last executing test programs: 3m57.741947149s ago: executing program 3 (id=187): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="004a5ee0571b8b8ed0f6a48d325fba60ad6f06000000000000007c070002000000000021b507dcf20b43396d320c73fa0435a17ef90d9e367a72143ad49101519c27821d8fb92ae6ac27790cf4b0e5ba4f28f0717d21815a8c028cd891adb9ed510bc262d300000000000046d3817e28effc50f2bcd60c4d947d5e38e19ad1850bfeef8025459fcbf2f16438c2624c0c3a1323988be1f74e65c5098522bae8e8ba957ad8774e4e665c9a4ad49144e3f9ebfe06eff9b8edc7440e932e133e228e344bd22a3ac2e2d3a9f006a3aef51a7aec57bbf2c360e284b902ade529a9140c889a18f357d7a424f96ca02d9b917784e84246cfcd5ff450a276bd4c8b77aae199342dc8ade5b0d1f9f54dd440ae3736fb92ba0e088ab18dd6a79e96e5cf2f97f41a90c175ee9590a2033a6a1a64c3"], 0x0, 0xac, &(0x7f00000000c0)="$eJzs1jFKA1EUBdDrCMPYuAH3IC5BF+EKLC2nUgTdkFtxCbapUqRNkRfCMMUEBhIIIYFz4BeXz4X/ec37W/8+5D6p76SqfjKonf7j871Nmsxo5y64GuNwu9SmasjLl+Q5yU2S2yT/q6+38ezVXruxfpSn/mQfAAAADtbkcZonm/zi7tzvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg02wAAAP//7ageKw==") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_bridge\x00', 0x10) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r0, &(0x7f0000000600)={0x8, {"4618b32235698d2480e3d5e924ab813abed972cbba84c2efafe6817d42cc5b36692bb66430ac4d062b6e4be92332046726006964fc2c4d02eb83d50003d285ab8fadf8e892387c4971378809743940df3438b1cf7289a2623f151b163a4483ab2e206a1dd541cb166da89445afdfa1f1b8a8b3a23e8b964a7ac2b58bd5316aa11d47539152b38b175b3687b59e2f0a5913a38d04eb3621c6e4fa7475619eacf91710c64e9ca060cd274cd3072bec4d287767514f0a234d55c1025567a4b88399b6752eabe87c721758520af5abeef9cf68471d8ef3c61d678b24bd586b4f23a3110e462fd275eb7b0cd222d3298ccb1a093b7f0c7124e3b20f5c9315d1d4cef87378103d725d174cd716e5de1bb155355950bf8917b3145b2b71945a438a4b8239d25b8721b2e31c2d7483aca67786612f58eb79ece995351af78da0223017ecda5dbc4d6a675a2605050beb7129b40ced820ad636abce6ce1ce4c8946a61e7c5c81d727b7ebf3476bfa0b2e6bae677621d01b519b6f2e5930224679b28f863213014da56e241eeaa73a23104589bccd4fae2ef10c880b5fa41cbcbbb3f7f38c0798356dd1c185c6e7ea53e559e06593c4acfaf481810ba1e9edb08326d857bbb5b60e60f95eee72411c64142dd311a02c0ef22799690364bc44ad78906de735ea4ff24ce2fb7e235fb38a919833bb4f6ad089322e0fc264db4dc26fe270103c486ecaf0a4d3e08da3c8ecf13b1da162de65fdabd826a55d17036563623ba95da4e24f67320769647e3b0852129c1c067e85a5ab70c87e62fae22f14402f17b137afa542ab00e21d237a4ba0bd1c2fdaf1aaad7ffed41a439f058173c0ecf6fb24a0a4403fc4cf4f4fb7b77135c7e0dd55ce4d92ac79daa22dec784efbc6e5d1a1d7344cfde9755ac77b0b69abb7f6ad327c6549d1bc27096e7c3a27e2cb354b7b4797c12988d27d972d2631f5f3d727c4b967a8f77324c4db02018e29dd8b94b42ec9cf364d9878497e335f63c8ca0f6369584ceb90a86835f7a73a4698742fe7809f45db24815f9a44fa4ca89ac7fad97753dd8204c1621dd328ec30442dd260301f26d28fdceab0af55ed5b2f9888a49abdd513f129a290f92f91a9bfb757d70c11e6284b3efeb022f911515b0a12a5c271432e506ef5883b9474a235402e15c4b478215c448b351db659a00c4920edb6bb17668fb2f179b7901d758c15a35202e71fdc1620f25984e39d241522504be42abbf3541ffbc1e411fafb80491aafb1556e448f950717b1981fc5812814298d502136931e9051541b2e9ac3a3d10aefc9d0b02be22c0f7968ac5197d822cd851dcd6cf8f5b44ce3b66cd7146f33a99ce01e93eabb90bfe7316c3d9153ac64cf7f653f64a6c89a90f7e6efe9fadd11b10ec771097b50a35908edc30266c4dd1672accee784257b57ffad449c26ce920fe5259f07caa94d71b882cc96d7f17f5a25a0a7dd30c6d761337cc6b3ea4e3fb2fab73401646bbef40d5d64bb5fe466ca34aa502bb0fb435e9b897f3891f561970e533ead73cda912cd2ca85d85aaff9ef7e387e3c020d9f88c98c9b148928fb7a760eb471c56ba65a8cb3a16eef30950adc045827338f6bfe846d8cd72c7339b4c5cc25db89e37ca3724971887c79f555dc537c3f290ea46c5d94edd335fc3cfd0fc2118b0410b9df5d94bc99d957cb76fc8a4cb6e823190ec28984792fdc372c65d923c47446b0355ec33b8f1c401f72e8c976d8de97c37352c332262f583991c7d4eb5bf6d44a6faa39de5972d5a77fadf849913e9cdde80eab9f84ee10c74d89b35a1641c52a188f5a01bc3eb87f9b7dc98c4cca6ab4effe25f582a8b20482a5bee3f567a450bc0964490c24eb798ffe647dd6a9a62662e53f6d9ea476506100fcfd18b4b3f3daa432446336a6cb5759157ff1090a1d2fffe71d530e5db1ec4c97264ce71cf2ee5e8c8623aed2c4d8dba5214eaad4feaf7528af26dc6ff1a37d50b8481245befd139a1e3df1789a4de7aac315240d9cb3ed95ad7469c8c54cd7e227b4e27ada19f66e598fe20167fe6378bd30a29f89bba6b66606cf09763d64bdec5bdc806152e103ebb98dee1ed2eb9b1b13808297dfe506c7dd2a1755666731c2d75a49a1556fbad5c368c82d4ba52106c4511c260d5946641b7a11d2447ab0b67c52262358bd182911b1b67294244942a55b0ff090e5f09104e6d8767184ac654548b8dddbb3c74b3048f5b9fad69c09408f10b3df1b0803f6ed4ffc56071efc22d0ef36b53f2555d9ec85ed7b2dff754f707a23feaeedf4b14c57952da149922a85d025a54cb9448c6af3f00bf6ca7a32ba5d202abac9bb3b0799f2604c1bbb67fa8a15c475b0dead7d49033c48701bc80c482f679507233d841af98f71c271ffffc53a7f8e736df82453b83385562e29c271f3a3969182e2a8ed7bde0d17fa82ac48fa167f5815453754144241cce52feb388ef5b07deb082cb792d4af117694f70d260a19668f34472f6d21c9d360ebe60eb60eea5d9e0bbfa5c52d1db6ac0ae51aeb73a205e04d633598cecec7779e9f7b34f5e2419148edf8e2e87d481db6fc1b455f54118fbd45065b6f4b0b8533dd0c3c209ef5ed7a88828771dfc1e7f014d9706e08e96176cc94bfaa5e40a03acfaec74560ceba43faa3d3672e8815b704aa92a348b09a3369bbf312f73d966c854ac013cb423bfd4e6f86a5cadabfd1d70b19399ef3d5e0267129f0c4c9e2651e20ed0af3e35f8323cdaa14394598c07bf022c399d97a59d45f6242a4f1c37b0a0ce52a569bc67c45d64004daab930546b56052202cb521b57db657832e6695579ae86f3f2e8ef1a538f781a2fa14f7659a35928fdeabec80b6f57a7f7226aaa293c1139fc6eaf90d1c7c4503e1985366b018ac7d43ed700d27a428a5caf74eaa7ec6923a081caf56d972fd8cbb23442f00de1609cdfb2f26fcdbce73886bae4983eb3a562beea9c4aa7cb2910de2ef8d8e61abdb74b95632a5de2c92d696490c4ad6c9a47d04db989ed92a6b04bcf260e307745d89d06c0a7d47f7b0613d70c7053b78a3e9b5811bd03d77bf5c72df25531683eb168284e3086a5d31c41b4ee29ada2431a2eab32012d7210fc0fcc34444d62c2059cd4c090138d803ae85094a9ffed1b19e8ab6b1798d039c471c595b3fa231d3ab28317045e246cf44de4d6266e01b1beb57bccbb7ee02633e96512f7d5f6e200dcc0c3ab8754001bec2114f8501caa9b30c3ff77a46774cf162166fdd034f870dcf1f5cc540019b221b5ac55a53bf3df026965d8905a140905d9397a48545fa4f4d44036b2bb4ca61db0e8cadf69e83e4d617e6c9d17adffa2d62ab7f9e04a0e56035d931cc469601e9c8fe338d5c096970790bf7d2ebe34ee17b53f7ce88df94ca6811216da7f1d2a34c7da5e8f9b5fec2ce64ed55b54fde28298c1c549f8a23970a97674f788344905feb5183b589d8810b177a8a4a1f29c4301862f8e31d9329b747efcd2561a00bbc620b8a36eadaadb7efec686750196589a3dd4337824bc1f472a48c744122a3a1a42b437d841f9876a0f6ebad118f26b5487ba08f1ef1cb7e2de5a8a2dc5593a4721c7853518f90ffc9e4ccae859a8f3e116258aba4141ce09f59cceb79107c7c23550769eb5d7a04e5acca2aad2e27521035bc83dbf321ec0413d088cfa725a52e7013b4648940f28d0afcdebedf6930a8c240867d3fc166deec3450ed0694d0067c832dcb9bee6d525586d0283e55508906e00a9fe6e98d90a02078b6da9d9bea2a99f880ec342141842eea631526c24d4bbbe2c7a11df9cb30abd94dbb7c71bd6756babb78dd6ba50419d07666242dee5cfd6f2a433eb3b0f5971d10b572d07aff3cad60127eb256211a282a1ea26caf798fe7b0cb46a82537d428d89d9a3c8eef45f71147dcddd4b02c4bd0b401c8f4cabf3e8406a48b7f1b542d713cde0940229fe231f9a4fb910506b873c918d7f9483898bd1edba9f102bcd05d0aa3c9ce00340a3a3edace5a1c6d69228569d7abd586eb05138eea5ad7e3996f8b7b89c90040d86f33afed93e21643c7660855128dde43c230858baaf25afe9d70f0b8c5aa9cea39797fb8d1155381525f1d04ad19cc1a2b8aab3b32a257120243892aaaecc62dfac67d3716a6417109047e25406f609447de30479c7d38e95c3e13a37033ea4fd79dc904b39cbb8bc36b2e27e15b7bf7a01bbeb6ad714abfe2603f12517ba8f6c8aabc3abb83d18a6c0220c6c839780c322a8a8fe3b3d90bfacd6b2002886345e68389ab858aed23f700c71648e37ed01ab85274351428af807113fd1a787039170501cc05f9557347457ce67c4905bd755bb0fcdb6e2a68688f758ae3837f23735ad6bb86697a1cf9b29447a71147c655fc235d62e680ae9bc6371e02ff431afaad8a2fe1368505288640c405798f5fca3ab1ddc34c94e2996b0a7a619ae13fd353205f607790d0992caf121b2e46310e566a0f12adf0cc91cedb4059b473a767a59f80d80ccd044039a5a950676092111ca2714af72f11283ea99c955423d51d88c0bd52894bf7c8b57ecc65b0ca578f98f497e0f7fd9882584b2494747947838e89011c244172ee37b0b829317638edb2285cdaec0c8854f9ae1af1622208f8765bcc1402ae3c11119fb87bce7b3af7048d54dc21543aef7372848daf9e3a48f813f7785ef4af15a49ef24a17d7aa7c45c8c2b19d166628ba15e7d5a8e675cff41e172df59654871aec24f4637b3ffeb9f30bf36a8252aa83ff1336ed08691e32da080d9f2251629d9f2be8b23dd711af39093b3563f631f69f90e6955bc1597f3652d2da0508bbb232f3c2aa239e4eaefd11522d57fdeb3ce67d225f28807fe914b41b800723520ba67715e09f88caf69fea58cb962c9fbbb37ea9913fdfd5b10a4653613ae6772083cc2a73a7e605a3147bafad87d968c96e446702aaf3d0ff51d5ad44894ff7af6ce84e609ea4d22eb9bba3733643c677526b94ef6f60ff5af94ef32c6d158cc31eee8a51f669d728bde8495cfbfa7a34c50ffc560e42c8b00940e187ad17961d9b63dff9973e45f7bec168c30ed71f44c6f06de31ea04538708456831772784980ee215db518a05a7401db06f19121f23afead67a951b388657886d08e795371aa47f6a5bd231160a70f1c264ea2d2869ab9a458fb44ec236b3f0280a8ab4baeed1bd9fc52d12d1a7c11b10d426d98313d268741cda6f9256a738adc4a41b07f849d9e6a258e7ca336879aac2e92f99929a97658fb8a2645267120ddc0ceb2d07fc8f838f0fa1a978edd92f853d44181aaf5571ba37b4935f284f3407e10f617db8962bd33b95a3afe7483ae011b1ec2efb6acb217f65a61bf91b86077867d7c10a2c2f581708da1dc4436224d8554366fb442ae3713f2a7e600618544c4bfe8f13ac0b6bd9debcd47ea48df202f7fe1423fd849412abcdf08cae5ba45ed0ecffce031e42bfc627d855b70531b7c7c166472505356ad8efc169804793302b2b1baa6bd2892905640dd31a9db0b7decd5f627e794e0061b35581f6e00d554576178e4c18c03778aa4e61cdc18f6d1656196c2b4b06222c53b219a074761d97874563199f271cc50ec215dde0d2ef4d5af92bb7a96c333b146ab3416cd0d913088b5025ba4300d395f5e51b684d3f2b55271666e440a4a7940ea61b798010f8684856d9f8ab9f21a365754b24b4e694dec94fde89b3db3926eef19f48ac16316b549f5973c4ad2fcea5c186d5e9d174230eaca4402d5572197e83fa57", 0xfffffffffffffe44}}, 0x1006) 3m57.301809807s ago: executing program 3 (id=193): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40) socket$pppoe(0x18, 0x1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={&(0x7f0000000700), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 3m56.783951446s ago: executing program 3 (id=202): unshare(0x20000400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff3, 0x2}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m56.623194398s ago: executing program 3 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fanotify_mark(r1, 0x1, 0x48000004, r1, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 3m56.504069231s ago: executing program 3 (id=206): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 3m55.743900114s ago: executing program 3 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000180), 0x2, 0x608000) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) 3m55.586324387s ago: executing program 32 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000180), 0x2, 0x608000) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) 3m41.662396322s ago: executing program 2 (id=265): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x688, 0x50b, 0x2, 0xb10}, 0x3fc8, 0x0, 0x1, 0x6, 0x7ff00, 0x4, 0xb, 0x17, 0x1, 0xfffffffe, {0x3, 0x8000, 0xa0, 0x7ff, 0x1, 0x8000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe2}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x20002, 0xfffffffa, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x1019, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x1, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x836, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xcd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0xfffffff1, 0xa, 0xb4, 0x7, 0x4, 0x0, 0x0, 0x8156b2a, 0x2, 0x8, 0x4, 0xa0, 0x4, 0x7, 0x4, 0xe, 0x81, 0xff, 0x2, 0xe6b, 0x80000000, 0xa, 0x8d4c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0xa, 0x44, 0x1, 0x0, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0x13, 0x4, 0x2, 0x2c000, 0x84, 0x1, 0x101, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x5, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xffff8000, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x6, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x7, 0x10, 0x6, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x3, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x10001, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x3, 0x9, 0x5, 0x3, 0x4, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000003, 0xfffffffe, 0xd, 0x66, {0xb, 0x0, 0x202, 0x260a, 0xfffa, 0xbe}, {0xd9, 0x2, 0x8, 0x800, 0xfff}, 0x6, 0x9}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m41.469481046s ago: executing program 2 (id=268): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r5, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) 3m41.295453149s ago: executing program 2 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000100)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@noflushoncommit}, {@usebackuproot}, {@notreelog}, {@nossd}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38, 0x67, 0x6b, 0x32, 0xb61148b71cab6665]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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") syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000082}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0200000000004200240012800b00010065727370616e000014000280050016000000000006000e00d53c"], 0x44}}, 0x20000010) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) 3m39.733233276s ago: executing program 2 (id=276): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x2000000000000178, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendto(0xffffffffffffffff, &(0x7f00000006c0)="8b80985ec4058dd7d4a5dba00490f80d7406e1ae9726234ecaf2ec68b17e52da3ec8cff8e4f6648e8c832612c5dec41ad97eb53044b2476b509dd30bfe322a81df55423ff349fca326845ad0036edbdf7afde0985ecb8da40f135797cd0e1373edef19e9f9bab17d8bd5ed7a640cc196879ea6dad5287191c3fd6dff83865281f7fb32c6b989d27dfc2ff43719f75c13895f052cc66f3026e01df42a64bec292e68fa0e9414ec7d925", 0xa9, 0x50, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r3, 0x0, 0x2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m37.356477128s ago: executing program 2 (id=282): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m35.700626707s ago: executing program 2 (id=291): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4608}, 0x18, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004", @ANYRES32=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="060000000000000002004e25e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) 3m35.497771441s ago: executing program 33 (id=291): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4608}, 0x18, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004", @ANYRES32=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="060000000000000002004e25e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) 1m59.217146578s ago: executing program 1 (id=612): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(r3, &(0x7f0000005180)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8755, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x76, 0x0, 0x4, 0x0, 0xc88], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfcf, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c10], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1m58.085674888s ago: executing program 1 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m55.898065217s ago: executing program 1 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012100, 0x0) 1m54.171375568s ago: executing program 1 (id=627): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 1m53.219754064s ago: executing program 1 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x7, 0x6, 0x2}, 0x74dd}) 1m52.412067048s ago: executing program 1 (id=637): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 1m52.373088019s ago: executing program 34 (id=637): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 12.107140897s ago: executing program 5 (id=899): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x243, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5a042, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff) 9.976282304s ago: executing program 4 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) 9.08819098s ago: executing program 4 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$inet(r4, 0x0, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) close(0xffffffffffffffff) 8.548991909s ago: executing program 7 (id=910): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r6}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 8.204501206s ago: executing program 6 (id=912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10, 