last executing test programs: 2m46.874383888s ago: executing program 0 (id=760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x3}}, 0x30) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 2m46.817647171s ago: executing program 0 (id=761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m46.816231271s ago: executing program 0 (id=762): clock_nanosleep(0x1, 0x1, &(0x7f0000000200), 0x0) 2m46.778107832s ago: executing program 0 (id=763): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004040, &(0x7f0000000b00)=ANY=[@ANYBLOB='lastblock=18446744073709551487,fileset=00000000000020000001,mode=00000000000000000000005,longad,unhide,nostrict,utf8,anchor=00000000000000000155,uid=forget,umask=00000000000000000000003,dmode=01777777777760000000001,undelete,session=18446744073709551613,nostrict,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x734, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m46.650860518s ago: executing program 0 (id=765): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48) 2m45.809951634s ago: executing program 0 (id=770): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 2m45.723155388s ago: executing program 32 (id=770): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 30.086315114s ago: executing program 5 (id=2181): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000002b00)) 30.069216655s ago: executing program 5 (id=2182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069103200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) 30.050649976s ago: executing program 5 (id=2183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000640)="$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") sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800c}, 0x24000021) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x16b, &(0x7f0000000840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x135, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@fragment={0x4, 0x0, 0xb, 0x0, 0x0, 0x2, 0x64}, @routing={0xff, 0xa, 0x0, 0x1, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}, {"98e6e09373ff954ccd69c01bcb1a9821b9ed49ab6744690137a138c6ab75c36d66a275db2137f8fe05d6a8d0d4d30edd5341debb552dceeb54e7f01efb5731982d7b461babee025a56d2a398a58f1431cf32985d16b3d8ba075068c7079dd44bc6b7e32d33a43f39765cd5e214ee96e3875c6b3c284f353be9af93b46dcde4c4fd5eef8eb05c110fde911d3dc8976ceb170bc31734dcc8cc3c3f45561be3b95b3b87d1dd2c66b083a82db42ccd4245e257379d939c068ef5663abdef75c5ab05d4"}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x20060400) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x106) lseek(r6, 0x101, 0x0) lseek(r6, 0x10001, 0x1) 