: entered promiscuous mode [ 1013.620765][ T5784] Bluetooth: hci3: command tx timeout [ 1014.558605][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1014.628939][T19071] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.638815][T19071] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.648121][T19071] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.656946][T19071] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.791400][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1014.896037][T18999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.928779][T18999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.135631][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1015.315920][T18999] team0: Port device team_slave_0 added [ 1015.336919][T18999] team0: Port device team_slave_1 added [ 1015.365884][T19101] UBIFS error (pid: 19101): cannot open "./file0", error -22 [ 1015.995994][ T5784] Bluetooth: hci3: command tx timeout [ 1016.078304][T19111] overlayfs: failed to clone upperpath [ 1016.230295][T18999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.338475][T18999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.721717][T18999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.312880][T18999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.422488][T18999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.703015][T18999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.156308][ T5784] Bluetooth: hci3: command tx timeout [ 1018.681733][T18999] hsr_slave_0: entered promiscuous mode [ 1018.689428][T18999] hsr_slave_1: entered promiscuous mode [ 1018.695834][T18999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.704365][T18999] Cannot create hsr debugfs directory [ 1018.962215][T19129] syzkaller0: entered promiscuous mode [ 1018.968810][T19129] syzkaller0: entered allmulticast mode [ 1019.736892][T12610] hsr_slave_0: left promiscuous mode [ 1019.771397][T12610] hsr_slave_1: left promiscuous mode [ 1019.811694][T12610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.851893][T12610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.941128][T12610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.988139][T12610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.036148][T12610] bridge_slave_1: left allmulticast mode [ 1020.041932][T12610] bridge_slave_1: left promiscuous mode [ 1020.056641][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.065775][T12610] bridge_slave_0: left allmulticast mode [ 1020.074890][T12610] bridge_slave_0: left promiscuous mode [ 1020.081025][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.125308][T12610] veth1_macvtap: left promiscuous mode [ 1020.131616][T12610] veth0_macvtap: left promiscuous mode [ 1020.391676][T12610] bond1 (unregistering): Released all slaves [ 1020.887714][T12610] team0 (unregistering): Port device team_slave_1 removed [ 1020.948671][T12610] team0 (unregistering): Port device C removed [ 1021.004614][T12610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.064251][T12610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.405226][ T5813] IPVS: starting estimator thread 0... [ 1021.528092][T12610] bond0 (unregistering): (slave team0): Releasing backup interface [ 1021.532037][T19172] IPVS: using max 24 ests per chain, 57600 per kthread [ 1021.604800][T12610] bond0 (unregistering): Released all slaves [ 1021.750167][T19160] tipc: Enabling of bearer rejected, failed to enable media [ 1022.486670][T19188] ip6_vti0 speed is unknown, defaulting to 1000 [ 1022.574344][T12610] IPVS: stop unused estimator thread 0... [ 1022.868767][T18999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1022.899182][T18999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1022.927272][T19188] lo speed is unknown, defaulting to 1000 [ 1022.928163][T18999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1022.958166][T18999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1023.119214][T19215] syz2: rxe_newlink: already configured on ip6_vti0 [ 1023.258703][T18999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.331727][T18999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.386972][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4078'. [ 1023.439739][T19224] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.449154][T19224] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.458105][T19224] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.466928][T19224] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.537868][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.545072][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.561348][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.568559][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.582571][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4078'. [ 1024.406555][T18999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.520615][T19264] siw: device registration error -23 [ 1025.494592][T19277] netlink: 'syz.6.4092': attribute type 1 has an invalid length. [ 1025.664192][T19277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.831205][T19284] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1025.871109][T19286] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1025.887419][T19286] bond1: (slave batadv1): making interface the new active one [ 1025.904120][T19286] batadv1: entered promiscuous mode [ 1025.911119][T19286] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1026.255672][T19303] autofs4:pid:19303:autofs_fill_super: called with bogus options [ 1026.292620][T19301] syzkaller0: entered promiscuous mode [ 1026.309138][T19301] syzkaller0: entered allmulticast mode [ 1026.347381][T18999] veth0_vlan: entered promiscuous mode [ 1026.520506][T19308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4099'. [ 1026.573393][T18999] veth1_vlan: entered promiscuous mode [ 1026.598422][T19308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4099'. [ 1026.672419][T19313] siw: device registration error -23 [ 1026.768481][T19308] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4099'. [ 1026.838833][T18999] veth0_macvtap: entered promiscuous mode [ 1027.277779][T18999] veth1_macvtap: entered promiscuous mode [ 1027.373797][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.422404][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.432321][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.455893][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.488068][T18999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.627095][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.679069][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.707325][T18999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.718061][T18999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.730127][T18999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.827258][T19331] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4102'. [ 1027.836841][T19331] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4102'. [ 1028.196871][T18999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.381473][T18999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.427434][T18999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.469070][T18999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.637106][T19339] autofs4:pid:19339:autofs_fill_super: called with bogus options [ 1028.804519][T19341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.249939][T19358] siw: device registration error -23 [ 1029.561650][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.804396][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.044992][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.058529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.124543][T19336] syz.4.4107 (19336) used greatest stack depth: 17864 bytes left [ 1030.584566][T19383] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4114'. [ 1030.594278][T19383] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4114'. [ 1032.243645][T19428] UBIFS error (pid: 19428): cannot open "./file0", error -22 [ 1034.099915][T19460] UBIFS error (pid: 19460): cannot open "./file0", error -22 [ 1034.145364][T19462] (null): rxe_set_mtu: Set mtu to 512 [ 1034.160269][T19462] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1037.053724][T19464] ip6_vti0 speed is unknown, defaulting to 1000 [ 1037.466186][T19472] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4147'. [ 