0x1}}}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000005c0)=""/220, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) 8.148533667s ago: executing program 5 (id=913): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 7.362949211s ago: executing program 7 (id=914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) socket$inet6(0xa, 0x2, 0x6) ptrace(0x420e, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 6.932536178s ago: executing program 6 (id=915): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) socketpair(0x1e, 0x80004, 0x0, &(0x7f0000000cc0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.672752493s ago: executing program 0 (id=916): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1, @empty, 0x9}, 0x1c) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 6.672327043s ago: executing program 4 (id=917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 6.453043007s ago: executing program 0 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 6.429648787s ago: executing program 6 (id=919): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) 6.004669704s ago: executing program 0 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.805547348s ago: executing program 4 (id=921): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@nobh}]}, 0x1, 0x498, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5a042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000000c0)='syzkaller0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) sendfile(r0, r0, 0x0, 0x7ffff) 4.988422182s ago: executing program 5 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) readv(r3, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/216, 0x2ffe}], 0x1) 4.891569184s ago: executing program 7 (id=923): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) close_range(r4, 0xffffffffffffffff, 0x400000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 4.796791956s ago: executing program 6 (id=924): syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random='\t \x00', @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001, {[@rr={0x7, 0x3}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 4.204700186s ago: executing program 7 (id=925): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="7bd62f3e5c03e3cc8581c284", 0xc, 0xfffffffffffffff9) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TCXONC(r3, 0x4b3a, 0x2) 4.184855186s ago: executing program 5 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x40000) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2.146685763s ago: executing program 0 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.843597968s ago: executing program 5 (id=928): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x1ff, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) 1.839074838s ago: executing program 4 (id=929): mkdirat(0xffffffffffffff9c, 0x0, 0x10a) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 1.060985092s ago: executing program 7 (id=930): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(0x0, 0x4, 0x92000) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) socket(0x2, 0x80805, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) socket$tipc(0x1e, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, 0x0, 0x5) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0x13) 1.059944362s ago: executing program 0 (id=931): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) fanotify_init(0x500, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x879, 0x1, 0x4000001, 0x1a3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x10f0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r0, 0x60, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.018316472s ago: executing program 6 (id=932): socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000000000042bfa30000000000001602000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000260404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000005b000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee51050512b5b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be7f8000000000000dbc2777df150b70639e25b7496cb8dcdd77b85b94109a314fd0840028f2ed1a4535550614e09d6378198a60978670838337af2abd55a87ac0394b2f82ffab7d153d62058d0a413b2173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9b31f154e89d485b1f7fc09a30f115646d14ce53d13d0cca00a1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47ffeffffff00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa778100000000000000488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a7c2211fe4fd21a18986252a70f8f92eb6f0e8c7db35036865445971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f8d791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20faf791ec85821d0c48fb657c29b302b0d2277b44af326f36f3e2c25a61ec45c3af97a8f17da954a9b34f79908755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d4100d8bda74d66f47cc180f82c5f573c6d294d1665016ac59de637b30824d822133a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389c69608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b905c0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5826236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d949a3564cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044dd539f5096412b926b2e095b84000243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000000000000001c80000000000000000000000091bee53595a779d243ac8cea769b10424d28804c026ab7f4a0281921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee8f8a836804ed3a1079b0282a12043408cd600087dc0dd22b634350761b9867682e11d94fff91af19f2f8df175d60a2892e456f5f4042bd13da2022f23daec61854f640f703db027665006e74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfac92e6de9200000000a1f6c5572a9ee7f7c8a5098600000000009ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009d9c209644bb1cb603cd60a9e241435fe82d5a96b09c68c73de2f04f15d0053875732f2258aea65559eb00e76e9d092a2a60ca770663da451080cc36000906d5a9fad98c308e89bd5ffb6151d79c1cee1cdfba05e3633becd937d7a15762e5f5a3a0bc33fdbe28a0800000000000000c92fe7f791e8f6029309508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd43758624600e78f4458542b14f29611f95d4a2aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6820b6ec96280000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000000000000000000091e12aacf2ed9ee91cc82777c6a0da37e0219260f2944eb77cb7a20ab7ebcc2fbe2a986be27eacc454147267b05cba055cda2a57efefcb9a8761bc052bbb7f4167245753d31e7c1120a886bdf372ce255ca3c2aa8b0ebe42924db5d6d81e9b1514172e2f3fb1b46a1f7561b65c265b742d792d4f572d860718b5d9e94631657021612f6c974d10769e47575509bfe2d6ffa6cae835b0f492d32d12116c95e0b3b31713c20beae2dd340d7b67c3bed62b682a12363608d736289610fa01000000010000000d6f033f8438b57cedf532ee34e42b4041a682f54dc7b57200762d45724151014b733d497190f9ab3d5bab1f0635025ba9baa3a09b886e08c6bbd6e158f8e1c4ead2dc5bb4e2976a8383d8e415149455dc78439ae1b026ef03dfaa1f197a3b8ee7fcd1e39f5600a5c978584f97df1aed893821775c9b762f5acd2bf9a0eb18215ff90fe336bd75d3e8f704662d4084fa582afdd73d23546ae0abb118bdde3f4d08661e7937b8631e7439bf23618d3f7ab482dde3249f42e660496098f30e38e152ead80d7291b54da4a3b08b8fd7ddaa830ec5933a0a674334b8d4269e425b9fa0255f3ba988cfd9ae6ed8154b633a0f108f3245d3a0212586e6c5762db4076d9ee42836d3000000000033baf08867c22a29335ab8976219d500c855a5642fd6539bac21f429e40740cd4c5ba3cb49da499c1a2c6bfb6b0e2e8d168bcb79f8054de46aeaf1d44c1f0958f24a93b88ac8d146afb94977527721e16dcfe4e014ee5a503cfe6ea2ed7fad0e83056941507016489f38643c128f5f37b453d811b185551bbd08336abed54a0e2419b1a0e53214dd296d152cf82f42472bf1fd52a22efdd111977d3cf6f20e942df77792fda2c99bee3175defd519b4fae37fc1fe86ed99335ef2ed821c64af516ac03585ec43071f5cc6030cf855b7e5d725aa8e9b7bf6d7b27a4e4e2fb2ed2501e5ce4435f8cbc0ad746c1b60d60f23d892939c96f750cd71824142404c26992c49c916b82bbc81c8d93c537c3c38cd58d0b4a64ddf9c55a7506c8cce89ff51c8ad5e63d1e2d1fd945635c130b4ad0dbcead5ec8cb3be6a0a82cef44e31148d94bd7edc9e94a4e295f1743754a5ee9f444a10838"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 942.471284ms ago: executing program 7 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="9d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x3b) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r2, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 821.025986ms ago: executing program 0 (id=934): pipe2$9p(&(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 561.98035ms ago: executing program 6 (id=935): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socket(0xa, 0x3, 0xff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 710.79µs ago: executing program 4 (id=936): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 0s ago: executing program 5 (id=937): io_uring_setup(0x177f, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) kernel console output (not intermixed with test programs): 00 00 00 00 ......?...?..... [ 108.241688][ T4084] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.244050][ T4084] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.246445][ T4084] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.248783][ T4084] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.251859][ T148] XFS (loop1): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 108.258784][ T4084] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.261928][ T4084] XFS (loop1): Unmount and run xfs_repair [ 108.263425][ T4084] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.265430][ T4084] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.267900][ T4084] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.270458][ T4084] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.272715][ T4084] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.274969][ T4084] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.277987][ T4084] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.280555][ T4084] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.282898][ T4084] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.285337][ T148] XFS (loop1): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 108.286063][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 108.289874][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.293432][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.295647][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 108.298974][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.301531][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.304130][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.306647][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.320072][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.322567][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.323270][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 108.326137][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.341692][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.345309][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.351203][ T148] XFS (loop1): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 108.353837][ T4944] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 108.358167][ T3616] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.361661][ T3616] XFS (loop1): Unmount and run xfs_repair [ 108.363188][ T3616] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.365060][ T3616] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.367347][ T3616] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.369822][ T3616] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.372044][ T3616] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.374282][ T3616] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.376517][ T3616] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.389614][ T3616] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.391655][ T4946] device macvlan2 entered promiscuous mode [ 108.392045][ T3616] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.396013][ T148] XFS (loop1): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 108.401203][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.406097][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.412290][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.419013][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.433608][ T4946] device bond1 entered promiscuous mode [ 108.435352][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.442090][ T4946] device bridge1 entered promiscuous mode [ 108.444075][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.444082][ T4946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.453392][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.455954][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.458523][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.465320][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.467699][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.474435][ T148] XFS (loop1): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 108.478301][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.481451][ T4946] device bond1 left promiscuous mode [ 108.483054][ T4946] device bridge1 left promiscuous mode [ 108.486831][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.488452][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.496327][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.499037][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.505668][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.508388][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.515198][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.517700][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.524662][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.527137][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.533947][ T148] XFS (loop1): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 108.537480][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.546579][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 108.556617][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.563440][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.567805][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.577083][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.584009][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.586669][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.589143][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.596328][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.599009][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.606025][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.613496][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.616465][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.618028][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.628093][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.631111][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.633488][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.635878][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.638264][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.648878][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.651713][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.654184][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.667798][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.678488][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.681312][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.701340][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.706038][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.718879][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.724810][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.727326][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.730308][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.732811][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.735228][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.739277][ T25] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.743322][ T25] XFS (loop1): Unmount and run xfs_repair [ 108.744973][ T25] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.750765][ T25] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.753321][ T25] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.755729][ T25] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.758121][ T25] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.761252][ T25] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.763844][ T25] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.766259][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.768717][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.775008][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.777943][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.789004][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.791504][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.794151][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.796533][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.800572][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.803081][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.805621][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.808026][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.811385][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.814384][ T3616] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.817327][ T3616] XFS (loop1): Unmount and run xfs_repair [ 108.818977][ T3616] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.826057][ T3616] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.828518][ T3616] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.832784][ T3616] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.835305][ T3616] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.837641][ T3616] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.862659][ T3616] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.865030][ T3616] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.867481][ T3616] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.884042][ T4870] team0: Port device team_slave_0 added [ 108.889958][ T4092] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 108.895076][ T4092] XFS (loop1): Unmount and run xfs_repair [ 108.896770][ T4092] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 108.899107][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.910266][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.910468][ T4870] team0: Port device team_slave_1 added [ 108.912715][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.929216][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.933157][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.935450][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.959635][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.962176][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.968062][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.972008][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.979694][ T4870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.982331][ T4043] XFS (loop1): Unmounting Filesystem [ 109.024424][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.026306][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.059459][ T4870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.897750][ T4084] Bluetooth: hci3: command 0x041b tx timeout [ 110.980138][ T4870] device hsr_slave_0 entered promiscuous mode [ 111.023077][ T4870] device hsr_slave_1 entered promiscuous mode [ 111.037566][ T4986] udc-core: couldn't find an available UDC or it's busy [ 111.050217][ T4986] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.082384][ T4870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.084487][ T4870] Cannot create hsr debugfs directory [ 111.097572][ T4986] mmap: syz.4.239 (4986) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.127806][ T136] bond1: (slave gretap1): Releasing active interface [ 111.560624][ T4996] loop2: detected capacity change from 0 to 65536 [ 111.701822][ T4996] XFS (loop2): Mounting V5 Filesystem [ 111.776980][ T4996] XFS (loop2): Ending clean mount [ 111.788619][ T5007] loop1: detected capacity change from 0 to 2048 [ 111.940416][ T4870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.957101][ T4084] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 111.960387][ T4084] XFS (loop2): Unmount and run xfs_repair [ 111.961874][ T4084] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 111.963732][ T4084] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 111.966015][ T4084] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 111.995062][ T4084] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 111.997405][ T4084] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.009192][ T4084] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.019651][ T4870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.020611][ T4084] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.024690][ T4084] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.027083][ T4084] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.030560][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.033187][ T4194] xfs_discard_page: 24 callbacks suppressed [ 112.033203][ T4194] XFS (loop2): page discard on page 00000000a8eae831, inode 0x29, offset 0. [ 112.039867][ T1960] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.042602][ T1960] XFS (loop2): Unmount and run xfs_repair [ 112.044073][ T1960] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.045973][ T1960] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.048933][ T1960] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.051571][ T1960] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.053847][ T1960] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.056158][ T1960] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.079479][ T1960] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.089054][ T1960] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.092265][ T1960] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.113969][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.116744][ T4194] XFS (loop2): page discard on page 00000000e7575c9e, inode 0x2a, offset 8192. [ 112.120533][ T1960] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.133022][ T4870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.136080][ T1960] XFS (loop2): Unmount and run xfs_repair [ 112.138773][ T5018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 112.141946][ T1960] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.143957][ T1960] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.156372][ T1960] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.158849][ T1960] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.162966][ T1960] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.168135][ T1960] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.176974][ T1960] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.179939][ T1960] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.182419][ T1960] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.184833][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.187588][ T4194] XFS (loop2): page discard on page 000000004fda1c66, inode 0x29, offset 4096. [ 112.199511][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 112.214221][ T7] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.217182][ T7] XFS (loop2): Unmount and run xfs_repair [ 112.220905][ T7] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.222851][ T7] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.225209][ T7] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.227646][ T7] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.229074][ T5020] smc: adding net device bond0 with user defined pnetid SYZ2 [ 112.230778][ T7] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.232648][ T4870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.234228][ T7] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.238598][ T7] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.241700][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.244027][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.246735][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.257985][ T4194] XFS (loop2): page discard on page 000000001042b6ab, inode 0x29, offset 8192. [ 112.261842][ T4092] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.264638][ T4092] XFS (loop2): Unmount and run xfs_repair [ 112.266086][ T4092] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.268021][ T4092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.283080][ T4092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.285502][ T4092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.287764][ T4092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.295173][ T4092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.297513][ T4092] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.300132][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 112.304876][ T4092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.307845][ T4092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.314771][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.317503][ T4194] XFS (loop2): page discard on page 00000000bc9f826b, inode 0x29, offset 12288. [ 112.320910][ T1533] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.323752][ T1533] XFS (loop2): Unmount and run xfs_repair [ 112.325378][ T1533] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.327333][ T1533] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.329815][ T1533] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.332253][ T1533] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.334499][ T1533] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.336700][ T1533] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.338920][ T1533] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.341355][ T1533] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.343608][ T1533] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.346028][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.352153][ T5022] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 112.379832][ T4194] XFS (loop2): page discard on page 00000000da2ce2b3, inode 0x29, offset 16384. [ 112.386035][ T1533] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.389121][ T1533] XFS (loop2): Unmount and run xfs_repair [ 112.395551][ T1533] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.397711][ T1533] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.409685][ T1533] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.412134][ T1533] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.414496][ T1533] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.416783][ T1533] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.430639][ T1533] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.433093][ T1533] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.435425][ T1533] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.437802][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 112.446942][ T4194] XFS (loop2): page discard on page 00000000e9f100e6, inode 0x29, offset 20480. [ 112.475064][ T1533] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 112.493971][ T1533] XFS (loop2): Unmount and run xfs_repair [ 112.501342][ T1533] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.512199][ T1533] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.519280][ T1533] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.532860][ T1533] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.538810][ T1533] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.545062][ T1533] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.548304][ T1533] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.554989][ T1533] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.557526][ T1533] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.929513][ T4085] Bluetooth: hci3: command 0x040f tx timeout [ 113.095079][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 113.097824][ T4194] XFS (loop2): page discard on page 000000001c8dd5a4, inode 0x29, offset 24576. [ 113.106264][ T4085] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.112987][ T4085] XFS (loop2): Unmount and run xfs_repair [ 113.114575][ T4085] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.116512][ T4085] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.118746][ T4085] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.121481][ T4085] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.123746][ T4085] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.126051][ T4085] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.128339][ T4085] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.131234][ T4085] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.133561][ T4085] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.137988][ T5020] device macvlan2 entered promiscuous mode [ 113.148452][ T5020] device bond0 entered promiscuous mode [ 113.149790][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 113.150993][ T5020] device bridge1 entered promiscuous mode [ 113.152568][ T4194] XFS (loop2): page discard on page 000000002f8b8457, inode 0x29, offset 28672. [ 113.154794][ T5020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.158717][ T4076] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.162462][ T4076] XFS (loop2): Unmount and run xfs_repair [ 113.163999][ T4076] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.165897][ T4076] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.168284][ T4076] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.171940][ T4076] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.174322][ T4076] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.176672][ T4076] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.179183][ T4076] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.182307][ T4076] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.184730][ T4076] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.187290][ T4194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 113.191006][ T5020] device bond0 left promiscuous mode [ 113.192629][ T5020] device bridge1 left promiscuous mode [ 113.194440][ T4194] XFS (loop2): page discard on page 00000000cc3b6a4c, inode 0x29, offset 32768. [ 113.197212][ T4085] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.200654][ T4085] XFS (loop2): Unmount and run xfs_repair [ 113.202506][ T4085] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.209636][ T4085] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.212191][ T4085] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.214521][ T4085] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.224651][ T4085] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.227113][ T4085] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.234275][ T4085] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.236709][ T4085] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.239132][ T4085] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.257686][ T4085] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.264850][ T4085] XFS (loop2): Unmount and run xfs_repair [ 113.266390][ T4085] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.268266][ T4085] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.271062][ T4085] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.273940][ T4085] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.276782][ T4085] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.279123][ T4085] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.282005][ T4085] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.284296][ T4085] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.286679][ T4085] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.292318][ T4076] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.295144][ T4076] XFS (loop2): Unmount and run xfs_repair [ 113.296828][ T4076] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.298998][ T4076] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.324964][ T4076] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.327834][ T4076] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.333441][ T4076] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.338787][ T4076] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.341954][ T4076] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.344441][ T4076] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.347234][ T4076] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.353837][ T5051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.369784][ T4085] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.372541][ T4085] XFS (loop2): Unmount and run xfs_repair [ 113.374031][ T4085] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.375939][ T4085] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.388571][ T4085] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.392928][ T4085] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.399618][ T4085] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.407613][ T4085] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.415638][ T4085] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.418571][ T4085] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.426219][ T4085] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.430993][ T7] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.436547][ T7] XFS (loop2): Unmount and run xfs_repair [ 113.438125][ T7] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.445011][ T7] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.447209][ T7] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.452733][ T7] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.455330][ T7] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.457713][ T7] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.465063][ T7] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.467427][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.470856][ T136] device hsr_slave_0 left promiscuous mode [ 113.472517][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.476234][ T7] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.479145][ T7] XFS (loop2): Unmount and run xfs_repair [ 113.485825][ T7] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.487754][ T7] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.492786][ T7] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.495670][ T7] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.498897][ T7] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.506382][ T7] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.509180][ T7] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.514049][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.516422][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.524405][ T7] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 113.527627][ T7] XFS (loop2): Unmount and run xfs_repair [ 113.532155][ T7] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.534177][ T7] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.536636][ T7] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.539096][ T7] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.546643][ T7] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.553299][ T7] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.555906][ T7] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 113.558345][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.565709][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.573969][ T4040] XFS (loop2): Unmounting Filesystem [ 113.600254][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.602474][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.606370][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.608616][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.612843][ T136] device bridge_slave_1 left promiscuous mode [ 113.615461][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.665331][ T136] device bridge_slave_0 left promiscuous mode [ 113.667130][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.824720][ T136] device veth1_macvtap left promiscuous mode [ 113.826689][ T136] device veth0_macvtap left promiscuous mode [ 113.828595][ T136] device veth1_vlan left promiscuous mode [ 113.830751][ T136] device veth0_vlan left promiscuous mode [ 114.017451][ T136] bond1 (unregistering): Released all slaves [ 114.266225][ T136] team0 (unregistering): Port device team_slave_1 removed [ 114.276719][ T136] team0 (unregistering): Port device team_slave_0 removed [ 114.287284][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.025115][ T4085] Bluetooth: hci3: command 0x0419 tx timeout [ 115.043319][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.239019][ T136] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 115.291587][ T136] bond0 (unregistering): Released all slaves [ 115.437727][ T5061] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 115.491043][ T5061] device wlan1 entered promiscuous mode [ 115.493068][ T5061] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.666758][ T4870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.497918][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.529138][ T5091] loop1: detected capacity change from 0 to 256 [ 117.540374][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.904220][ T4870] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.910167][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.929811][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.932638][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.934577][ T4168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.971342][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.020115][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.022841][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.042784][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.044682][ T4168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.070270][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.081458][ T5107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 118.110259][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.140820][ T7] kernel write not supported for file /adsp1 (pid: 7 comm: kworker/0:0) [ 118.178751][ T5114] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 118.183002][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.188096][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.205092][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.207918][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.220411][ T5107] device macvlan3 entered promiscuous mode [ 118.222967][ T5107] device bond2 entered promiscuous mode [ 118.224636][ T5107] device bridge1 entered promiscuous mode [ 118.226717][ T5107] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 118.270363][ T5107] device bond2 left promiscuous mode [ 118.272485][ T5107] device bridge1 left promiscuous mode [ 118.335261][ T4870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.337996][ T4870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.352604][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.355122][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.357662][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.358391][ T5128] loop4: detected capacity change from 0 to 1024 [ 118.367666][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.375404][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.382609][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.560365][ T5135] tipc: Started in network mode [ 118.561700][ T5135] tipc: Node identity 8, cluster identity 5 [ 118.563201][ T5135] tipc: Node number set to 8 [ 118.564806][ T5135] tipc: Cannot configure node identity twice [ 118.716553][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.718668][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.754338][ T4870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.196155][ T5167] loop2: detected capacity change from 0 to 32768 [ 119.203698][ T5167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.271 (5167) [ 119.217854][ T5167] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 119.220527][ T5167] BTRFS info (device loop2): turning on sync discard [ 119.222241][ T5167] BTRFS info (device loop2): use zlib compression, level 3 [ 119.224279][ T5167] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 119.226979][ T5167] BTRFS info (device loop2): trying to use backup root at mount time [ 119.229029][ T5167] BTRFS info (device loop2): disabling tree log [ 119.230796][ T5167] BTRFS info (device loop2): max_inline at 0 [ 119.232353][ T5167] BTRFS info (device loop2): using free space tree [ 119.234051][ T5167] BTRFS info (device loop2): has skinny extents [ 119.253035][ T4224] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 119.256972][ T5167] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 119.260228][ T148] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 119.263709][ T5167] BTRFS warning (device loop2): couldn't read tree root [ 119.266288][ T5167] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 119.269223][ T5167] BTRFS warning (device loop2): couldn't read tree root [ 119.278865][ T5167] BTRFS info (device loop2): clearing free space tree [ 119.281617][ T5167] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.284822][ T5167] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.329812][ T5167] BTRFS info (device loop2): creating free space tree [ 119.333402][ T5167] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.335847][ T5167] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.504079][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.506914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.189701][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.194282][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.196932][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.199270][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.257795][ T4870] device veth0_vlan entered promiscuous mode [ 120.286244][ T4870] device veth1_vlan entered promiscuous mode [ 120.329508][ T5199] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 120.334343][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 120.387621][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.397926][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.407104][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.420591][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.457694][ T4870] device veth0_macvtap entered promiscuous mode [ 120.559957][ T4870] device veth1_macvtap entered promiscuous mode [ 120.562631][ T5209] tipc: Enabled bearer , priority 18 [ 120.614292][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.632641][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.646286][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.649153][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.675854][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.694288][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.730073][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.733072][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.758405][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.511086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.513869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.527345][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.530345][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.532918][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.535616][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.538147][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.541574][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.545342][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.551003][ T4870] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.553292][ T4870] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.555526][ T4870] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.557813][ T4870] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.574329][ T5217] loop1: detected capacity change from 0 to 512 [ 121.576470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.579111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.682307][ T4168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.684579][ T4168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.702544][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.767929][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.783546][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.841520][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.862326][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.638882][ T5227] loop2: detected capacity change from 0 to 1024 [ 122.694744][ T5227] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 122.760500][ T5232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.279'. [ 122.847428][ T4040] hfsplus: bad catalog entry type [ 122.906100][ T4040] hfsplus: bad catalog entry type [ 123.085041][ T5245] netlink: 'syz.5.283': attribute type 10 has an invalid length. [ 123.122279][ T5245] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.175831][ T5247] tipc: Started in network mode [ 123.177175][ T5247] tipc: Node identity aa0d6bfebead, cluster identity 4711 [ 123.179079][ T5247] tipc: Enabled bearer , priority 0 [ 123.214290][ T5247] device syzkaller0 entered promiscuous mode [ 123.260485][ T5247] tipc: Resetting bearer [ 123.342393][ T5244] tipc: Resetting bearer [ 123.950588][ T5244] tipc: Disabling bearer [ 124.278007][ T5262] delete_channel: no stack [ 124.524620][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 124.766789][ T5280] netlink: 'syz.4.294': attribute type 13 has an invalid length. [ 126.562140][ T5290] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 127.803594][ T5306] loop4: detected capacity change from 0 to 512 [ 128.506744][ T5306] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 128.525479][ T5306] EXT4-fs (loop4): 1 truncate cleaned up [ 128.527022][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.566347][ T5319] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 128.640703][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.303'. [ 129.895045][ T5214] Bluetooth: hci1: command 0x0409 tx timeout [ 130.000085][ T5408] loop5: detected capacity change from 0 to 256 [ 130.078879][ T5408] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 130.140069][ T5408] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 130.143310][ T5408] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 130.145305][ T5408] UDF-fs: Scanning with blocksize 512 failed [ 130.178288][ T5408] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 131.060198][ T5408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.090198][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.091915][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.307749][ T5310] chnl_net:caif_netlink_parms(): no params data found [ 131.680746][ T5310] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.694438][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.709231][ T5310] device bridge_slave_0 entered promiscuous mode [ 131.823599][ T5310] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.825584][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.828254][ T5310] device bridge_slave_1 entered promiscuous mode [ 131.968441][ T4077] Bluetooth: hci1: command 0x041b tx timeout [ 132.577623][ T5310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.621363][ T5310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.894383][ T5310] team0: Port device team_slave_0 added [ 132.903321][ T5310] team0: Port device team_slave_1 added [ 132.955417][ T5422] loop1: detected capacity change from 0 to 65536 [ 132.981798][ T5310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.986113][ T5310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.006831][ T5310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.016300][ T5310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.022787][ T5310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.034570][ T5310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.160573][ T5310] device hsr_slave_0 