28.963426522s ago: executing program 5 (id=2187): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 28.870364066s ago: executing program 5 (id=2195): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) remap_file_pages(&(0x7f00001af000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x100000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 27.706984706s ago: executing program 5 (id=2207): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 27.338453152s ago: executing program 33 (id=2207): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 3.860649635s ago: executing program 1 (id=2467): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) 3.774843349s ago: executing program 1 (id=2468): syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwkAUBNCJSVi8WYJXu0gT9pMWbMNKbMEmrEBZCe5hGxAR3jsNzLDLD7831CHJOicZk9TMfdfCMm5d1tTy2d1ObXHonnrdn3Wz7FOSdVeScum/Oj6mFqfkfP32aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD94BAAD//+9JEbM=") 3.729355591s ago: executing program 1 (id=2469): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.618827418s ago: executing program 1 (id=2480): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.854879491s ago: executing program 3 (id=2493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xfdfd, @private=0xfffffffc}}) 1.349771203s ago: executing program 1 (id=2494): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) 1.273971126s ago: executing program 3 (id=2495): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1, 0x40, 0x0) 1.210719699s ago: executing program 3 (id=2496): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 1.210265019s ago: executing program 1 (id=2498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_80211_inject_frame(0x0, &(0x7f0000000e00)=ANY=[], 0x29a) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x1000000}, 0x0) 606.305864ms ago: executing program 4 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340), &(0x7f00000002c0)=0x1a) 534.685078ms ago: executing program 4 (id=2506): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0xa249}], 0x1, 0x40000000, 0x0) 533.280208ms ago: executing program 6 (id=2508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000006080)=@newtfilter={0x3ec4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3e94, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_skbmod={0x4c, 0x14, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xbde}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}]}, {0x9, 0x6, "672a98b43b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x8b0, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x14000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x3, 