1037.475471][T19472] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4147'. [ 1037.567047][T19464] lo speed is unknown, defaulting to 1000 [ 1038.011213][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4150'. [ 1038.383164][T19484] overlayfs: failed to clone upperpath [ 1040.422282][ T2958] batadv1: left promiscuous mode [ 1041.346444][T19504] (null): rxe_set_mtu: Set mtu to 512 [ 1041.352630][T19504] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1041.768532][T19516] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4158'. [ 1041.778211][T19516] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4158'. [ 1042.149549][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.170987][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.184989][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.196766][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.222615][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.250859][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.281306][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.311905][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.579932][T19548] autofs4:pid:19548:autofs_fill_super: called with bogus options [ 1043.598336][T19548] UBIFS error (pid: 19548): cannot open "./file0", error -22 [ 1043.715990][T19553] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4174'. [ 1043.750608][T19553] (null): rxe_set_mtu: Set mtu to 1024 [ 1043.767338][T19553] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1044.997667][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4182'. [ 1045.639139][T19605] syzkaller0: entered promiscuous mode [ 1045.655462][T19605] syzkaller0: entered allmulticast mode [ 1049.283362][T19626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.607533][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4210'. [ 1049.638340][T19672] syz2: rxe_newlink: already configured on ip6_vti0 [ 1049.779709][T19679] syzkaller0: entered promiscuous mode [ 1049.785242][T19679] syzkaller0: entered allmulticast mode [ 1050.763319][T19693] netlink: 'syz.7.4217': attribute type 9 has an invalid length. [ 1050.774096][T19693] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4217'. [ 1050.799520][T19690] ip6_vti0 speed is unknown, defaulting to 1000 [ 1051.419531][T19690] lo speed is unknown, defaulting to 1000 [ 1051.502072][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4223'. [ 1051.515603][T19716] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4224'. [ 1052.773517][T19745] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4233'. [ 1053.602788][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.649209][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.681177][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.713880][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.733303][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.753343][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.963443][T19773] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4242'. [ 1054.174747][T19782] C: entered promiscuous mode [ 1054.181102][T19782] team_slave_1: entered promiscuous mode [ 1054.209493][T19782] macsec1: entered promiscuous mode [ 1054.220148][T19782] team0: entered promiscuous mode [ 1054.227129][T19782] macsec1: entered allmulticast mode [ 1054.241924][T19782] team0: entered allmulticast mode [ 1054.247655][T19782] C: entered allmulticast mode [ 1054.252603][T19782] team_slave_1: entered allmulticast mode [ 1054.318643][T19788] xt_hashlimit: size too large, truncated to 1048576 [ 1054.579754][T19800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4254'. [ 1055.525938][T19823] vxcan0: entered promiscuous mode [ 1056.458600][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 1056.475687][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.501132][T19838] (null): rxe_set_mtu: Set mtu to 512 [ 1056.507005][T19838] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1057.992212][T19880] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.001362][T19880] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.010464][T19880] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.019801][T19880] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.059938][T19880] vxcan0: left promiscuous mode [ 1058.495579][T19896] UBIFS error (pid: 19896): cannot open "./file0", error -22 [ 1058.586438][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4292'. [ 1058.637353][T19898] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.646810][T19898] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.655835][T19898] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.664773][T19898] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.679960][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4292'. [ 1059.297992][T19925] batadv_slave_1: entered promiscuous mode [ 1059.317365][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4304'. [ 1059.334248][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4304'. [ 1059.690908][T19931] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1059.701052][T19931] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1060.568943][T19942] xt_hashlimit: size too large, truncated to 1048576 [ 1062.373977][T19974] syzkaller0: entered promiscuous mode [ 1062.379496][T19974] syzkaller0: entered allmulticast mode [ 1063.448029][T19994] loop6: detected capacity change from 0 to 512 [ 1064.280029][T19994] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.4327: corrupted in-inode xattr: bad e_name length [ 1064.296615][T19994] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.4327: couldn't read orphan inode 15 (err -117) [ 1064.323352][T19994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.452310][T19994] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.4327: dx entry: limit 0 != root limit 125 [ 1064.464281][T19994] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.4327: Corrupt directory, running e2fsck is recommended [ 1064.756172][T18601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.875326][T20001] autofs4:pid:20001:autofs_fill_super: called with bogus options [ 1064.943103][T20001] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4332'. [ 1066.166162][T20022] siw: device registration error -23 [ 1067.148099][T20040] autofs4:pid:20040:autofs_fill_super: called with bogus options [ 1067.165941][T20040] UBIFS error (pid: 20040): cannot open "./file0", error -22 [ 1067.267581][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1067.303778][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4352'. [ 1067.314589][T20047] netem: incorrect ge model size [ 1067.320992][T20047] netem: change failed [ 1067.637194][T20057] siw: device registration error -23 [ 1067.689215][T20057] loop7: detected capacity change from 0 to 512 [ 1068.482416][T20066] autofs4:pid:20066:autofs_fill_super: called with bogus options [ 1068.518462][T20066] UBIFS error (pid: 20066): cannot open "./file0", error -22 [ 1068.617842][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4364'. [ 1068.724900][T20078] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1069.283367][T20092] siw: device registration error -23 [ 1070.103573][T20100] UBIFS error (pid: 20100): cannot open "./file0", error -22 [ 1070.754675][T20117] siw: device registration error -23 [ 1072.059011][T20132] UBIFS error (pid: 20132): cannot open "./file0", error -22 [ 1072.404193][T20140] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1072.895526][T20142] autofs4:pid:20142:autofs_fill_super: called with bogus options [ 1072.921793][T20142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1074.726582][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4384'. [ 1074.735881][T20140] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1074.772157][T20147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1074.798991][T20147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1075.171186][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4402'. [ 1075.184901][T20164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4401'. [ 1075.200919][T20165] autofs4:pid:20165:autofs_fill_super: called with bogus options [ 1075.222667][T20165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1075.618034][T20182] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4404'. [ 1076.533348][T20192] ip6_vti0 speed is unknown, defaulting to 1000 [ 1076.772040][ T3564] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1077.489192][T20192] lo