entered promiscuous mode [ 133.519762][ T5310] device hsr_slave_1 entered promiscuous mode [ 133.893219][ T5422] XFS (loop1): Mounting V5 Filesystem [ 133.988906][ T5310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.991021][ T5310] Cannot create hsr debugfs directory [ 133.993238][ T5422] XFS (loop1): Ending clean mount [ 134.002419][ T5422] XFS (loop1): Quotacheck needed: Please wait. [ 134.012937][ T4224] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x248/0xb50, inode 0x25 dinode [ 134.015901][ T4224] XFS (loop1): Unmount and run xfs_repair [ 134.017334][ T4224] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 134.035289][ T4224] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 134.037567][ T4224] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.048162][ T4077] Bluetooth: hci1: command 0x040f tx timeout [ 134.055560][ T4224] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 134.057893][ T4224] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 134.076291][ T4224] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.085960][ T4224] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 134.088754][ T4224] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 134.096094][ T4224] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 134.114544][ T5422] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 134.168882][ T4043] XFS (loop1): Unmounting Filesystem [ 134.309778][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.526076][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.460650][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.476026][ T5489] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 135.505334][ T5489] device bond2 entered promiscuous mode [ 136.169853][ T5494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.227024][ T5495] bond2: (slave ip6gretap1): making interface the new active one [ 136.240829][ T5494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.245431][ T5494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.261473][ T4105] Bluetooth: hci1: command 0x0419 tx timeout [ 136.300424][ T5500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.304521][ T5495] device ip6gretap1 entered promiscuous mode [ 136.311144][ T5495] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 136.346530][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.356178][ T5489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.324'. [ 136.371500][ T5506] xt_TCPMSS: Only works on TCP SYN packets [ 136.388353][ T5489] device bond2 left promiscuous mode [ 136.390734][ T5489] device ip6gretap1 left promiscuous mode [ 136.393626][ T5489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.441558][ T5503] tipc: Enabling of bearer rejected, failed to enable media [ 136.502186][ T5503] tipc: Enabled bearer , priority 0 [ 136.530564][ T5503] device syzkaller0 entered promiscuous mode [ 137.464447][ T5502] tipc: Resetting bearer [ 137.491854][ T5524] udc-core: couldn't find an available UDC or it's busy [ 137.496068][ T5524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.534685][ T5502] tipc: Disabling bearer [ 137.723364][ T5310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.799784][ T5310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.958624][ T5310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.125529][ T5544] 9pnet: Could not find request transport: 0xffffffffffffffff [ 138.178920][ T5310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.195712][ T5563] syz.5.338 uses obsolete (PF_INET,SOCK_PACKET) [ 140.059757][ T5310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.095572][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.098249][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.138823][ T5310] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.162682][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.168068][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.179500][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.181363][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.189861][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.205944][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.209356][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.211263][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.297441][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.300014][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.302728][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.305508][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.329504][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.333493][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.347864][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.403930][ T5310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.406665][ T5310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.418492][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.421107][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.423757][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.426950][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.437990][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.441479][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.597037][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.599103][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.617537][ T5310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.094822][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.100315][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.107268][ T5664] tipc: Started in network mode [ 147.108683][ T5664] tipc: Node identity 1e9682a3287a, cluster identity 4711 [ 147.180242][ T5664] tipc: Enabled bearer , priority 0 [ 147.268589][ T5670] device syzkaller0 entered promiscuous mode [ 147.296052][ T25] syzkaller0: tun_net_xmit 70 [ 147.304155][ T5310] device veth0_vlan entered promiscuous mode [ 147.316546][ C1] syzkaller0: tun_net_xmit 90 [ 147.318944][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.321572][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.325994][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.329741][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.338326][ T5310] device veth1_vlan entered promiscuous mode [ 147.456487][ C1] syzkaller0: tun_net_xmit 90 [ 147.596462][ C1] syzkaller0: tun_net_xmit 90 [ 147.736437][ C1] syzkaller0: tun_net_xmit 90 [ 147.886420][ C1] syzkaller0: tun_net_xmit 90 [ 148.026413][ C1] syzkaller0: tun_net_xmit 90 [ 148.170735][ C1] syzkaller0: tun_net_xmit 90 [ 148.172344][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.174941][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.194290][ T5661] tipc: Resetting bearer [ 148.217291][ T5661] tipc: Disabling bearer [ 148.263613][ T5310] device veth0_macvtap entered promiscuous mode [ 148.311400][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.314359][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.319696][ T5310] device veth1_macvtap entered promiscuous mode [ 148.329516][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.332682][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.400445][ T5685] xt_ipcomp: unknown flags B [ 148.564245][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.568625][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.571178][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.573815][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.582958][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.585698][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.588370][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.591021][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.595635][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.464059][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.477342][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.498304][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.501096][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.507071][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.509996][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.512523][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.529897][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.532531][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.535209][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.548542][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.554134][ T5310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.568670][ T5310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.570991][ T5310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.593674][ T5310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.642810][ T5705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.365'. [ 149.651681][ T5714] loop4: detected capacity change from 0 to 8 [ 149.663219][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.666462][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.694761][ T5714] SQUASHFS error: Unknown LZ4 version [ 149.706730][ T5714] squashfs image failed sanity check [ 149.862316][ T5720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.369'. [ 149.934250][ T136] device hsr_slave_0 left promiscuous mode [ 149.986927][ T136] device hsr_slave_1 left promiscuous mode [ 150.176914][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.561361][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.934067][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.938690][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.956748][ T136] device bridge_slave_1 left promiscuous mode [ 150.972236][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.058285][ T136] device bridge_slave_0 left promiscuous mode [ 151.060242][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.133235][ T136] device bond_slave_0 left promiscuous mode [ 151.134941][ T136] device bond_slave_1 left promiscuous mode [ 151.136666][ T136] device bridge0 left promiscuous mode [ 151.206261][ T136] device veth1_macvtap left promiscuous mode [ 151.207967][ T136] device veth0_macvtap left promiscuous mode [ 151.209599][ T136] device veth1_vlan left promiscuous mode [ 151.212525][ T136] device veth0_vlan left promiscuous mode [ 151.355571][ T136] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 151.479553][ T136] bond2 (unregistering): Released all slaves [ 151.486910][ T136] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 151.543628][ T136] bond1 (unregistering): Released all slaves [ 151.680172][ T136] team0 (unregistering): Port device team_slave_1 removed [ 151.690063][ T136] team0 (unregistering): Port device team_slave_0 removed [ 151.700631][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.753740][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.924422][ T136] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 151.986875][ T136] bond0 (unregistering): Released all slaves [ 152.126626][ T5740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'. [ 152.135684][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.376'. [ 152.149966][ T5769] HTB: quantum of class 80210010 is big. Consider r2q change. [ 152.231365][ T5382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.233622][ T5382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.245268][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.298878][ T4194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.301351][ T4194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.311260][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.326712][ T5773] tipc: Enabled bearer , priority 0 [ 152.362402][ T5773] device syzkaller0 entered promiscuous mode [ 152.413793][ T5773] tipc: Resetting bearer [ 152.456112][ T5771] tipc: Resetting bearer [ 152.481261][ T5771] tipc: Disabling bearer [ 154.087389][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.382'. [ 154.135275][ T5812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.334337][ T5822] tipc: Enabled bearer , priority 0 [ 154.346969][ T5822] device syzkaller0 entered promiscuous mode [ 154.511312][ T5822] tipc: Resetting bearer [ 154.568696][ T5821] tipc: Resetting bearer [ 154.598943][ T5821] tipc: Disabling bearer [ 155.095100][ T5847] loop1: detected capacity change from 0 to 256 [ 155.220824][ T5847] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 156.052841][ T5846] attempt to access beyond end of device [ 156.052841][ T5846] loop1: rw=0, want=34359738491, limit=256 [ 156.121246][ T5847] attempt to access beyond end of device [ 156.121246][ T5847] loop1: rw=0, want=34359738489, limit=256 [ 156.131523][ T5846] attempt to access beyond end of device [ 156.131523][ T5846] loop1: rw=0, want=34359738489, limit=256 [ 156.161084][ T5846] Buffer I/O error on dev loop1, logical block 34359738488, async page read [ 156.174469][ T5846] attempt to access beyond end of device [ 156.174469][ T5846] loop1: rw=0, want=34359738490, limit=256 [ 156.182786][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.192436][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.198324][ T5846] Buffer I/O error on dev loop1, logical block 34359738489, async page read [ 156.209466][ T5846] attempt to access beyond end of device [ 156.209466][ T5846] loop1: rw=0, want=34359738491, limit=256 [ 156.213687][ T5858] device bridge_slave_0 left promiscuous mode [ 156.221270][ T5846] Buffer I/O error on dev loop1, logical block 34359738490, async page read [ 156.242723][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.284334][ T5858] device bridge_slave_1 left promiscuous mode [ 156.291754][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.389111][ T5858] bond0: (slave bond_slave_0): Releasing backup interface [ 156.483909][ T5858] bond0: (slave bond_slave_1): Releasing backup interface [ 157.313485][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.398'. [ 157.329352][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.398'. [ 157.404565][ T5858] team0: Port device team_slave_0 removed [ 157.443118][ T5858] team0: Port device team_slave_1 removed [ 157.448138][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.450159][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.467847][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.475292][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.489346][ T5858] bond0: (slave wlan1): Releasing backup interface [ 157.533255][ T5862] team0: Mode changed to "loadbalance" [ 157.550668][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 160.106660][ T5903] loop1: detected capacity change from 0 to 2048 [ 160.198219][ T5903] hpfs: hpfs_map_sector(): read error [ 160.325266][ T5917] netlink: 'syz.6.409': attribute type 4 has an invalid length. [ 160.819385][ T5927] loop6: detected capacity change from 0 to 40427 [ 160.942740][ T5927] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 160.945110][ T5927] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 160.950021][ T5927] F2FS-fs (loop6): invalid crc value [ 161.579728][ T5927] F2FS-fs (loop6): Found nat_bits in checkpoint [ 161.638444][ T5927] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 161.640462][ T5927] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 161.759051][ T5927] attempt to access beyond end of device [ 161.759051][ T5927] loop6: rw=2049, want=45104, limit=40427 [ 161.776051][ T5927] attempt to access beyond end of device [ 161.776051][ T5927] loop6: rw=2049, want=45144, limit=40427 [ 161.779193][ T5927] attempt to access beyond end of device [ 161.779193][ T5927] loop6: rw=2049, want=45104, limit=40427 [ 163.852455][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.424'. [ 165.348617][ T5992] loop0: detected capacity change from 0 to 164 [ 166.072181][ T5992] attempt to access beyond end of device [ 166.072181][ T5992] loop0: rw=524288, want=263332, limit=164 [ 166.094421][ T5992] attempt to access beyond end of device [ 166.094421][ T5992] loop0: rw=0, want=263332, limit=164 [ 166.945980][ T6003] udc-core: couldn't find an available UDC or it's busy [ 166.947881][ T6003] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 166.985525][ T6003] netlink: 'syz.5.429': attribute type 10 has an invalid length. [ 167.072014][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.112378][ T6003] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.126158][ T6008] netlink: 'syz.5.429': attribute type 1 has an invalid length. [ 168.120351][ T6024] loop0: detected capacity change from 0 to 128 [ 168.284824][ T6024] UBIFS error (pid: 6024): cannot open "/dev/loop0", error -22 [ 168.363676][ T6032] binder: 6031:6032 tried to acquire reference to desc 0, got 1 instead [ 168.392841][ T6032] binder_alloc: 6031: pid 6031 spamming oneway? 