0x7, 0xd8f, 0x7, 0x4, 0x5, 0x6, 0x5, 0x10001, 0x0, 0x4, 0x7, 0x510e, 0x1ff, 0x213, 0xff, 0x1, 0xcb7, 0x1, 0x9, 0xddfa, 0x2, 0x80, 0xfffffc01, 0x5, 0x5d, 0xd36, 0xa, 0x8, 0x0, 0x1d71, 0x2, 0x2, 0x3, 0xa, 0x7, 0xffffffff, 0x0, 0x7, 0x6, 0xe, 0x5, 0x6, 0x8, 0x3, 0xfd61, 0x1, 0x6b6, 0x4, 0x36db, 0xe9c8, 0x0, 0x0, 0x7, 0x7, 0x4, 0x5, 0x800, 0x4, 0x9, 0x86cd, 0x2, 0xb4caec9, 0x3, 0xbd28, 0x7df, 0x6, 0x2, 0x0, 0x1, 0x7, 0x3, 0x2, 0x5, 0x1, 0x7, 0x2, 0x9, 0x9, 0x6, 0x518e, 0xfffffff7, 0x2, 0x8, 0x4, 0x10001, 0x4, 0x5, 0xff, 0x200, 0xffffffff, 0x46, 0x1, 0x7ff, 0x6, 0xa, 0xe, 0x6, 0x4, 0x3, 0x7, 0x76868327, 0xfffffbff, 0x4, 0x1000, 0x7, 0x7, 0x8, 0x7f, 0x1ed, 0xb, 0x6, 0x4, 0x9, 0x8, 0x5, 0x81, 0x5, 0x2, 0xffffffff, 0x2, 0x1ff, 0x4, 0x2, 0x4, 0xd165, 0xd8, 0x2, 0x8, 0x8, 0x0, 0x2, 0x21a, 0x1, 0x3ff, 0x96, 0x6cc, 0x400, 0x3ff, 0x7, 0x7, 0x3, 0x80000001, 0x3ff, 0x10000, 0x8, 0x6a8c, 0x3ff, 0x5, 0x2, 0x80000000, 0x2, 0x401, 0x3, 0x7ff, 0xb, 0x2, 0x0, 0x7, 0x29, 0x3, 0x4, 0x1c7, 0x3, 0x0, 0x61, 0x549, 0x1, 0x346, 0x7, 0xfff, 0xf5a, 0x5, 0x80000000, 0xa5ff, 0xce, 0x3, 0xfffffff9, 0x1, 0x10001, 0x9, 0x0, 0x3ff, 0x8, 0x3f80, 0x80, 0xfffffffd, 0x6, 0x400, 0x82, 0x1, 0x5, 0x9, 0x9, 0x0, 0x7, 0x6, 0x5, 0x400, 0xfffffffc, 0xe, 0x81, 0x1, 0x0, 0x800, 0x7, 0x5, 0x7, 0x97, 0x380000, 0x5, 0x4fa6, 0x5, 0x6, 0x3, 0x4, 0x5, 0x5, 0x1, 0x95, 0x10001, 0x6, 0x8b, 0x7, 0x80000001, 0x3, 0xffffffc0, 0x101, 0x6, 0x5, 0x7, 0x6e4, 0xd, 0x1, 0x6, 0x80, 0x1, 0x2, 0x7, 0x9, 0x7, 0x3, 0x4, 0x48, 0x9, 0x40, 0xfffffdd0, 0xa0, 0x3, 0x80000000, 0x80000001, 0x61a6, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x2, 0x5, 0x4, {0x9, 0x0, 0x5, 0x8, 0x1ff, 0x3}, {0x5, 0x0, 0x8a9, 0x3, 0x6, 0x4000}, 0x2, 0x10, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0xffffffffffffffff, 0x5, 0x8, 0x1, {0xb, 0x2, 0x8, 0x140, 0x8000, 0x3}, {0x2, 0x1, 0x3, 0x3ff, 0x495}, 0x0, 0x99, 0x40}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x7, 0x3, 0xb7800000, 0x5, 0x1, 0x0, 0x0, 0xae9, 0x7fffffff, 0x0, 0xbb, 0x1, 0x4, 0x6, 0x5, 0xfff, 0x80000000, 0x8001, 0x1ff, 0x7, 0x0, 0xf51, 0x0, 0x5, 0x8000, 0x1, 0xfffffff9, 0x5da6, 0x5, 0x9, 0x6, 0xffff8f7c, 0x0, 0xfffff02b, 0x9, 0x5, 0x8, 0x1, 0xa0000, 0xe, 0x5, 0x800, 0x4, 0x4, 0xfffffffe, 0x9, 0x400, 0x1, 0x7f, 0xfffffffb, 0x5, 0xfffffff9, 0xc, 0xfffffff9, 0x7, 0x10, 0xffffffff, 0xbc6, 0x4, 0x7, 0x0, 0x4, 0x1, 0x1, 0xcb9, 0x2, 0x2, 0xcbe, 0x8, 0x2, 0xec62, 0x40, 0x1, 0xf5, 0x5, 0xbb3, 0x8001, 0x1cbd, 0x754cf5a6, 0x401, 0xf, 0x6, 0x7, 0x8, 0xa, 0xff, 0x0, 0x8, 0x0, 0x2, 0xf6a1, 0x2, 0x33e, 0x9, 0x620c, 0x1, 0x5, 0x9, 0x2, 0x9c82, 0xf, 0x5, 0xc0, 