speed is unknown, defaulting to 1000 [ 1077.768999][ T3564] usb 7-1: Using ep0 maxpacket: 32 [ 1077.833014][ T3564] usb 7-1: config 0 has an invalid interface number: 222 but max is 0 [ 1077.850451][T20216] __nla_validate_parse: 4 callbacks suppressed [ 1077.850486][T20216] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1077.930444][ T3564] usb 7-1: config 0 has no interface number 0 [ 1078.034578][ T3564] usb 7-1: config 0 interface 222 has no altsetting 0 [ 1078.177370][ T3564] usb 7-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 1078.316767][ T3564] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.385288][T20216] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1078.416853][ T3564] usb 7-1: Product: syz [ 1078.421545][ T3564] usb 7-1: Manufacturer: syz [ 1078.522760][ T3564] usb 7-1: SerialNumber: syz [ 1078.536306][ T3564] usb 7-1: config 0 descriptor?? [ 1079.493894][T20223] loop6: detected capacity change from 0 to 4096 [ 1079.501272][T20223] EXT4-fs: Ignoring removed mblk_io_submit option [ 1079.541844][T20223] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1079.688499][T20223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.801402][T20223] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1080.815905][T20224] overlayfs: failed to resolve './bus': -2 [ 1081.547070][ T3564] cdc_mbim: probe of 7-1:0.222 failed with error -71 [ 1081.590802][T20240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4424'. [ 1081.627194][T18601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.655984][ T3564] usb 7-1: USB disconnect, device number 6 [ 1081.864800][T20248] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4425'. [ 1082.208799][T20264] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1085.412346][T20266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1085.665023][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4442'. [ 1086.752729][T20322] overlayfs: failed to clone upperpath [ 1089.464872][T20325] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4451'. [ 1090.268376][T20343] dummy0: entered promiscuous mode [ 1090.369199][T20343] vlan2: entered promiscuous mode [ 1090.694317][T20347] siw: device registration error -23 [ 1090.746258][T20347] loop7: detected capacity change from 0 to 512 [ 1091.520387][T20357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4462'. [ 1092.140321][T20377] gretap0: entered promiscuous mode [ 1092.164813][T20377] vlan2: entered promiscuous mode [ 1092.212672][ T5758] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1092.421346][ T5758] usb 8-1: Using ep0 maxpacket: 32 [ 1092.437830][ T5758] usb 8-1: config 0 has an invalid interface number: 222 but max is 0 [ 1092.455905][ T5758] usb 8-1: config 0 has no interface number 0 [ 1092.473428][ T5758] usb 8-1: config 0 interface 222 has no altsetting 0 [ 1092.498125][ T5758] usb 8-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 1092.567941][ T5758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.586286][ T5758] usb 8-1: Product: syz [ 1092.590610][ T5758] usb 8-1: Manufacturer: syz [ 1092.601051][ T5758] usb 8-1: SerialNumber: syz [ 1092.657808][ T5758] usb 8-1: config 0 descriptor?? [ 1093.460222][T20401] loop7: detected capacity change from 0 to 4096 [ 1093.467780][T20401] EXT4-fs: Ignoring removed mblk_io_submit option [ 1093.490817][T20401] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1093.570389][T20401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.099503][T20401] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1095.110972][T20402] overlayfs: failed to resolve './bus': -2 [ 1096.126312][T18999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.131041][ T5758] cdc_mbim: probe of 8-1:0.222 failed with error -71 [ 1096.156747][ T5758] usb 8-1: USB disconnect, device number 10 [ 1097.014162][T20432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1097.047931][T20434] pimreg3: entered allmulticast mode [ 1099.115062][T20455] loop6: detected capacity change from 0 to 512 [ 1099.333735][T20455] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.4486: corrupted in-inode xattr: bad e_name length [ 1099.351659][T20455] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.4486: couldn't read orphan inode 15 (err -117) [ 1099.375523][T20455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1099.411353][T20455] EXT4-fs error (device loop6): ext4_xattr_set_entry:1670: inode #2: comm syz.6.4486: corrupted xattr entries [ 1099.527649][T20455] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.4486: dx entry: limit 0 != root limit 125 [ 1099.540195][T20455] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.4486: Corrupt directory, running e2fsck is recommended [ 1099.967816][T18601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.321050][T20465] overlayfs: failed to clone upperpath [ 1103.453777][T20480] syzkaller0: entered promiscuous mode [ 1103.462058][T20480] syzkaller0: entered allmulticast mode [ 1103.957375][T20491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1104.209411][T20497] ipvlan3: entered promiscuous mode [ 1104.221250][T20497] bridge0: port 3(ipvlan3) entered blocking state [ 1104.230990][T20497] bridge0: port 3(ipvlan3) entered disabled state [ 1104.241690][T20497] ipvlan3: entered allmulticast mode [ 1104.250569][T20497] bridge0: entered allmulticast mode [ 1104.260458][T20497] ipvlan3: left allmulticast mode [ 1104.265634][T20497] bridge0: left allmulticast mode [ 1104.492152][T20499] ip6_vti0 speed is unknown, defaulting to 1000 [ 1104.561521][T20371] Set syz1 is full, maxelem 65536 reached [ 1104.734239][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4505'. [ 1104.812445][T20499] lo speed is unknown, defaulting to 1000 [ 1105.101262][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4509'. [ 1105.212437][T20520] bridge0: entered promiscuous mode [ 1105.239630][T20520] vlan2: entered promiscuous mode [ 1106.053380][T20543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1106.516430][T20551] xt_hashlimit: size too large, truncated to 1048576 [ 1107.799306][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4531'. [ 1108.595201][T20587] team_slave_0: entered promiscuous mode [ 1108.601002][T20587] team_slave_1: entered promiscuous mode [ 1108.656640][T20587] vlan2: entered promiscuous mode [ 1108.671272][T20587] team0: entered promiscuous mode [ 1111.166602][T20649] team_slave_0: entered promiscuous mode [ 1111.172561][T20649] team_slave_1: entered promiscuous mode [ 1111.236855][T20649] vlan2: entered promiscuous mode [ 1111.245927][T20649] team0: entered promiscuous mode [ 1112.261770][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4571'. [ 1112.280602][T20679] (null): rxe_set_mtu: Set mtu to 1024 [ 1112.296105][T20679] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1112.482847][T20689] vlan2: entered promiscuous mode [ 1113.302817][T20709] siw: device registration error -23 [ 1113.354320][T20709] loop7: detected capacity change from 0 to 512 [ 1114.289453][T20719] vlan2: entered promiscuous mode [ 1114.294892][T20719] bridge0: entered promiscuous mode [ 1114.495417][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4592'. [ 1114.520376][T20734] (null): rxe_set_mtu: Set mtu to 512 [ 1114.543777][T20734] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1115.056262][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4602'. [ 1115.075493][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4602'. [ 1115.108124][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4602'. [ 1115.150255][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4602'. [ 1115.336833][T20760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1115.357628][T20760] (null): rxe_set_mtu: Set mtu to 512 [ 1115.367808][T20760] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1115.616263][T20764] bond2: entered allmulticast mode [ 1115.732467][T20767] siw: device registration error -23 [ 1117.582155][T20792] xt_hashlimit: size too large, truncated to 1048576 [ 1117.669171][T17155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1117.682147][T17155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1117.692299][T17155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1117.703063][T17155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1117.737155][T17155] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1117.748871][T17155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1117.939190][T20793] ip6_vti0 