2 buffers allocated for a total size of 5120 [ 168.431966][ T6032] binder_alloc: 6031: pid 6031 spamming oneway? 3 buffers allocated for a total size of 5128 [ 168.451978][ T4092] binder: undelivered TRANSACTION_COMPLETE [ 168.453607][ T4092] binder: undelivered TRANSACTION_COMPLETE [ 168.479272][ T4092] binder: undelivered TRANSACTION_COMPLETE [ 169.004555][ T4077] Bluetooth: hci2: command 0x0406 tx timeout [ 169.011073][ T4077] Bluetooth: hci4: command 0x0406 tx timeout [ 169.014593][ T4077] Bluetooth: hci0: command 0x0406 tx timeout [ 169.340752][ T4077] binder: undelivered transaction 10, process died. [ 169.342630][ T4077] binder: undelivered transaction 11, process died. [ 169.346363][ T4077] binder: undelivered transaction 9, process died. [ 170.219417][ T6044] udc-core: couldn't find an available UDC or it's busy [ 171.438214][ T6044] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.861447][ T6065] loop0: detected capacity change from 0 to 512 [ 172.916543][ T6068] loop4: detected capacity change from 0 to 64 [ 172.948857][ T6065] EXT4-fs (loop0): journaled quota format not specified [ 173.620071][ T6068] hfs: type requires a 4 character value [ 173.621807][ T6068] hfs: unable to parse mount options [ 173.669189][ T6072] device bridge0 entered promiscuous mode [ 173.671124][ T6072] device vlan2 entered promiscuous mode [ 173.762150][ T6078] udc-core: couldn't find an available UDC or it's busy [ 173.764603][ T6078] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 173.773197][ T6078] udc-core: couldn't find an available UDC or it's busy [ 173.775725][ T6078] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 173.780617][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.448'. [ 174.541832][ T6078] team0: Port device team_slave_0 removed [ 177.175120][ T6100] udc-core: couldn't find an available UDC or it's busy [ 177.186990][ T6100] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.693156][ T6145] loop1: detected capacity change from 0 to 512 [ 180.727432][ T6148] loop5: detected capacity change from 0 to 256 [ 180.774989][ T6148] exfat: Deprecated parameter 'namecase' [ 180.815119][ T6148] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 181.171080][ T6145] Quota error (device loop1): v2_read_file_info: Free block number too big (1090519040 >= 6). [ 181.191750][ T6145] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 181.226590][ T6145] EXT4-fs (loop1): mount failed [ 182.056406][ T6174] loop6: detected capacity change from 0 to 512 [ 182.273786][ T6174] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.469: casefold flag without casefold feature [ 182.480687][ T6174] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.469: couldn't read orphan inode 15 (err -117) [ 182.779924][ T6174] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.086298][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'. [ 183.259166][ T6191] loop0: detected capacity change from 0 to 1024 [ 185.796433][ T6209] netlink: 'syz.5.474': attribute type 29 has an invalid length. [ 185.798840][ T6209] netlink: 'syz.5.474': attribute type 29 has an invalid length. [ 185.803626][ T6209] netlink: 'syz.5.474': attribute type 29 has an invalid length. [ 186.881264][ T6191] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 187.425323][ T6225] x_tables: unsorted entry at hook 1 [ 187.452351][ T5214] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 187.547771][ T5214] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.661452][ T6236] udc-core: couldn't find an available UDC or it's busy [ 188.663546][ T6236] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 188.763784][ T6232] fido_id[6232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.777694][ T26] audit: type=1326 audit(2766.722:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.4.482" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaacd8c28 code=0x0 [ 189.650403][ T6259] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 189.694049][ T6259] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.754997][ T6263] loop0: detected capacity change from 0 to 8 [ 189.790269][ T6259] bond3: (slave vlan2): making interface the new active one [ 189.804531][ T6263] SQUASHFS error: zlib decompression failed, data probably corrupt [ 189.807505][ T6259] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 189.809054][ T6263] SQUASHFS error: Failed to read block 0x9b: -5 [ 189.811525][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 189.819938][ T6263] SQUASHFS error: Unable to read metadata cache entry [99] [ 189.825437][ T6263] SQUASHFS error: Unable to read inode 0x127 [ 189.885621][ T6263] xt_TCPMSS: Only works on TCP SYN packets [ 189.982163][ T6274] loop6: detected capacity change from 0 to 512 [ 190.370195][ T6274] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 192.288517][ T6303] 8021q: VLANs not supported on vcan0 [ 192.536956][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.542054][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.303021][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.503'. [ 193.308960][ T6328] device bond_slave_0 entered promiscuous mode [ 193.310621][ T6328] device bond_slave_1 entered promiscuous mode [ 193.312194][ T6328] device macvlan2 entered promiscuous mode [ 193.314711][ T6328] device bond0 entered promiscuous mode [ 193.318421][ T6328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.307739][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 195.430580][ T6348] loop1: detected capacity change from 0 to 512 [ 196.142011][ T6348] EXT4-fs (loop1): 1 truncate cleaned up [ 196.148540][ T6348] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.660491][ T6382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.996252][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 197.063516][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 197.121403][ T6398] loop0: detected capacity change from 0 to 128 [ 197.233093][ T6398] 9pnet: Could not find request transport: f [ 198.203969][ T6409] attempt to access beyond end of device [ 198.203969][ T6409] loop0: rw=2049, want=473, limit=128 [ 198.312080][ T6419] sch_fq: defrate 0 ignored. [ 199.041134][ T6416] loop5: detected capacity change from 0 to 512 [ 199.176154][ T6416] EXT4-fs (loop5): Ignoring removed oldalloc option [ 199.202042][ T6428] netlink: 48 bytes leftover after parsing attributes in process `syz.6.529'. [ 199.206337][ T6416] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000800000,quota,oldalloc,auto_da_alloc=0x0000000000000081,. Quota mode: writeback. [ 199.297166][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.530'. [ 199.699963][ T6445] netlink: 'syz.1.533': attribute type 29 has an invalid length. [ 199.708957][ T6445] netlink: 'syz.1.533': attribute type 29 has an invalid length. [ 200.026572][ T6445] netlink: 'syz.1.533': attribute type 29 has an invalid length. [ 200.101957][ T6445] netlink: 596 bytes leftover after parsing attributes in process `syz.1.533'. [ 201.677723][ T6456] binder: 6449:6456 tried to acquire reference to desc 0, got 1 instead [ 201.739359][ T25] binder: undelivered TRANSACTION_COMPLETE [ 201.816814][ T25] binder: undelivered transaction 16, process died. [ 201.955082][ T6472] netlink: 277 bytes leftover after parsing attributes in process `syz.0.541'. [ 202.002557][ T6474] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 202.054106][ T6474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.164838][ T6474] bond2: (slave vlan2): making interface the new active one [ 202.169101][ T6474] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 202.173150][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 202.705797][ T6505] loop1: detected capacity change from 0 to 2048 [ 203.607394][ T6505] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 203.609383][ T6505] EXT4-fs (loop1): Ignoring removed nobh option [ 204.274671][ T6527] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 204.277089][ T6527] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 204.298728][ T6527] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 205.114564][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,nobh,bsddf,. Quota mode: none. [ 205.136445][ T6534] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 205.271073][ T6538] netlink: 'syz.5.555': attribute type 1 has an invalid length. [ 205.302233][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.328071][ T6543] bond1: (slave vlan2): making interface the new active one [ 205.366979][ T6543] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 205.369570][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 207.984369][ T6579] loop1: detected capacity change from 0 to 256 [ 209.476725][ C1] vcan0: j1939_tp_rxtimer: 0x0000000041846411: rx timeout, send abort [ 209.480582][ C1] vcan0: j1939_tp_rxtimer: 0x00000000842642e7: rx timeout, send abort [ 209.655320][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 209.744682][ T6613] netlink: 'syz.6.570': attribute type 1 has an invalid length. [ 209.826620][ T6613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.910828][ T6617] bond1: (slave vlan2): making interface the new active one [ 209.960932][ T6617] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 209.971920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 209.980105][ C1] vcan0: j1939_tp_rxtimer: 0x0000000041846411: abort rx timeout. Force session deactivation [ 209.983032][ C1] vcan0: j1939_tp_rxtimer: 0x00000000842642e7: abort rx timeout. Force session deactivation [ 209.993738][ T6610] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 210.100201][ T6624] netlink: 96 bytes leftover after parsing attributes in process `syz.1.573'. [ 210.102824][ T6624] netlink: 120 bytes leftover after parsing attributes in process `syz.1.573'. [ 210.103090][ T6631] sctp: [Deprecated]: syz.4.574 (pid 6631) Use of int in max_burst socket option. [ 210.103090][ T6631] Use struct sctp_assoc_value instead [ 212.996406][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 213.176839][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.501990][ T6691] netlink: 'syz.0.592': attribute type 11 has an invalid length. [ 214.511730][ T6699] netlink: 80 bytes leftover after parsing attributes in process `syz.0.595'. [ 214.515016][ T6699] netlink: 80 bytes leftover after parsing attributes in process `syz.0.595'. [ 214.528235][ T6699] netlink: 80 bytes leftover after parsing attributes in process `syz.0.595'. [ 214.534684][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 214.649958][ T6701] device ipip0 entered promiscuous mode [ 220.561860][ T6740] ODEBUG: Out of memory. ODEBUG disabled [ 220.715774][ T6745] loop0: detected capacity change from 0 to 256 [ 220.731602][ T6746] loop6: detected capacity change from 0 to 256 [ 220.779062][ T6736] loop1: detected capacity change from 0 to 128 [ 220.787239][ T6746] exfat: Deprecated parameter 'namecase' [ 220.787937][ T6745] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 220.788881][ T6746] exfat: Deprecated parameter 'utf8' [ 220.794185][ T6746] exfat: Deprecated parameter 'namecase' [ 220.795954][ T6746] exfat: Deprecated parameter 'utf8' [ 220.840630][ T6746] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 220.945585][ T6754] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.948803][ T6754] FAT-fs (loop4): unable to read boot sector [ 222.009135][ T6780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.011168][ T6780] IPv6: NLM_F_CREATE should be set when creating new route [ 222.120915][ T6784] loop4: detected capacity change from 0 to 512 [ 222.541916][ T6800] netlink: 324 bytes leftover after parsing attributes in process `syz.4.628'. [ 222.544523][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 224.571396][ T6819] loop5: detected capacity change from 0 to 1024 [ 226.234111][ T6819] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 226.235934][ T6819] EXT4-fs (loop5): mount failed [ 227.078662][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.630'. [ 227.240462][ T6853] loop4: detected capacity change from 0 to 128 [ 227.522483][ T6853] attempt to access beyond end of device [ 227.522483][ T6853] loop4: rw=2049, want=234, limit=128 [ 227.659302][ T6863] udc-core: couldn't find an available UDC or it's busy [ 227.661216][ T6863] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 227.738539][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.636'. [ 227.765768][ T6866] bridge2: port 1(ip6gretap1) entered blocking state [ 227.767621][ T6866] bridge2: port 1(ip6gretap1) entered disabled state [ 227.770197][ T6866] device ip6gretap1 entered promiscuous mode [ 228.113185][ T5387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.146277][ T6866] device veth3 entered promiscuous mode [ 228.155658][ T6866] bridge2: port 2(veth3) entered blocking state [ 228.159908][ T6866] bridge2: port 2(veth3) entered disabled state [ 228.235547][ T6875] loop6: detected capacity change from 0 to 512 [ 228.245414][ T5387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.284647][ T6875] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 228.800424][ T5387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.923114][ T6897] loop4: detected capacity change from 0 to 512 [ 229.962209][ T6897] EXT4-fs (loop4): Unrecognized mount option "fsuuid=d 6fef [ 229.962209][ T6897] c-155b-9U9a-2c i-5033f538" or missing value [ 230.043404][ T4077] Bluetooth: hci2: command 0x0409 tx timeout [ 230.060632][ T5387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.300369][ T6909] loop6: detected capacity change from 0 to 512 [ 230.349847][ T6920] netlink: 224 bytes leftover after parsing attributes in process `syz.5.645'. [ 230.352223][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.645'. [ 230.375112][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 230.782018][ T6924] loop5: detected capacity change from 0 to 64 [ 230.835615][ T6909] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.644: casefold flag without casefold feature [ 230.839220][ T6909] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.644: couldn't read orphan inode 15 (err -117) [ 230.851151][ T6909] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.026902][ T4077] Bluetooth: hci3: command 0x0406 tx timeout [ 232.346916][ T4077] Bluetooth: hci2: command 0x041b tx timeout [ 232.395313][ T6936] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 232.397321][ T6936] device syz_tun entered promiscuous mode [ 232.401015][ T6936] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 232.449639][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.451578][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.464141][ T6868] device bridge_slave_0 entered promiscuous mode [ 232.471250][ T5387] tipc: Left network mode [ 232.473155][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.483461][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.487756][ T6868] device bridge_slave_1 entered promiscuous mode [ 232.556795][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.561155][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.564635][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 232.603122][ T6868] team0: Port device team_slave_0 added [ 232.666641][ T6868] team0: Port device team_slave_1 added [ 233.717834][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.719994][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.766755][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.143339][ T6970] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 235.084057][ T4085] Bluetooth: hci2: command 0x040f tx timeout [ 235.445556][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.158821][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.193868][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.237538][ T6981] loop5: detected capacity change from 0 to 2048 [ 236.293163][ T6980] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 236.372611][ T6981] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.441561][ T6980] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 236.454654][ T6991] loop0: detected capacity change from 0 to 512 [ 236.470536][ T6983] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 237.248644][ T4085] Bluetooth: hci2: command 0x0419 tx timeout [ 237.266681][ T6868] device hsr_slave_0 entered promiscuous mode [ 237.343853][ T6868] device hsr_slave_1 entered promiscuous mode [ 237.525247][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.527239][ T6868] Cannot create hsr debugfs directory [ 237.528767][ T6993] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 237.531098][ T6993] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 237.534656][ T6993] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 237.557390][ T6993] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 237.559708][ T6993] netlink: 'syz.6.658': attribute type 29 has an invalid length. [ 238.733889][ T6991] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.661: bg 0: block 248: padding at end of block bitmap is not set [ 238.750745][ T6991] Quota error (device loop0): write_blk: dquota write failed [ 238.753063][ T6991] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 238.784268][ T6991] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.661: Failed to acquire dquot type 1 [ 238.821782][ T6991] EXT4-fs (loop0): 1 truncate cleaned up [ 238.830419][ T6991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.706631][ T7048] xt_nat: multiple ranges no longer supported [ 241.252910][ T7041] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 241.269275][ T7041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.379295][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 241.403056][ T7046] bond3: (slave veth5): Enslaving as an active interface with a down link [ 241.425053][ T7049] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 241.506547][ T7053] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 241.508629][ T7053] netlink: 'syz.4.672': attribute type 2 has an invalid length. [ 242.582064][ T6868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 242.730522][ T6868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 242.757017][ T7071] loop4: detected capacity change from 0 to 8 [ 242.767058][ T7071] SQUASHFS error: zlib decompression failed, data probably corrupt [ 242.769135][ T7071] SQUASHFS error: Failed to read block 0x9b: -5 [ 242.770730][ T7071] SQUASHFS error: Unable to read metadata cache entry [99] [ 242.772558][ T7071] SQUASHFS error: Unable to read inode 0x127 [ 242.896133][ T6868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.204806][ T6868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.735361][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.757183][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 244.759788][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 244.820712][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.823483][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.864192][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.649060][ T7119] loop5: detected capacity change from 0 to 2048 [ 245.842392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.845378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.847871][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.849783][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.852278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.675411][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.678078][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.680504][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.682367][ T4194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.690450][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.703720][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.712333][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.715782][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.074809][ T7133] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.399956][ T7119] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 247.419427][ T7119] Remounting filesystem read-only [ 247.492939][ T4870] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 247.518430][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.521008][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.524787][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.531729][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.541134][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.552736][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.706342][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.298118][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.467640][ T5387] device hsr_slave_0 left promiscuous mode [ 250.513523][ T5387] device hsr_slave_1 left promiscuous mode [ 251.835571][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.837809][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.848612][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.857378][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.863397][ T5387] device bridge_slave_1 left promiscuous mode [ 251.865194][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.885125][ T5387] device bridge_slave_0 left promiscuous mode [ 251.886859][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.940115][ T7194] loop6: detected capacity change from 0 to 2048 [ 251.984723][ T7198] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.054758][ T5387] device veth1_macvtap left promiscuous mode [ 252.056482][ T5387] device veth0_macvtap left promiscuous mode [ 252.058134][ T5387] device veth1_vlan left promiscuous mode [ 252.059991][ T5387] device veth0_vlan left promiscuous mode [ 252.470593][ T5387] bond2 (unregistering): (slave vlan2): Releasing active interface [ 252.510927][ T5387] bond2 (unregistering): Released all slaves [ 252.722101][ T5387] bond1 (unregistering): Released all slaves [ 252.733690][ T5387] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 252.859007][ T5387] smc: removing net device bond0 with user defined pnetid SYZ2 [ 252.862850][ T5387] bond0 (unregistering): Released all slaves [ 252.953184][ T5387] team0 (unregistering): Port device team_slave_1 removed [ 252.962568][ T5387] team0 (unregistering): Port device team_slave_0 removed [ 253.145669][ T7187] bridge0: port 3(syz_tun) entered blocking state [ 253.147728][ T7187] bridge0: port 3(syz_tun) entered disabled state [ 253.153142][ T7187] device syz_tun entered promiscuous mode [ 253.158751][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 253.170031][ T7192] bond0: (slave syz_tun): Releasing backup interface [ 253.195917][ T7192] device bridge_slave_0 left promiscuous mode [ 253.197635][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.234891][ T7192] device bridge_slave_1 left promiscuous mode [ 253.236700][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.275183][ T7192] bond0: (slave bond_slave_0): Releasing backup interface [ 253.314867][ T7192] bond0: (slave bond_slave_1): Releasing backup interface [ 253.358412][ T7192] team0: Port device team_slave_0 removed [ 253.361021][ T7192] team0: Port device team_slave_1 removed [ 253.362674][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.365609][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.368736][ T7192] bond1: (slave bridge1): Releasing backup interface [ 253.413318][ T7192] bond3: (slave veth5): Releasing active interface [ 253.476356][ T7196] team0: Mode changed to "loadbalance" [ 253.495829][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.498160][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.500300][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.124065][ T7222] udc-core: couldn't find an available UDC or it's busy [ 255.126176][ T7222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 255.135354][ T7222] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.138003][ T7222] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.140390][ T7222] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.142632][ T7222] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.231009][ T7222] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 255.239655][ T7226] netlink: 'syz.4.706': attribute type 3 has an invalid length. [ 255.256861][ T4176] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 255.259620][ T4176] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.335628][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.337482][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.360300][ T7226] loop4: detected capacity change from 0 to 1024 [ 255.430605][ T7226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.445428][ T5219] kernel write not supported for file /uhid (pid: 5219 comm: kworker/0:10) [ 255.485085][ T7241] loop6: detected capacity change from 0 to 1024 [ 255.515396][ T7241] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 255.522888][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.542603][ T7241] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 255.647629][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.650468][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.668052][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.670843][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.674566][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.677462][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.682334][ T6868] device veth0_vlan entered promiscuous mode [ 255.691623][ T6868] device veth1_vlan entered promiscuous mode [ 255.729363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.732428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.736169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.746885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.773449][ T6868] device veth0_macvtap entered promiscuous mode [ 255.790066][ T6868] device veth1_macvtap entered promiscuous mode [ 255.842346][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.845281][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.847847][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.850723][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.854662][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.858374][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.861218][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.876196][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.878960][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.886067][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.912385][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.946423][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.951554][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.961889][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.971996][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.986828][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.010044][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.713'. [ 256.021156][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 256.038108][ T6868] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.040423][ T6868] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.042646][ T6868] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.059759][ T6868] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.075821][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 257.281324][ T331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.307133][ T331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.326687][ T5391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.326815][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.335010][ T5391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.686216][ T7276] loop5: detected capacity change from 0 to 16 [ 257.688397][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.760437][ T7276] erofs: (device loop5): mounted with root inode @ nid 36. [ 259.415488][ T7290] attempt to access beyond end of device [ 259.415488][ T7290] loop5: rw=524288, want=40, limit=16 [ 260.258396][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 260.506595][ T7302] loop4: detected capacity change from 0 to 512 [ 260.517067][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 261.745672][ T7302] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.722: casefold flag without casefold feature [ 261.749280][ T7302] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.722: couldn't read orphan inode 15 (err -117) [ 261.760565][ T7302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.822912][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.724'. [ 262.077027][ T7316] loop5: detected capacity change from 0 to 1024 [ 262.121732][ T7322] cgroup2: Unknown parameter 'pids_localevents' [ 262.370444][ T7316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 262.372834][ T7316] System zones: 0-1, 3-36 [ 262.375046][ T7316] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.581367][ T7314] netlink: 'syz.7.724': attribute type 1 has an invalid length. [ 262.587032][ T7314] netlink: 'syz.7.724': attribute type 2 has an invalid length. [ 262.696065][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.725'. [ 265.958424][ T7372] loop5: detected capacity change from 0 to 512 [ 265.987482][ T7365] loop4: detected capacity change from 0 to 4096 [ 266.616469][ T7372] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.739: casefold flag without casefold feature [ 266.620251][ T7372] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.739: couldn't read orphan inode 15 (err -117) [ 266.670416][ T7372] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.898138][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.742'. [ 267.922947][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.742'. [ 268.147210][ T7392] HTB: quantum of class 8030000C is small. Consider r2q change. [ 268.818632][ T7406] syz.6.746 uses old SIOCAX25GETINFO [ 269.513161][ T7412] udc-core: couldn't find an available UDC or it's busy [ 269.540161][ T7412] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 269.547057][ T7408] tipc: Started in network mode [ 269.548380][ T7408] tipc: Node identity ac1414aa, cluster identity 4711 [ 269.594796][ T7408] tipc: Enabled bearer , priority 10 [ 271.285395][ T4176] tipc: Node number set to 2886997162 [ 271.651538][ T7433] loop6: detected capacity change from 0 to 512 [ 271.890514][ T26] audit: type=1326 audit(2849.832:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.752" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaacd8c28 code=0x0 [ 272.905834][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.927457][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.931462][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.619102][ T7451] loop7: detected capacity change from 0 to 512 [ 273.871363][ T7458] loop5: detected capacity change from 0 to 2048 [ 273.874741][ T7458] UDF-fs: bad mount option "undelete`Eò±:æÈË=À4”" or missing value [ 275.593324][ T7451] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.756: casefold flag without casefold feature [ 275.605321][ T7451] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.756: couldn't read orphan inode 15 (err -117) [ 275.703523][ T7451] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.135753][ T7491] udc-core: couldn't find an available UDC or it's busy [ 277.137626][ T7491] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.420156][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'. [ 280.040411][ T7517] tipc: Started in network mode [ 280.041814][ T7517] tipc: Node identity 4, cluster identity 4711 [ 280.116740][ T7517] tipc: Node number set to 4 [ 281.261124][ T7528] loop7: detected