0x4, 0x9ef5, 0x7a, 0x9, 0x7, 0x2, 0x1ff, 0x1, 0xffff, 0x2d1, 0x0, 0x5, 0xffffffff, 0x4, 0x6, 0x800, 0x10001, 0x4, 0x4, 0x771c, 0x8000, 0x4, 0x0, 0x101, 0x400, 0x3, 0x3, 0x3, 0x6, 0x48, 0x8, 0x0, 0x0, 0x2, 0x200, 0x3, 0x5, 0x1, 0x8, 0xee10, 0x80000001, 0xc, 0x6, 0x3ff, 0x7, 0x3ff, 0x4, 0x5, 0xbe46562, 0x7ff, 0xfa6d, 0x1ff, 0x401, 0x7, 0xff, 0x4, 0x22, 0x0, 0x1ff, 0x3, 0x2, 0x400, 0x80000000, 0x8, 0x4, 0x5, 0x8, 0x5, 0xffff, 0x602d, 0xf8000000, 0x9, 0x1000, 0x0, 0xff, 0x10, 0xd, 0x9, 0x7d0d, 0x6ac1fedb, 0x800, 0x0, 0x3, 0xc28, 0x3, 0x9, 0x1, 0x4, 0x10000, 0x7, 0x1, 0x3, 0x100, 0x5, 0xd, 0x3, 0x8000, 0x3ff, 0x10001, 0x9, 0xfa5, 0x9, 0x4, 0x4, 0x9, 0x5, 0x3ff, 0x932, 0xffffff7f, 0x9, 0x8, 0x9, 0x4, 0xffffffff, 0x5, 0x101, 0x9, 0x5, 0x7e, 0x80000000, 0x2, 0x70b6, 0x200, 0x8, 0xfffffff7, 0x0, 0x7fffffff, 0x0, 0x5, 0x200, 0x3ff, 0x9, 0xb9, 0x0, 0x0, 0x2, 0x3, 0x3, 0x5, 0x358, 0x7, 0x6988, 0x2, 0x8000, 0x41a, 0x400, 0x2, 0x7, 0x8e47, 0x2e, 0x7ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_POLICE={0xc1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x8, 0x40, 0x101, 0x9, 0x40, 0x7394, 0x8000, 0x1efa, 0x8001, 0x0, 0xbc, 0x7fffffff, 0x1, 0x81, 0x1, 0x7fffffff, 0x8e76, 0x7, 0x80000000, 0x40, 0x0, 0x4, 0xffffffee, 0x1, 0x7ff, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x2a46, 0x5, 0x0, 0x1, 0x7eed, 0x10000, 0x8, 0x8628, 0x8, 0x7, 0x9, 0x0, 0x0, 0x4, 0x4, 0x610, 0x7fff, 0x31, 0x3, 0x7fff, 0x6, 0x0, 0x23f, 0x100, 0x9, 0xc, 0x0, 0x101, 0x0, 0x1ff, 0xe, 0x4, 0x3, 0x1, 0xf, 0x4, 0x3149, 0x6, 0xffffffff, 0x9, 0x9, 0x4, 0x8, 0x7ff, 0x3, 0x7fffffff, 0x2, 0x0, 0x0, 0xd, 0xffffffff, 0x80000001, 0x30, 0x7e4, 0xe, 0xd9b, 0x3, 0x0, 0x3ff, 0x8, 0xfffffff9, 0x101, 0x3d, 0x6, 0x9, 0x489b1046, 0x800, 0x9, 0xff, 0x7, 0x6, 0x8, 0x0, 0x4, 0xae7e, 0x401, 0x9, 0x4, 0x4, 0xfc, 0x5, 0x6a, 0x10001, 0x6, 0x2, 0x9, 0xf, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffd, 0x3678, 0x2, 0x1, 0x40, 0x3, 0x6, 0x6, 0xfffffffa, 0xd4ef, 0x3, 0x0, 0x3, 0x7, 0x2, 0x2, 0x9, 0x10, 0x1, 0x2, 0x5, 0xb18, 0x0, 0x0, 0x0, 0x7, 0x36c8000, 0x1, 0x2, 0x9, 0x8cd6, 0xfffffffe, 0x91, 0x4, 0x1, 0xae7, 0xa03, 0x9, 0x7ff, 0x40, 0x400, 0xe, 0x0, 0x1, 0x9, 0x0, 0x1, 0x2, 0x8, 0x3c4, 0x80, 0x3, 0x5, 0x2, 0x8, 0x2, 0x0, 0x4, 0x5, 0x81, 0x100, 0x4, 0x400, 0xbeaa, 0x8ad7, 0x6, 0x4, 0x7ff, 0x499d, 0x8, 0x2, 0x4, 0x2, 0x6, 0x4, 0x0, 0x400, 0x438, 0x74a8, 0xc, 0x8f45, 0x3, 0x0, 0x0, 0x0, 0x7, 0xe, 0x4, 0x80, 0xfffffffa, 0x3ff, 0x7f, 0xb902, 0x9b1, 0x3, 0x5, 0x7, 0x8, 0x7fffffff, 0x5, 0x2, 0x1, 0x7, 0xfffffffc, 0x4, 0x6, 0xf5, 0x5, 0x15, 0x1, 0x0, 0x9, 0x0, 0x6, 0x3, 0x81, 0x2, 0x40, 0xcd2, 0x5, 0x80000000, 0x8, 0xac79, 0xfffffff7, 