speed is unknown, defaulting to 1000 [ 1118.477648][T20793] lo speed is unknown, defaulting to 1000 [ 1118.822272][T20793] chnl_net:caif_netlink_parms(): no params data found [ 1119.059265][T20793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.077802][T20793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.101445][T20793] bridge_slave_0: entered allmulticast mode [ 1119.117201][T20793] bridge_slave_0: entered promiscuous mode [ 1119.130432][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4625'. [ 1119.135245][T20793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.164721][T20793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.190753][T20793] bridge_slave_1: entered allmulticast mode [ 1119.203360][T20793] bridge_slave_1: entered promiscuous mode [ 1119.338734][ T3489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.371738][ T3489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.423157][T20793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.460221][T20793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.624351][ T3489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.663394][ T3489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.766517][T20793] team0: Port device team_slave_0 added [ 1119.841625][ T3489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.879765][ T3489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.925083][T20793] team0: Port device team_slave_1 added [ 1120.035169][T17155] Bluetooth: hci4: command tx timeout [ 1120.064590][ T3489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.079392][ T3489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.158046][T20793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.174341][T20793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.366624][T20793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.390735][T20793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.409106][T20793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.463764][T20793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.503091][T20824] IPv6: NLM_F_CREATE should be specified when creating new route [ 1120.557730][T20823] ip6_vti0 speed is unknown, defaulting to 1000 [ 1120.648214][T20793] hsr_slave_0: entered promiscuous mode [ 1120.677341][T20793] hsr_slave_1: entered promiscuous mode [ 1120.697258][T20793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.705896][T20793] Cannot create hsr debugfs directory [ 1121.123804][T20823] lo speed is unknown, defaulting to 1000 [ 1122.090955][T12610] smc: removing ib device syz2 [ 1122.179410][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.237455][ T5784] Bluetooth: hci4: command tx timeout [ 1123.296297][T20871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1123.820531][T20793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1123.848767][T20793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1123.958271][T20793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1124.000159][T20793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1124.295744][T20793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.349191][T20793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.407686][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 1124.454916][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.462954][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.471862][T17155] Bluetooth: hci4: command tx timeout [ 1124.560642][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.567864][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.860139][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4647'. [ 1125.531667][T20921] loop6: detected capacity change from 0 to 512 [ 1126.137794][ T3489] bond0: (slave wlan1): Releasing backup interface [ 1126.318091][T20930] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4656'. [ 1126.407659][T20793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.684924][T17155] Bluetooth: hci4: command tx timeout [ 1126.721027][T20793] veth0_vlan: entered promiscuous mode [ 1126.792595][ T3489] hsr_slave_0: left promiscuous mode [ 1126.805063][ T3489] hsr_slave_1: left promiscuous mode [ 1126.818478][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.826765][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.844682][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.852741][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.889015][ T3489] bridge_slave_1: left allmulticast mode [ 1126.910995][ T3489] bridge_slave_1: left promiscuous mode [ 1126.938315][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.977897][ T3489] bridge_slave_0: left allmulticast mode [ 1126.999771][ T3489] bridge_slave_0: left promiscuous mode [ 1127.011580][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.065673][ T3489] team0: left allmulticast mode [ 1127.071017][ T3489] C: left allmulticast mode [ 1127.076480][ T3489] team_slave_1: left allmulticast mode [ 1127.086635][ T3489] team0: left promiscuous mode [ 1127.110732][T20947] siw: device registration error -23 [ 1127.164509][T20947] loop7: detected capacity change from 0 to 512 [ 1127.195086][ T3489] C: left promiscuous mode [ 1127.200370][ T3489] team_slave_1: left promiscuous mode [ 1127.450723][ T3489] bond_slave_0: left promiscuous mode [ 1127.456956][ T3489] bond_slave_1: left promiscuous mode [ 1127.767058][ T3489] veth1_macvtap: left promiscuous mode [ 1127.782008][ T3489] veth0_macvtap: left promiscuous mode [ 1127.828766][ T3489] veth1_vlan: left promiscuous mode [ 1127.834158][ T3489] veth0_vlan: left promiscuous mode [ 1128.234825][ T788] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1128.316966][ T3489] bond2 (unregistering): Released all slaves [ 1128.356482][ T3489] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1128.448625][ T788] usb 7-1: Using ep0 maxpacket: 32 [ 1128.456045][ T788] usb 7-1: config 0 has an invalid interface number: 222 but max is 0 [ 1128.465412][ T788] usb 7-1: config 0 has no interface number 0 [ 1128.490068][ T788] usb 7-1: config 0 interface 222 has no altsetting 0 [ 1128.564294][ T788] usb 7-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 1128.573751][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.590124][ T788] usb 7-1: Product: syz [ 1128.594345][ T788] usb 7-1: Manufacturer: syz [ 1128.599629][ T788] usb 7-1: SerialNumber: syz [ 1128.607659][ T788] usb 7-1: config 0 descriptor?? [ 1128.686750][ T3489] bond1 (unregistering): Released all slaves [ 1129.403885][T20962] loop6: detected capacity change from 0 to 4096 [ 1129.412445][T20962] EXT4-fs: Ignoring removed mblk_io_submit option [ 1129.596830][T20962] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1129.685208][T20962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.061643][T20962] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1132.278155][T20963] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1132.288403][T20963] overlayfs: upper fs does not support tmpfile. [ 1132.298556][T20963] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1132.592659][T18601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.593837][ T788] cdc_mbim: probe of 7-1:0.222 failed with error -71 [ 1132.621901][ T788] usb 7-1: USB disconnect, device number 7 [ 1133.067378][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 1133.160630][ T3489] team0 (unregistering): Port device C removed [ 1133.217520][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.279311][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.725263][ T3489] bond0 (unregistering): Released all slaves [ 1133.892641][T20793] veth1_vlan: entered promiscuous mode [ 1134.022360][T20793] veth0_macvtap: entered promiscuous mode [ 1134.044510][T20793] veth1_macvtap: entered promiscuous mode [ 1134.097114][T20793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.108150][T20793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.124195][T20793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.148733][T20793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.180727][T20793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.188145][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1134.200211][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1134.215193][T20998] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1134.224918][T20998] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1134.233709][T20998] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1134.242429][T20998] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1134.304014][T20793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.345620][ T5772] hid (null): unknown global tag 0xd [ 1134.349960][T20793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.352266][ T5772] hid (null): unknown global tag 0xda [ 1134.367292][T20793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.377217][ T5772] hid-generic 0005:0001:0002.0005: collection stack underflow [ 1134.387799][ T5772] hid-generic 0005:0001:0002.0005: item 0 1 0 12 parsing failed [ 1134.397968][ T5772] hid-generic: probe of 0005:0001:0002.0005 failed with error -22 [ 1134.403164][T20793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.436408][T20793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.443998][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1134.455134][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1134.470097][T20793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.499267][T20793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.517847][T20793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.529497][T20793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.777148][ T3489] IPVS: stop unused estimator thread 0... [ 1134.837388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.864507][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.920330][T21015] vlan2: entered promiscuous mode [ 1135.078820][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.086710][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.510918][T21037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1135.631836][T21041] syz_tun: entered allmulticast mode [ 1135.637739][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4691'. [ 1135.657821][T21041] syz_tun: left allmulticast mode [ 1135.671807][T21043] vlan2: entered promiscuous mode [ 1135.731368][T17155] block nbd0: Receive control failed (result -1) [ 1136.156771][T21056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.263962][T21056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.496128][T21067] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1136.515300][ T788] IPVS: starting estimator thread 0... [ 1136.529853][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1136.616392][T21068] IPVS: using max 19 ests per chain, 45600 per kthread [ 1136.695571][T21072] siw: device registration error -23 [ 1136.744696][T21072] loop0: detected capacity change from 0 to 512 [ 1138.341704][T21103] loop6: detected capacity change from 0 to 512 [ 1139.283059][T21109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.353271][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1139.398265][T21113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1139.416694][T21119] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4718'. [ 1139.478470][T21109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.613501][T21109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.663499][T21132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 1139.673054][T21132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 1139.859151][T21109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.131481][T21109] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.180114][T21109] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.250865][T21109] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.313019][T21109] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.349154][T21150] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4733'. [ 1140.867049][T21169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4742'. [ 1140.883438][T17155] Bluetooth: hci3: command 0x0406 tx timeout [ 1141.055146][T21175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1141.808326][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1142.010785][T21217] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4760'. [ 1142.972998][T21254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4773'. [ 1143.419893][T21265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4775'. [ 1143.429416][T21265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4775'. [ 1144.183161][T21270] (null): rxe_set_mtu: Set mtu to 1024 [ 1144.319199][T18487] lo speed is unknown, defaulting to 1000 [ 1144.334965][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1144.342493][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1144.372172][T21274] tipc: Started in network mode [ 1144.377351][T21274] tipc: Node identity e622b9e9cb07, cluster identity 4711 [ 1144.399806][T21274] tipc: Enabled bearer , priority 0 [ 1144.416058][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1144.505088][T21274] syzkaller0: entered promiscuous mode [ 1144.527524][T21274] syzkaller0: entered allmulticast mode [ 1144.533943][T21274] tipc: Resetting bearer [ 1144.552490][T21283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4784'. [ 1144.584539][T21273] tipc: Resetting bearer [ 1144.850137][T21270] infiniband syz2: set down [ 1144.868054][T21270] infiniband syz2: added ip6_vti0 [ 1144.966222][T21270] RDS/IB: syz2: added [ 1144.974461][T21270] smc: adding ib device syz2 with port count 1 [ 1144.980770][T21270] smc: ib device syz2 port 1 has pnetid [ 1148.435752][T21273] tipc: Disabling bearer [ 1148.450986][ T3564] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.461591][T21299] vlan2: entered promiscuous mode [ 1148.504792][T21306] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4791'. [ 1148.520052][T21306] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4791'. [ 1148.532302][T18487] tipc: Node number set to 757447145 [ 1148.556789][T19018] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.568507][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.659018][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4793'. [ 1148.796760][T21319] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4794'. [ 1149.047595][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1149.445202][T21335] loop7: detected capacity change from 0 to 512 [ 1149.556456][T21335] EXT4-fs error (device loop7): ext4_iget_extra_inode:4732: inode #15: comm syz.7.4798: corrupted in-inode xattr: bad e_name length [ 1149.572232][T21335] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.4798: couldn't read orphan inode 15 (err -117) [ 1149.597162][T21335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.631784][T21335] EXT4-fs error (device loop7): ext4_xattr_set_entry:1670: inode #2: comm syz.7.4798: corrupted xattr entries [ 1149.751885][T21335] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.4798: dx entry: limit 0 != root limit 125 [ 1149.763952][T21335] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.4798: Corrupt directory, running e2fsck is recommended [ 1150.106280][T21341] team_slave_0: entered promiscuous mode [ 1150.112076][T21341] team_slave_1: entered promiscuous mode [ 1150.134644][T21341] vlan2: entered promiscuous mode [ 1150.139751][T21341] team0: entered promiscuous mode [ 1150.206872][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1150.371163][T21270] ip6_vti0 speed is unknown, defaulting to 1000 [ 1150.581892][T21333] siw: device registration error -23 [ 1150.702591][T21349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1150.729219][T18999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.887916][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1150.898135][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1150.920876][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1150.929942][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1150.946574][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4808'. [ 1151.367634][T21367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1151.521312][T21374] (null): rxe_set_mtu: Set mtu to 1024 [ 1151.527029][T21374] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1152.257816][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1152.270503][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1152.285654][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1152.298123][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1152.309737][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1152.317437][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1152.566729][T21387] lo speed is unknown, defaulting to 1000 [ 1152.575573][T21387] ip6_vti0 speed is unknown, defaulting to 1000 [ 1152.831250][T21402] netlink: 