capacity change from 0 to 4096 [ 281.265080][ T7528] ntfs3: Unknown parameter 'windows_names' [ 281.285545][ T26] audit: type=1326 audit(2859.232:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.7.770" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82fd3c28 code=0x0 [ 281.449507][ T7548] loop5: detected capacity change from 0 to 256 [ 281.494456][ T7548] exfat: Deprecated parameter 'namecase' [ 281.496012][ T7548] exfat: Deprecated parameter 'utf8' [ 281.496344][ T7550] tipc: Enabled bearer , priority 0 [ 281.499599][ T7548] exfat: Deprecated parameter 'namecase' [ 281.500124][ T7550] device syzkaller0 entered promiscuous mode [ 281.501080][ T7548] exfat: Deprecated parameter 'utf8' [ 281.581497][ T7559] tipc: Resetting bearer [ 281.597214][ T7549] tipc: Resetting bearer [ 281.637992][ T7549] tipc: Disabling bearer [ 281.696386][ T7548] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 282.511768][ T7575] loop7: detected capacity change from 0 to 256 [ 282.573122][ T7575] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 286.505275][ T7620] netlink: 'syz.7.789': attribute type 1 has an invalid length. [ 286.671366][ T7624] device gretap1 entered promiscuous mode [ 287.410939][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.708497][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.750231][ T7626] loop0: detected capacity change from 0 to 4096 [ 287.752135][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.780176][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.782839][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.983356][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.428589][ T7628] device macvlan2 entered promiscuous mode [ 288.724338][ T7626] ntfs3: Unknown parameter 'windows_names' [ 288.770650][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 289.576378][ T7662] loop7: detected capacity change from 0 to 2048 [ 289.579724][ T7662] UDF-fs: bad mount option "undelete`Eò±:æÈË=À4”" or missing value [ 292.426002][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.805'. [ 292.428602][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 292.677201][ T7690] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 293.498240][ T7690] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 293.501760][ T7690] bond4: (slave vxcan1): Error -22 calling dev_set_mtu [ 294.279837][ T7704] device gretap2 entered promiscuous mode [ 294.309893][ T7704] bond4: (slave gretap2): making interface the new active one [ 294.336978][ T7704] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 294.346145][ T7713] device macvlan2 entered promiscuous mode [ 294.348461][ T7713] device bond4 entered promiscuous mode [ 294.350343][ T7713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.494328][ T7713] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 294.636924][ T7713] device bond4 left promiscuous mode [ 294.921625][ T7724] tipc: Enabled bearer , priority 0 [ 294.927186][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 295.059677][ T7724] tipc: Disabling bearer [ 295.681498][ T7733] loop4: detected capacity change from 0 to 40427 [ 295.688202][ T7733] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 295.690332][ T7733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 295.764304][ T7733] F2FS-fs (loop4): invalid crc value [ 295.846356][ T7733] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.917528][ T7733] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 295.919615][ T7733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 300.006647][ T7740] attempt to access beyond end of device [ 300.006647][ T7740] loop4: rw=2049, want=78344, limit=40427 [ 302.398178][ T7754] tipc: Enabled bearer , priority 0 [ 302.417327][ T7754] device syzkaller0 entered promiscuous mode [ 302.486572][ T7754] tipc: Resetting bearer [ 302.528912][ T7753] tipc: Resetting bearer [ 302.570418][ T7753] tipc: Disabling bearer [ 302.646998][ T7767] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 304.625454][ T7783] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 306.731382][ T7821] loop5: detected capacity change from 0 to 512 [ 306.745933][ T7818] tipc: Enabled bearer , priority 0 [ 306.749475][ T7817] device syzkaller0 entered promiscuous mode [ 306.826318][ T7813] tipc: Resetting bearer [ 306.852776][ T7812] tipc: Resetting bearer [ 306.897051][ T7812] tipc: Disabling bearer [ 306.962776][ T7821] EXT4-fs (loop5): Unrecognized mount option "fsuuid=d 6fef [ 306.962776][ T7821] c-155b-9U9a-2c i-5033f538" or missing value [ 307.732706][ T7830] loop7: detected capacity change from 0 to 32768 [ 307.778124][ T7837] netlink: 'syz.5.839': attribute type 1 has an invalid length. [ 307.791237][ T7830] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.838 (7830) [ 307.811672][ T7837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.827580][ T7830] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 307.830046][ T7830] BTRFS info (device loop7): force zlib compression, level 3 [ 307.831914][ T7830] BTRFS info (device loop7): force clearing of disk cache [ 307.833757][ T7830] BTRFS info (device loop7): setting nodatasum [ 307.835363][ T7830] BTRFS info (device loop7): allowing degraded mounts [ 307.837100][ T7830] BTRFS info (device loop7): enabling disk space caching [ 307.838963][ T7830] BTRFS info (device loop7): disk space caching is enabled [ 307.840891][ T7830] BTRFS info (device loop7): has skinny extents [ 308.768186][ T7837] bond2: (slave gretap1): making interface the new active one [ 308.772127][ T7837] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 308.807182][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 308.973528][ T7830] BTRFS info (device loop7): clearing free space tree [ 308.975474][ T7830] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.977938][ T7830] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.994226][ T7875] tipc: Enabled bearer , priority 0 [ 308.996666][ T7875] device syzkaller0 entered promiscuous mode [ 309.044364][ T7828] BTRFS info (device loop7): balance: start -d -m -s [ 309.048771][ T7828] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata [ 309.086054][ T7828] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata [ 309.100644][ T7828] BTRFS info (device loop7): balance: canceled [ 309.197528][ T7879] tipc: Resetting bearer [ 309.326352][ T7874] tipc: Resetting bearer [ 309.425462][ T7874] tipc: Disabling bearer [ 310.351104][ T4484] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 17 /dev/loop7 scanned by udevd (4484) [ 313.679387][ T7921] tipc: Started in network mode [ 313.695144][ T7921] tipc: Node identity 9e4067ab666c, cluster identity 4711 [ 313.707309][ T7921] tipc: Enabled bearer , priority 0 [ 313.724265][ T7921] device syzkaller0 entered promiscuous mode [ 313.756581][ T7922] tipc: Enabled bearer , priority 0 [ 313.759655][ T7922] device syzkaller0 entered promiscuous mode [ 313.829095][ T7921] tipc: Resetting bearer [ 313.943069][ T7918] tipc: Resetting bearer [ 313.956135][ T7918] tipc: Disabling bearer [ 314.753628][ T7931] tipc: Enabled bearer , priority 0 [ 314.757432][ T7930] tipc: Resetting bearer [ 314.934341][ T7930] tipc: Disabling bearer [ 314.945364][ T7926] tipc: Disabling bearer [ 316.257208][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.258978][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.326141][ T7953] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 316.378793][ T7953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.396990][ T7952] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 316.403156][ T7952] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 317.522399][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.524963][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.527242][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.529468][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.531778][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.534170][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.536407][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.538632][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.540907][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 317.543143][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 318.437672][ T7953] bond4: (slave gretap1): making interface the new active one [ 318.441138][ T7953] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 318.907012][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 318.936471][ T7987] udc-core: couldn't find an available UDC or it's busy [ 319.140307][ T7987] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 322.317634][ T8020] tipc: Enabled bearer , priority 0 [ 322.347687][ T8024] loop6: detected capacity change from 0 to 512 [ 322.350360][ T8020] device syzkaller0 entered promiscuous mode [ 322.417741][ T8020] tipc: Resetting bearer [ 322.426696][ T8033] loop5: detected capacity change from 0 to 8 [ 322.443853][ T8027] netlink: 'syz.0.880': attribute type 12 has an invalid length. [ 322.511433][ T8024] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 322.543984][ T8019] tipc: Resetting bearer [ 322.552329][ T8024] UDF-fs: Scanning with blocksize 512 failed [ 322.556135][ T8019] tipc: Disabling bearer [ 322.560843][ T8024] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 322.569676][ T8024] UDF-fs: Scanning with blocksize 1024 failed [ 322.575533][ T8024] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 322.577576][ T8024] UDF-fs: Scanning with blocksize 2048 failed [ 322.583049][ T8024] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 323.401052][ T8024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.458402][ T8024] device bpq0 entered promiscuous mode [ 324.800088][ T8052] tipc: Enabling of bearer rejected, failed to enable media [ 326.065512][ T8076] loop0: detected capacity change from 0 to 40427 [ 326.176869][ T8068] tipc: Enabled bearer , priority 0 [ 326.279954][ T8068] device syzkaller0 entered promiscuous mode [ 326.499352][ T8076] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 326.509710][ T8076] F2FS-fs (loop0): invalid crc value [ 326.567993][ T8088] tipc: Resetting bearer [ 326.589140][ T8083] tipc: Enabling of bearer rejected, failed to enable media [ 326.592467][ T8076] F2FS-fs (loop0): Found nat_bits in checkpoint [ 326.645073][ T8076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 326.699915][ T8067] tipc: Resetting bearer [ 327.066960][ T4047] attempt to access beyond end of device [ 327.066960][ T4047] loop0: rw=2049, want=45104, limit=40427 [ 327.068870][ T8067] tipc: Disabling bearer [ 327.815088][ T25] tipc: Node number set to 346057726 [ 328.168455][ T8115] tipc: Enabled bearer , priority 0 [ 328.185144][ T8115] device syzkaller0 entered promiscuous mode [ 328.189637][ T8113] tipc: Enabled bearer , priority 0 [ 328.229169][ T8113] device syzkaller0 entered promiscuous mode [ 328.250264][ T8115] tipc: Resetting bearer [ 328.330300][ T8109] tipc: Resetting bearer [ 328.357761][ T8109] tipc: Disabling bearer [ 328.364571][ T8113] tipc: Resetting bearer [ 329.298690][ T8116] loop5: detected capacity change from 0 to 8192 [ 329.307328][ T8110] tipc: Resetting bearer [ 329.311677][ T8124] loop6: detected capacity change from 0 to 64 [ 329.334695][ T8110] tipc: Disabling bearer [ 330.213373][ T8116] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 330.216362][ T8116] REISERFS (device loop5): using ordered data mode [ 330.218054][ T8116] reiserfs: using flush barriers [ 330.284311][ T8116] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 330.288994][ T8116] REISERFS (device loop5): checking transaction log (loop5) [ 331.174487][ T8136] tipc: Enabled bearer , priority 0 [ 331.185303][ T8136] device syzkaller0 entered promiscuous mode [ 331.254631][ T8141] __nla_validate_parse: 43 callbacks suppressed [ 331.254646][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 331.303878][ T8136] tipc: Resetting bearer [ 331.331160][ T8156] tipc: Enabled bearer , priority 0 [ 331.348864][ T8156] device syzkaller0 entered promiscuous mode [ 331.367476][ T8135] tipc: Resetting bearer [ 331.375499][ T8135] tipc: Disabling bearer [ 331.586195][ T8156] tipc: Resetting bearer [ 331.717824][ T8155] tipc: Resetting bearer [ 331.770434][ T8155] tipc: Disabling bearer [ 331.813562][ T8116] REISERFS (device loop5): Using tea hash to sort names [ 331.975612][ T8116] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 333.270012][ T4172] Bluetooth: hci1: command 0x0406 tx timeout [ 333.402273][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.7.914'. [ 334.437662][ T8212] tipc: Enabled bearer , priority 0 [ 334.455343][ T8217] loop4: detected capacity change from 0 to 512 [ 335.177400][ T8212] device syzkaller0 entered promiscuous mode [ 335.205941][ T8212] tipc: Resetting bearer [ 335.241144][ T8209] tipc: Resetting bearer [ 335.263096][ T8209] tipc: Disabling bearer [ 335.990480][ T8217] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 339.324471][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.933'. [ 339.449603][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 340.247621][ T8285] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 340.250452][ T8285] Mem abort info: [ 340.251385][ T8285] ESR = 0x0000000086000006 [ 340.252593][ T8285] EC = 0x21: IABT (current EL), IL = 32 bits [ 340.254305][ T8285] SET = 0, FnV = 0 [ 340.255301][ T8285] EA = 0, S1PTW = 0 [ 340.256306][ T8285] FSC = 0x06: level 2 translation fault [ 340.257738][ T8285] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001169e5000 [ 340.259606][ T8285] [0000000000000000] pgd=08000001344a2003, p4d=08000001344a2003, pud=0800000133faf003, pmd=0000000000000000 [ 340.262843][ T8285] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 340.264731][ T8285] Modules linked in: [ 340.265734][ T8285] CPU: 1 PID: 8285 Comm: syz.5.937 Not tainted 5.15.189-syzkaller #0 [ 340.267867][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.270475][ T8285] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 340.272496][ T8285] pc : 0x0 [ 340.273318][ T8285] lr : bond_xdp_xmit+0x254/0x404 [ 340.274623][ T8285] sp : ffff8000211f73a0 [ 340.275692][ T8285] x29: ffff8000211f7460 x28: 0000000000000000 x27: ffff8000211f73c8 [ 340.277792][ T8285] x26: dfff800000000000 x25: ffff800012192438 x24: ffff0000cef48000 [ 340.279910][ T8285] x23: fffffbffefe965e0 x22: ffff0000ddcb4000 x21: fffffbffefe965e0 [ 340.281983][ T8285] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000200 [ 340.284041][ T8285] x17: 0000000000000002 x16: ffff8000082bf708 x15: 0000000000000001 [ 340.286135][ T8285] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000080000 [ 340.288233][ T8285] x11: 0000000000000436 x10: ffff800024229000 x9 : ffff8000211f7400 [ 340.290364][ T8285] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 340.292456][ T8285] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 340.294521][ T8285] x2 : ffff8000211f7420 x1 : 0000000000000001 x0 : ffff0000cef48000 [ 340.296604][ T8285] Call trace: [ 340.297440][ T8285] 0x0 [ 340.298134][ T8285] bq_xmit_all+0xc44/0x1020 [ 340.299330][ T8285] __dev_flush+0xc4/0x18c [ 340.300455][ T8285] xdp_do_flush+0x14/0x28 [ 340.301582][ T8285] tun_get_user+0x2434/0x31c4 [ 340.302791][ T8285] tun_chr_write_iter+0xfc/0x20c [ 340.304065][ T8285] vfs_write+0x7c8/0xa2c [ 340.305170][ T8285] ksys_write+0x120/0x210 [ 340.306300][ T8285] __arm64_sys_write+0x7c/0x90 [ 340.307530][ T8285] invoke_syscall+0x98/0x2b8 [ 340.308717][ T8285] el0_svc_common+0x138/0x258 [ 340.309970][ T8285] do_el0_svc+0x58/0x14c [ 340.311066][ T8285] el0_svc+0x78/0x1e0 [ 340.312117][ T8285] el0t_64_sync_handler+0xcc/0xe4 [ 340.313396][ T8285] el0t_64_sync+0x1a0/0x1a4 [ 340.314557][ T8285] Code: bad PC value [ 340.315587][ T8285] ---[ end trace 63ed95a1f76b0a73 ]--- [ 340.832750][ T8285] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 340.834855][ T8285] SMP: stopping secondary CPUs [ 340.836166][ T8285] Kernel Offset: disabled [ 340.837293][ T8285] CPU features: 0x8,000081c1,21302e40 [ 340.838680][ T8285] Memory Limit: none [ 341.339072][ T8285] Rebooting in 86400 seconds..