0x2, 0x9, 0x10000, 0x2, 0x7, 0x101, 0x8, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x0, 0x66c, 0x10000, 0x7fff, 0x7, 0x3, 0x8, 0x7, 0xea2b, 0x7feba851, 0x6, 0xb, 0x2, 0x4, 0x3, 0xffffffff, 0x6, 0xea0, 0x2, 0xb9b7, 0x3, 0x10000, 0x2, 0x0, 0xfffffff9, 0x8, 0x3, 0x100, 0xfff, 0x9, 0x6, 0x0, 0x4, 0x1, 0xc0000, 0xffff, 0xfffffffc, 0x6, 0x2, 0x3, 0x2, 0x9, 0xb, 0x9, 0x2, 0x0, 0x800, 0x0, 0x3ff, 0xff, 0x1, 0x2537, 0x953, 0xc, 0x4, 0x40, 0x1, 0x40, 0x2400, 0x4, 0xd, 0x0, 0x0, 0x1, 0x2, 0x9, 0x1, 0x0, 0x7, 0x4, 0x6, 0xac2fe7c7, 0x2, 0x8, 0x2, 0x4, 0xfffffbff, 0x101, 0xb, 0x9, 0x7, 0xa, 0x9, 0x7, 0x4, 0x4, 0x200, 0x6, 0x5, 0x6, 0xd, 0x7ff, 0x401, 0x8b, 0x1, 0xc, 0x2c, 0x7, 0xfffffff3, 0x6, 0x95b4, 0x1, 0x80000001, 0x6, 0x7, 0x4, 0x6, 0x4, 0x7, 0x101, 0x42, 0x7, 0x80000000, 0xffff, 0x5, 0x3, 0x7, 0x9, 0xe, 0x7, 0x7927, 0x8, 0x2, 0x3, 0x1, 0x2, 0x3, 0x735, 0x0, 0x8f, 0x5, 0x0, 0x200, 0x8, 0x10, 0xb, 0x60000, 0xce800, 0x7, 0x7ff, 0x401, 0x6, 0xeea, 0x9, 0x8, 0x6, 0x3, 0x7f, 0x8, 0x38000000, 0x3, 0x4, 0x630380, 0x8, 0x0, 0x1, 0x1, 0x9, 0x9, 0x5, 0x2, 0x7fff, 0x5, 0x9, 0xff63, 0xfffffc00, 0x0, 0x6, 0x395, 0xfffffff9, 0x6f, 0x5, 0x2, 0x5, 0x1, 0x9, 0x4, 0x10, 0x3, 0x3, 0x0, 0xd, 0x4, 0x2, 0x101, 0x2, 0x8, 0x80, 0x241, 0x7f, 0x0, 0xa82, 0x0, 0x3, 0x9d, 0x3, 0x7, 0x8, 0x5, 0x5, 0x800, 0x8265, 0xb5, 0x4, 0x81, 0x0, 0x7fffffff, 0xa, 0x7, 0x0, 0x60000, 0x8000, 0x8, 0x6, 0x6, 0x400, 0x9, 0x1, 0x2, 0x80, 0x200, 0x2, 0xff, 0x3, 0xf, 0x6, 0x9, 0x4, 0x9, 0x3, 0x1, 0x2, 0xfffff800, 0x2, 0x6, 0x1, 0xd, 0x0, 0x4, 0xffff0000, 0x3, 0x4, 0x5, 0x7ff, 0x5, 0x4b92, 0x9, 0x5, 0x9, 0xf65, 0x5, 0x7, 0x8, 0xe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x96, 0xf6b, 0xe, 0xe, 0x0, 0x8, 0xc9f, 0x5, 0x9, 0x9, 0x7, 0x3, 0xc, 0x1000, 0x1ba, 0x10, 0x400, 0x0, 0x2ac00, 0x100, 0x4, 0x7ff, 0x101, 0x5d3b, 0x6, 0x1, 0x400, 0x5, 0x414, 0x10000, 0x81, 0x0, 0x3, 0x7f, 0x10000, 0x3, 0x1, 0x653c, 0x9, 0x3, 0x2, 0xfb, 0x9f76, 0x3, 0x2, 0x3, 0x3, 0x800, 0x6, 0x7, 0x378b, 0x3, 0x80, 0x7, 0xa, 0x80000000, 0xfff, 0x8, 0x7, 0x604, 0x4, 0x7f, 0x4, 0x5, 0x823d, 0x3, 0x0, 0x3, 0x6, 0x8, 0x0, 0x0, 0x4, 0xfffff8f8, 0x6, 0x8, 0x2, 0x8, 0xe9, 0x1, 0x8000, 0xfffffd30, 0xdf78b35, 0x400, 0x800, 0x2, 0x6, 0x9, 0x2, 0x6, 0x4, 0x6, 0x64c0, 0x9, 0x6, 0x2, 0x8, 0x6, 0xdd49, 0x0, 0x952, 0x8, 0x200, 0x2000, 0x101, 0x200, 0x100, 0x8, 0x8a, 0x2, 0x2, 0xf216, 0xd, 0x7fff, 0x5, 0x3dc3, 0x4, 0x4, 0x2, 0x808, 0x800, 0x4d, 0x5, 0x1, 0xa, 0x1a5600, 0x8, 0x1, 0x6, 0x7, 0xfffffff8, 0x7, 0x401, 0x10001, 0x6, 0x1, 0x0, 0xa381, 0xb9, 0x4, 0xfffffffc, 0x3, 0x7ff, 0xfffff7be, 0xf4, 0x1, 0x14, 0x40, 0x0, 0xffc0000, 0x4, 0x9, 0x0, 0x4, 0x3, 0xf5, 