'syz.6.4831': attribute type 1 has an invalid length. [ 1153.250233][T21416] vlan2: entered promiscuous mode [ 1153.409336][ T3519] batman_adv: batadv0: Removing interface: netdevsim0 [ 1153.895372][T21435] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1153.904563][ T8] IPVS: starting estimator thread 0... [ 1153.906948][T21387] chnl_net:caif_netlink_parms(): no params data found [ 1154.003958][T21436] IPVS: using max 27 ests per chain, 64800 per kthread [ 1154.566107][T17155] Bluetooth: hci0: command tx timeout [ 1154.760381][T21445] __nla_validate_parse: 5 callbacks suppressed [ 1154.760398][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4847'. [ 1154.985210][T21387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.992466][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.025713][T21387] bridge_slave_0: entered allmulticast mode [ 1155.033064][T21387] bridge_slave_0: entered promiscuous mode [ 1155.159507][T21387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.188545][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.195847][T21387] bridge_slave_1: entered allmulticast mode [ 1155.229952][T21387] bridge_slave_1: entered promiscuous mode [ 1155.397516][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4855'. [ 1155.432014][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4855'. [ 1155.466675][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4855'. [ 1155.485697][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4855'. [ 1155.522044][T21387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.646265][T21387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.928742][T21489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1156.002494][T21496] pimreg3: entered allmulticast mode [ 1156.059631][T21499] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4862'. [ 1156.085239][T21387] team0: Port device team_slave_0 added [ 1156.108946][T21387] team0: Port device team_slave_1 added [ 1156.297431][T21387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.313506][T21387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.347340][T21387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.390260][T21387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.403652][T21387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.482128][T21387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.806453][T17155] Bluetooth: hci0: command tx timeout [ 1156.843236][T21387] hsr_slave_0: entered promiscuous mode [ 1156.892557][T21387] hsr_slave_1: entered promiscuous mode [ 1156.930789][T21387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.978277][T21387] Cannot create hsr debugfs directory [ 1157.207294][ T3519] hsr_slave_0: left promiscuous mode [ 1157.224848][ T3519] hsr_slave_1: left promiscuous mode [ 1157.247052][ T3519] bridge_slave_1: left allmulticast mode [ 1157.257531][ T3519] bridge_slave_1: left promiscuous mode [ 1157.264635][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.320749][ T3519] bridge_slave_0: left allmulticast mode [ 1157.326589][ T3519] bridge_slave_0: left promiscuous mode [ 1157.364394][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.480937][ T3519] bond2 (unregistering): Released all slaves [ 1157.601697][ T3519] bond1 (unregistering): Released all slaves [ 1158.268910][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 1158.351846][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 1158.431685][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.508506][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.995377][ T3519] bond0 (unregistering): (slave team0): Releasing backup interface [ 1159.030400][T17155] Bluetooth: hci0: command tx timeout [ 1159.057167][ T3519] bond0 (unregistering): Released all slaves [ 1159.191347][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1159.200704][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1159.217972][T21531] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.226328][T21531] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.234777][T21531] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.243913][T21531] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.266066][T21534] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4870'. [ 1159.334983][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1160.130105][ T3519] IPVS: stop unused estimator thread 0... [ 1160.397434][T21570] __nla_validate_parse: 1 callbacks suppressed [ 1160.397458][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1160.439023][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1161.237124][T17155] Bluetooth: hci0: command tx timeout [ 1161.245662][T21387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1161.338771][T21387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1161.411239][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4889'. [ 1161.424407][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4889'. [ 1161.442645][T21387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1161.495613][T21387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1161.685004][T21610] xt_hashlimit: size too large, truncated to 1048576 [ 1161.832279][T21387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.909165][T21616] syzkaller1: entered promiscuous mode [ 1161.919349][T21616] syzkaller1: entered allmulticast mode [ 1161.966125][T21387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.993557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.000783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.056188][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.063498][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.797145][T21387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.501548][T21387] veth0_vlan: entered promiscuous mode [ 1163.541676][T21387] veth1_vlan: entered promiscuous mode [ 1163.628186][T21387] veth0_macvtap: entered promiscuous mode [ 1163.672375][T21387] veth1_macvtap: entered promiscuous mode [ 1163.747622][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.791786][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.801692][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.834560][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.855065][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.898631][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.914802][T21387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.925654][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.938772][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.961487][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.977815][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.998552][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.020318][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.049331][T21387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.095222][T21387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.125146][T21387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.144750][T21387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.153505][T21387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.337365][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.345239][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.433802][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.441698][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.135600][T21690] netlink: 4688 bytes leftover after parsing attributes in process `syz.0.4906'. [ 1165.462762][T21698] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1165.737096][T21710] (null): rxe_set_mtu: Set mtu to 1024 [ 1165.764848][T21710] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1166.011078][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4915'. [ 1166.160374][T21722] syzkaller0: entered promiscuous mode [ 1166.173936][T21722] syzkaller0: entered allmulticast mode [ 1167.639386][T21745] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.671825][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1167.687530][T21745] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.785772][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4923'. [ 1167.888271][T21764] (null): rxe_set_mtu: Set mtu to 512 [ 1167.897342][T21747] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1167.908215][T21764] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1168.149765][T21745] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.185853][T21745] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.394920][T21779] siw: device registration error -23 [ 1168.438396][T21779] loop4: detected capacity change from 0 to 512 [ 1168.648217][T21779] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.4929: corrupted in-inode xattr: bad e_name length [ 1168.703033][T21779] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.4929: couldn't read orphan inode 15 (err -117) [ 1168.745384][T21779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.778302][T21779] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #2: comm syz.4.4929: corrupted xattr entries [ 1168.896518][T21779] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.4929: dx entry: limit 0 != root limit 125 [ 1168.908524][T21779] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4929: Corrupt directory, running e2fsck is recommended [ 1169.060953][T21745] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.097781][T21745] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.597803][T21387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.744652][T21745] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.890365][T21745] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.164272][T21793] raw_sendmsg: syz.0.4935 forgot to set AF_INET. Fix it! [ 1170.307624][T21745] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.326898][T21745] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.394630][T21745] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.428394][T21745] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.808183][T21807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1170.893168][T21745] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.909045][T21745] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.945455][T21745] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.967589][T21745] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.011365][T21810] pimreg3: entered allmulticast mode [ 1171.228080][T21825] siw: device registration error -23 [ 1171.279558][T21825] loop0: detected capacity change from 0 to 512 [ 1171.514226][T21825] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.4942: corrupted in-inode xattr: bad e_name length [ 1171.530897][T21825] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.4942: couldn't read orphan inode 15 (err -117) [ 1171.562063][T21825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.602125][T21825] EXT4-fs error (device loop0): ext4_xattr_set_entry:1670: inode #2: comm syz.0.4942: corrupted xattr entries [ 1171.716237][T21825] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.4942: dx entry: limit 0 != root limit 125 [ 1171.728707][T21825] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4942: Corrupt directory, running e2fsck is recommended [ 1172.482058][T20793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.944727][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1172.980100][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1173.771404][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4952'. [ 1174.319212][T21860] bond_slave_0: entered promiscuous mode [ 1174.325197][T21860] bond_slave_1: entered promiscuous mode [ 1174.338816][T21860] vlan2: entered promiscuous mode [ 1174.351800][T21860] bond0: entered promiscuous mode [ 1174.916213][T21866] syzkaller0: entered promiscuous mode [ 1175.005170][T21866] syzkaller0: entered allmulticast mode [ 1175.478087][T21871] syzkaller0: entered promiscuous mode [ 1175.483795][T21871] syzkaller0: entered allmulticast mode [ 1175.548760][T21884] netlink: 4604 bytes leftover after parsing attributes in process `syz.6.4962'. [ 1175.867270][T21888] siw: device registration error -23 [ 1175.916977][T21888] loop0: detected capacity change from 0 to 512 [ 1176.325414][T21888] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.4961: corrupted in-inode xattr: bad e_name length [ 1176.351495][T21888] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.4961: couldn't read orphan inode 15 (err -117) [ 1176.382090][T21888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.418568][T21887] EXT4-fs error (device loop0): ext4_xattr_set_entry:1670: inode #2: comm syz.0.4961: corrupted xattr entries [ 1176.448345][T21887] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.4961: dx entry: limit 0 != root limit 125 [ 1176.460234][T21887] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4961: Corrupt directory, running e2fsck is recommended [ 1176.704022][T20793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping sshd: stopped /usr/sbin/sshd (pid 5533) OK Stopping crond: stopped /usr/sbin/crond (pid 5512) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5434) Stopping network: [ 1182.339632][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4966'. [ 1182.350431][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4966'. [ 1182.774583][T21946] syzkaller0: entered promiscuous mode [ 1182.832266][T21946] syzkaller0: entered allmulticast mode OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 1187.841716][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.348608][T22018] bond_slave_0: entered promiscuous mode [ 1188.354489][T22018] bond_slave_1: entered promiscuous mode [ 1188.386104][T22018] vlan2: entered promiscuous mode [ 1188.405118][T22018] bond0: entered promiscuous mode [ 1188.997587][T22038] netlink: 'syz.6.4995': attribute type 10 has an invalid length. [ 1189.092962][T22038] team0: Port device dummy0 added [ 1189.114275][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 1189.255025][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4998'. [ 1189.545324][T22054] bond_slave_0: entered promiscuous mode [ 1189.551153][T22054] bond_slave_1: entered promiscuous mode [ 1189.641165][T22054] vlan2: entered promiscuous mode [ 1189.661868][T22054] bond0: entered promiscuous mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.216 closed by remote host. [ 1191.784247][T21005] ================================================================== [ 1191.792381][T21005] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c2/0xcc0 [ 1191.799869][T21005] Read of size 8 at addr ffff888020f6c0a0 by task khidpd_00010002/21005 [ 1191.808216][T21005] [ 1191.810564][T21005] CPU: 0 PID: 21005 Comm: khidpd_00010002 Not tainted syzkaller #0 [ 1191.818468][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1191.828542][T21005] Call Trace: [ 1191.832052][T21005] [ 1191.835091][T21005] dump_stack_lvl+0x18c/0x250 [ 1191.839796][T21005] ? __lock_acquire+0x7d40/0x7d40 [ 1191.845017][T21005] ? show_regs_print_info+0x20/0x20 [ 1191.850230][T21005] ? load_image+0x400/0x400 [ 1191.854748][T21005] ? __virt_addr_valid+0x469/0x540 [ 1191.859872][T21005] print_report+0xa8/0x210 [ 1191.864299][T21005] ? __mutex_lock+0x6c2/0xcc0 [ 1191.868987][T21005] kasan_report+0x117/0x150 [ 1191.873499][T21005] ? __mutex_lock+0x6c2/0xcc0 [ 1191.878368][T21005] __mutex_lock+0x6c2/0xcc0 [ 1191.882885][T21005] ? __mutex_lock+0x4f9/0xcc0 [ 1191.887575][T21005] ? l2cap_unregister_user+0x6a/0x1a0 [ 1191.892958][T21005] ? mutex_lock_nested+0x20/0x20 [ 1191.897918][T21005] ? __wake_up_bit+0x210/0x210 [ 1191.902896][T21005] ? timer_delete_sync+0x20/0x20 [ 1191.907837][T21005] ? _raw_spin_unlock+0x40/0x40 [ 1191.912699][T21005] l2cap_unregister_user+0x6a/0x1a0 [ 1191.917904][T21005] hidp_session_thread+0x3ec/0x430 [ 1191.923026][T21005] ? hidp_session_get+0x80/0x80 [ 1191.927885][T21005] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1191.933784][T21005] ? hidp_session_thread+0x430/0x430 [ 1191.939083][T21005] ? hidp_session_thread+0x430/0x430 [ 1191.944480][T21005] ? __kthread_parkme+0x7a/0x1c0 [ 1191.949614][T21005] ? __kthread_parkme+0x162/0x1c0 [ 1191.954775][T21005] kthread+0x2fa/0x390 [ 1191.958860][T21005] ? hidp_session_get+0x80/0x80 [ 1191.963722][T21005] ? kthread_blkcg+0xd0/0xd0 [ 1191.968316][T21005] ret_from_fork+0x48/0x80 [ 1191.972749][T21005] ? kthread_blkcg+0xd0/0xd0 [ 1191.977414][T21005] ret_from_fork_asm+0x11/0x20 [ 1191.982232][T21005] [ 1191.985265][T21005] [ 1191.987588][T21005] Allocated by task 20793: [ 1191.991991][T21005] kasan_set_track+0x4e/0x70 [ 1191.996576][T21005] __kasan_kmalloc+0x8f/0xa0 [ 1192.001147][T21005] __kmalloc+0xb4/0x230 [ 1192.005285][T21005] hci_alloc_dev_priv+0x28/0x2060 [ 1192.010291][T21005] vhci_create_device+0x11b/0x650 [ 1192.015296][T21005] vhci_write+0x3b5/0x470 [ 1192.019614][T21005] vfs_write+0x46c/0x990 [ 1192.023835][T21005] ksys_write+0x150/0x260 [ 1192.028145][T21005] do_syscall_64+0x55/0xa0 [ 1192.032588][T21005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.038483][T21005] [ 1192.040788][T21005] Freed by task 20793: [ 1192.044831][T21005] kasan_set_track+0x4e/0x70 [ 1192.049436][T21005] kasan_save_free_info+0x2e/0x50 [ 1192.054445][T21005] ____kasan_slab_free+0x126/0x1e0 [ 1192.059547][T21005] slab_free_freelist_hook+0x130/0x1a0 [ 1192.065010][T21005] __kmem_cache_free+0xba/0x1e0 [ 1192.069848][T21005] bt_host_release+0x82/0x90 [ 1192.074415][T21005] device_release+0x96/0x1c0 [ 1192.078999][T21005] kobject_put+0x221/0x460 [ 1192.083412][T21005] vhci_release+0x15d/0x1a0 [ 1192.087899][T21005] __fput+0x234/0x970 [ 1192.091868][T21005] task_work_run+0x1d4/0x260 [ 1192.096455][T21005] do_exit+0x95a/0x2460 [ 1192.100594][T21005] do_group_exit+0x21b/0x2d0 [ 1192.105164][T21005] get_signal+0x12fc/0x13f0 [ 1192.109650][T21005] arch_do_signal_or_restart+0xc2/0x800 [ 1192.115197][T21005] exit_to_user_mode_loop+0x70/0x110 [ 1192.120483][T21005] exit_to_user_mode_prepare+0xee/0x180 [ 1192.126020][T21005] syscall_exit_to_user_mode+0x1a/0x50 [ 1192.131462][T21005] do_syscall_64+0x61/0xa0 [ 1192.135863][T21005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.141739][T21005] [ 1192.144047][T21005] Last potentially related work creation: [ 1192.149734][T21005] kasan_save_stack+0x3e/0x60 [ 1192.154403][T21005] __kasan_record_aux_stack+0xaf/0xc0 [ 1192.159762][T21005] insert_work+0x3d/0x310 [ 1192.164073][T21005] __queue_work+0xc39/0x1020 [ 1192.168643][T21005] queue_work_on+0x128/0x1f0 [ 1192.173207][T21005] l2cap_chan_send+0x3c9/0x25b0 [ 1192.178053][T21005] l2cap_sock_sendmsg+0x1ae/0x2c0 [ 1192.183121][T21005] ____sys_sendmsg+0x5ba/0x960 [ 1192.187872][T21005] ___sys_sendmsg+0x2a6/0x360 [ 1192.192538][T21005] __sys_sendmmsg+0x2ca/0x510 [ 1192.197911][T21005] __x64_sys_sendmmsg+0xa0/0xb0 [ 1192.202846][T21005] do_syscall_64+0x55/0xa0 [ 1192.207256][T21005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.213532][T21005] [ 1192.215836][T21005] Second to last potentially related work creation: [ 1192.222486][T21005] kasan_save_stack+0x3e/0x60 [ 1192.227164][T21005] __kasan_record_aux_stack+0xaf/0xc0 [ 1192.232541][T21005] insert_work+0x3d/0x310 [ 1192.236871][T21005] __queue_work+0xd2c/0x1020 [ 1192.241449][T21005] queue_work_on+0x128/0x1f0 [ 1192.246022][T21005] process_scheduled_works+0xa5d/0x15d0 [ 1192.251548][T21005] worker_thread+0xa55/0xfc0 [ 1192.256122][T21005] kthread+0x2fa/0x390 [ 1192.260182][T21005] ret_from_fork+0x48/0x80 [ 1192.264580][T21005] ret_from_fork_asm+0x11/0x20 [ 1192.269338][T21005] [ 1192.271655][T21005] The buggy address belongs to the object at ffff888020f6c000 [ 1192.271655][T21005] which belongs to the cache kmalloc-8k of size 8192 [ 1192.285706][T21005] The buggy address is located 160 bytes inside of [ 1192.285706][T21005] freed 8192-byte region [ffff888020f6c000, ffff888020f6e000) [ 1192.299607][T21005] [ 1192.301921][T21005] The buggy address belongs to the physical page: [ 1192.308337][T21005] page:ffffea000083da00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888020f68000 pfn:0x20f68 [ 1192.319773][T21005] head:ffffea000083da00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1192.328681][T21005] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1192.336639][T21005] page_type: 0xffffffff() [ 1192.341040][T21005] raw: 00fff00000000840 ffff888017c42280 ffffea0000b86a10 ffffea0001aad010 [ 1192.349615][T21005] raw: ffff888020f68000 0000000000020001 00000001ffffffff 0000000000000000 [ 1192.358204][T21005] page dumped because: kasan: bad access detected [ 1192.364602][T21005] page_owner tracks the page as allocated [ 1192.370307][T21005] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13839, tgid 13839 (syz-executor), ts 734771164027, free_ts 734573445488 [ 1192.393409][T21005] post_alloc_hook+0x1c1/0x200 [ 1192.398205][T21005] get_page_from_freelist+0x1951/0x19e0 [ 1192.403751][T21005] __alloc_pages+0x1f0/0x460 [ 1192.408336][T21005] alloc_slab_page+0x5d/0x160 [ 1192.413018][T21005] new_slab+0x87/0x2d0 [ 1192.417114][T21005] ___slab_alloc+0xc5d/0x12f0 [ 1192.421780][T21005] __kmem_cache_alloc_node+0x19e/0x250 [ 1192.427225][T21005] kmalloc_trace+0x2a/0xe0 [ 1192.431710][T21005] macvlan_common_newlink+0x523/0x19d0 [ 1192.437153][T21005] macvtap_newlink+0x154/0x1d0 [ 1192.441900][T21005] rtnl_newlink+0x1542/0x20a0 [ 1192.446646][T21005] rtnetlink_rcv_msg+0x869/0xfa0 [ 1192.451559][T21005] netlink_rcv_skb+0x241/0x4d0 [ 1192.456306][T21005] netlink_unicast+0x751/0x8d0 [ 1192.461050][T21005] netlink_sendmsg+0x8d0/0xbf0 [ 1192.465805][T21005] __sys_sendto+0x4a9/0x6b0 [ 1192.470317][T21005] page last free stack trace: [ 1192.474974][T21005] free_unref_page_prepare+0x7b2/0x8c0 [ 1192.480431][T21005] free_unref_page+0x32/0x2e0 [ 1192.485091][T21005] __unfreeze_partials+0x1cf/0x210 [ 1192.490179][T21005] put_cpu_partial+0x17c/0x250 [ 1192.495021][T21005] __slab_free+0x319/0x400 [ 1192.499470][T21005] qlist_free_all+0x75/0xd0 [ 1192.503968][T21005] kasan_quarantine_reduce+0x143/0x160 [ 1192.509416][T21005] __kasan_slab_alloc+0x22/0x80 [ 1192.514265][T21005] slab_post_alloc_hook+0x6e/0x4b0 [ 1192.519374][T21005] kmem_cache_alloc+0x11a/0x2d0 [ 1192.524213][T21005] getname_flags+0xbb/0x500 [ 1192.528717][T21005] user_path_at_empty+0x2c/0x60 [ 1192.533573][T21005] do_faccessat+0x5b4/0xd00 [ 1192.538146][T21005] do_syscall_64+0x55/0xa0 [ 1192.542548][T21005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.548511][T21005] [ 1192.550814][T21005] Memory state around the buggy address: [ 1192.556599][T21005] ffff888020f6bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1192.564650][T21005] ffff888020f6c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1192.572734][T21005] >ffff888020f6c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1192.580779][T21005] ^ [ 1192.585875][T21005] ffff888020f6c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1192.593919][T21005] ffff888020f6c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1192.602163][T21005] ================================================================== [ 1192.612200][T21005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1192.619505][T21005] CPU: 0 PID: 21005 Comm: khidpd_00010002 Not tainted syzkaller #0 [ 1192.627418][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.637637][T21005] Call Trace: [ 1192.640926][T21005] [ 1192.643858][T21005] dump_stack_lvl+0x18c/0x250 [ 1192.648570][T21005] ? show_regs_print_info+0x20/0x20 [ 1192.653798][T21005] ? load_image+0x400/0x400 [ 1192.658329][T21005] panic+0x2dc/0x730 [ 1192.662242][T21005] ? bpf_jit_dump+0xd0/0xd0 [ 1192.666761][T21005] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1192.672681][T21005] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1192.678600][T21005] ? _raw_spin_unlock+0x40/0x40 [ 1192.683465][T21005] ? print_memory_metadata+0x314/0x400 [ 1192.688928][T21005] ? __mutex_lock+0x6c2/0xcc0 [ 1192.693626][T21005] check_panic_on_warn+0x84/0xa0 [ 1192.698768][T21005] ? __mutex_lock+0x6c2/0xcc0 [ 1192.703631][T21005] end_report+0x6f/0x130 [ 1192.707872][T21005] kasan_report+0x128/0x150 [ 1192.712374][T21005] ? __mutex_lock+0x6c2/0xcc0 [ 1192.717057][T21005] __mutex_lock+0x6c2/0xcc0 [ 1192.721553][T21005] ? __mutex_lock+0x4f9/0xcc0 [ 1192.726231][T21005] ? l2cap_unregister_user+0x6a/0x1a0 [ 1192.731599][T21005] ? mutex_lock_nested+0x20/0x20 [ 1192.736530][T21005] ? __wake_up_bit+0x210/0x210 [ 1192.741307][T21005] ? timer_delete_sync+0x20/0x20 [ 1192.746248][T21005] ? _raw_spin_unlock+0x40/0x40 [ 1192.751196][T21005] l2cap_unregister_user+0x6a/0x1a0 [ 1192.756412][T21005] hidp_session_thread+0x3ec/0x430 [ 1192.761548][T21005] ? hidp_session_get+0x80/0x80 [ 1192.766418][T21005] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1192.772315][T21005] ? hidp_session_thread+0x430/0x430 [ 1192.777693][T21005] ? hidp_session_thread+0x430/0x430 [ 1192.782990][T21005] ? __kthread_parkme+0x7a/0x1c0 [ 1192.787937][T21005] ? __kthread_parkme+0x162/0x1c0 [ 1192.792963][T21005] kthread+0x2fa/0x390 [ 1192.797035][T21005] ? hidp_session_get+0x80/0x80 [ 1192.801893][T21005] ? kthread_blkcg+0xd0/0xd0 [ 1192.806474][T21005] ret_from_fork+0x48/0x80 [ 1192.810891][T21005] ? kthread_blkcg+0xd0/0xd0 [ 1192.815468][T21005] ret_from_fork_asm+0x11/0x20 [ 1192.820227][T21005] [ 1192.823631][T21005] Kernel Offset: disabled [ 1192.827943][T21005] Rebooting in 86400 seconds..