0x0, 0x8, 0xe, 0xd, 0x100, 0x6, 0x5, 0x3, 0x5, 0x8, 0x800b, 0x1, 0xfff, 0x81, 0x1f9600, 0xfffffffd, 0x80000000, 0xeb, 0x5, 0xe, 0x9321, 0x2, 0x3, 0x6000, 0x746fbbbf, 0x5, 0x63e, 0xb, 0x3ed, 0x3, 0x8, 0x8e, 0x0, 0x7ff, 0x5, 0xfe2, 0x800, 0x8001, 0x4, 0x0, 0xc3, 0x9, 0x200, 0xffff, 0x0, 0x81, 0x7, 0x6, 0x4, 0x100, 0x3, 0x4, 0x4, 0x6, 0x7, 0x0, 0x82, 0xffffffff, 0xfff, 0x7, 0x49, 0x7, 0x3, 0xd0, 0x5, 0x8, 0x152, 0x7ff, 0x2, 0x3, 0x2, 0xfffffffa, 0x1000, 0x3, 0x6, 0xae, 0x3, 0x1, 0x3, 0x2, 0x24, 0x2a7, 0x3, 0x3, 0x7fffffff, 0x107, 0x4, 0xffff, 0xfffffffd, 0xfffffffa, 0x2, 0x6, 0xfffffffc, 0xfffffff9, 0xa34, 0x200, 0x5, 0x8000]}]}, @TCA_CGROUP_POLICE={0x830, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x20000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f6}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xe, 0xcb, 0x5, 0x8, 0x7fffffff, 0x0, 0xd2, 0x7, 0x0, 0x5, 0x4, 0x688, 0x8, 0x3, 0x7374, 0x218, 0xfffffff7, 0x2, 0x9, 0x2, 0x2, 0x9, 0x2, 0x1, 0x8, 0x4, 0xafab, 0xc, 0x5, 0x7fff, 0x3ff, 0x200, 0xfffffffa, 0x7, 0x7f, 0xffffffff, 0x1ff, 0x5, 0x5, 0x17, 0x81, 0x6, 0x5, 0x5, 0x800, 0xe, 0x40, 0x7, 0x5, 0x2, 0xfff, 0x2, 0xec, 0x5e35, 0x5, 0x0, 0x3, 0x5, 0x9, 0x2, 0x3, 0x1, 0xfffffffc, 0x9, 0x1, 0x4, 0x1000, 0x4, 0x6, 0x1, 0x40, 0x80008, 0x0, 0x800, 0x1, 0x7, 0xffffffff, 0x2, 0x69c1, 0x2, 0x0, 0xfffffffa, 0x7, 0x6, 0x2, 0x7f, 0x1, 0x3, 0x7, 0xcc, 0xd9, 0x8000, 0x3, 0xd3, 0x8080, 0x8001, 0x0, 0x8, 0xdc, 0xb, 0x1ff, 0x4, 0x9, 0x6, 0x0, 0x6, 0x51, 0x8, 0x0, 0x6, 0x8, 0x10, 0x3, 0x9907, 0xe9c6, 0x8001, 0xe8e, 0x0, 0x7, 0x6, 0x0, 0x3, 0x200, 0x2, 0x0, 0x660aba2, 0x6, 0x5, 0x80, 0x5, 0x4, 0xa1, 0x40, 0x8d0, 0x37, 0x1, 0x2ecc, 0x33d9, 0xffffffff, 0x10001, 0x7, 0x1, 0x80000001, 0x2, 0x9, 0x10001, 0x6, 0x80, 0x6, 0x8, 0x18, 0x80000001, 0x1, 0x82, 0x0, 0x9, 0x68, 0x1ff, 0x9, 0x8000, 0x1, 0x1000, 0x7fff, 0x90, 0x7, 0x8, 0x1, 0x7fff, 0x1, 0x2, 0x1, 0x8, 0xfffffff8, 0x5, 0x4, 0x0, 0x101, 0x6, 0x9, 0x4, 0xe651, 0x80, 0xc, 0xfffffffc, 0x5, 0xfffffffe, 0x6, 0x9, 0x3d, 0x0, 0xdc55, 0x5, 0x101, 0x4, 0x7fff, 0x7e0, 0x7, 0x5, 0xe, 0x7, 0x85e6, 0x9, 0x86, 0x2, 0x80000001, 0x6, 0x1, 0x0, 0x5, 0xe, 0x273, 0x7f, 0x1000, 0xc45, 0x8, 0x7, 0x6, 0x7fff, 0x7, 0x672, 0x2, 0x5, 0x46, 0x2, 0x8001, 0x7, 0x9, 0x7, 0xba7, 0x7bb8c1b3, 0xec1f, 0x7, 0x4, 0x4, 0x0, 0x3, 0x5, 0x74b9, 0xa08, 0x8, 0x8, 0xb, 0x3ff, 0x3, 0x8, 0x56, 0x4, 0x10000, 0x2, 0x9, 0x8, 0x6, 0x0, 0x8, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x62, 0x8, 0x2, 0xd, 0x6, 0x3, 0x6, 0x2, 0x6, 0x4, 0x7, 0x0, 0x3, 0x11400, 0x0, 0x64, 0x6, 0x11, 0x0, 0x8, 0x8, 0x5, 0xf10f, 0x5, 0xfffffff8, 0x9, 0xc3, 0x4, 0xaea, 0x4ac522a2, 0x40, 0x7, 0x9, 0x3ff, 0x3, 0x80, 0x542, 0x1, 0xfd, 0x3, 0x0, 0x9, 0x8, 0x80, 0x7, 0x5, 0x200, 0x7dda, 0x4, 0x80000000, 0x674, 0x0, 0x7, 0xfff, 0x3, 0x0, 0x1, 0x2, 0x7, 0x0, 0x2, 0x8, 0x5, 0x3, 0x7, 0x80000000, 0x49b0, 0xbe, 0x1, 0x10, 0x1, 0x7, 0x4, 0xb, 0x7, 0xfffffff5, 0x8, 0x6, 0x3, 0x20000000, 0x4, 0x10001, 0xfffffffc, 0x7, 0x4, 0x7f, 0x8000, 0x8, 0x5, 0x6, 0xd, 0x1ff, 0x85, 0xffff, 0x400000, 0x8, 0x1, 0x1, 0xf, 0x10000, 0xc, 0x2, 0x4, 0x8000, 0x1, 0x8, 0xced6, 0x7, 0x4, 0x5, 0x8001, 0x2, 0x8, 0x101, 0x7, 0x8, 0xefec, 0x0, 0x40, 0xd14, 0xc4b8, 0x790, 0x8, 0x1000, 0x3, 0x7, 0x0, 0x3, 0xd, 0x6f, 0x8, 0x891, 0x7fff, 0x9, 0x4, 0x0, 0x2, 0x2, 0x1, 0x9, 0x5, 0x8, 0x800, 0x2, 0x9, 0xa, 0x2, 0x0, 0x1, 0x8000, 0x4, 0x3, 0x6, 0x9, 0x400, 0x9, 0x3, 0xffffff1e, 0x7, 0x0, 0x2ca, 0x5, 0x7, 0x3, 0x0, 0x8, 0x0, 0x7fff, 0x80000000, 0x8, 0x5, 0xffff, 0x9, 0x0, 0x100, 0x2, 0x2, 0xf, 0xffff, 0x9, 0x8000, 0x10, 0x3ae, 0x2, 0x9, 0xca, 0x8, 0x3, 0x0, 0x36335693, 0x2, 0x8001, 0x401, 0x100, 0x2, 0x6, 0x4, 0x7, 0x5, 0x3, 0x2, 0x3fd5, 0x2, 0x1e84, 0x200, 0x0, 0x2, 0xfffffff8, 0x80, 0x9, 0x6, 0x32c, 0x5, 0x3, 0xfffffffa, 0x4, 0x80, 0x1000, 0x7, 0x3, 0x0, 0x70000000, 0x9, 0x5, 0x2cde9b1a, 0x6, 0x6, 0x1, 0x401, 0xfffffffc, 0x3, 0x1000, 0x4, 0x5, 0x4, 0x8, 0x9, 0xffffffff, 0x48, 0x2, 0x32b, 0xfea56fc0, 0x4, 0xffffff01, 0x3, 0x0, 0x6, 0x8000, 0x2, 0x9, 0x2, 0xee8c, 0x4, 0x0, 0x6, 0x7]}]}, @TCA_CGROUP_ACT={0x2144, 0x1, [@m_ife={0x150, 0xa, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="c4c975e76535"}, @TCA_IFE_SMAC={0xa, 0x4, @random="9d8d8f0688f3"}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x763}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xdb5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x8, 0xffffff7c, 0xe6}, 0x1}}]}, {0xbd, 0x6, "7b150da4d09f77cd104a9b51c14624636ec497a762aca0b2916f4db123a3dad6ee516da031511d1f27eacac858f78ae838823a7a488a9a635735157a24b929cb438819107efec891e2fbda241f7d7e53f19a70f02c2a943e6a670b6fecd78b0c83492a055d840a40f1398d754685e81db4d590f80845553de160e3513d54e0d66432cab4687d65aba2a4137174ce7c4a1cd32f0b1819f166164c3040c451d83ca045ba850378a81a76960333b9b71eec528254c78118ec9d7b"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x1d8, 0x15, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x101, 0x6, 0x3, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5af0, 0x5, 0x356, 0xc318d05c}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xb, 0x7, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x2000000a, 0x9, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xd, 0x10000000, 0xfffff95a, 0x197}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x16a, 0xe, 0x1, 0x2, 0x24a0}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x8, 0x4, 0x7}}}]}, {0xca, 0x6, "5269dc106e22d96cc374da5c3c67d3380bc965c6c21d540fe5491e3729358b2d5d11e8c3888ca1c276b8bd28dc3c23b283945a5ba33b388b478a995541329959e69af916bbedc3163279036bd3f6cb54cef9aa296a3803155a984d66e44045a916fe7d582ce7900fee51b81f766d669a80b748b87c550becc00bcc343fb7c972df783a22bc5981dfee1ab0b78e9cd447dd8cba91577ffe3208bbc4876e263ca7e8f5af36a5c488a4eee8241d26193a5819d56c7e26b2cb423a169f3e8513669f9596373cb3e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x104, 0x16, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3bb, 0x40, 0x2, 0x1ff, 0xc}}]}, {0xbd, 0x6, "7ba69b966a37cbd786e7279ff0008178b81a6bd16daab3de9a26b70efb48e05b0712627f95e70b82d4fc78b8c5317e26a3efb5b2f6605324c7e1f481e535589ef4d6d4041f622d9ad4dacb21d931623aa255bb3c95615398450ec8593d84c9b65c0a95247fb40ec06872d01f96a3117d42684e68c7779fae3558ada6cd17e8e491218cb4e333dbf0d149d75a233c6a72707c8e746a79a2af0f14372bb2203e1b5f3138c63d807c24631a2cc0130580813dfc43be45121f99f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1d14, 0x1, 0x0, 0x0, {{0xb}, {0x1ce4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0xa8, 0x7ba, 0x5, {0x9, 0x1, 0x5, 0x9, 0x4, 0x3}, {0x10, 0x0, 0x80, 0xfff, 0x6, 0x2}, 0x0, 0xc199, 0xbb4}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x5, 0x4, 0x3, {0x71, 0x0, 0x3, 0xbfd7, 0xe59, 0x100}, {0xa, 0x1, 0xfa9b, 0x2, 0x7, 0x9}, 0x81df, 0xf, 0x4}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xde60, 0x5, 0x4b5b, 0x2, 0xaf73, 0x0, 0x6, 0x3, 0x0, 0x9, 0x800, 0xfffffff1, 0x10000000, 0x6, 0x10001, 0x5, 0xbae, 0x4, 0x0, 0x5, 0x6, 0x5, 0xfa4d, 0x2, 0xf, 0x80, 0x8001, 0x8c, 0x9, 0x13, 0x2, 0x4, 0x2, 0xd0ce, 0x101, 0x7fffffff, 0x2, 0xffffffff, 0x80000001, 0xb2, 0x3, 0xfffffffc, 0x9, 0x0, 0x5, 0xb, 0x2, 0x1, 0x2, 0x6, 0x8, 0x7, 0x2, 0x6, 0x7, 0x2, 0x2, 0x800, 0x10, 0x99, 0x7da, 0x1, 0x62f, 0x80000001, 0x8, 0xe0000000, 0x4, 0x1, 0x6, 0x7, 0x4, 0x80000001, 0x5, 0x5, 0x8, 0x5, 0x9, 0x10, 0x6, 0x2, 0x7, 0x8, 0x6, 0x9, 0x6, 0x0, 0x8, 0x6, 0x1, 0xffffffff, 0xb06, 0x5, 0x5, 0x10, 0x90000000, 0xaff8, 0x9, 0x3, 0x5, 0x54c2, 0x3, 0x6, 0xa, 0x55, 0x7f, 0x2, 0x9, 0x3, 0x8, 0x464a2663, 0x5, 0x9, 0x51, 0x1ff, 0x6, 0xda2, 0x52, 0x3, 0x4, 0x1ff, 0x2, 0xa, 0x1, 0x7, 0x7fffffff, 0x4, 0x4, 0x7fffffff, 0x28, 0xffff, 0x0, 0x3, 0x1, 0x8, 0x4, 0x6, 0x8, 0x7f, 0x8, 0x4, 0x9, 0xfffffe29, 0x6, 0x5, 0x6a3, 0x50b, 0x80, 0x4, 0x9, 0x5, 0x7, 0xffffffff, 0x2, 0x7, 0x4, 0x7, 0x40, 0x6, 0x8, 0x0, 0x400, 0x2, 0x3, 0x2, 0x7ff, 0x83c2, 0x3, 0x5, 0x1, 0x6, 0x0, 0xd, 0x0, 0x8000, 0x4, 0x2, 0x7, 0x7fffffff, 0x5d0, 0xfffffffa, 0x1, 0x32a7, 0x10000, 0x6684, 0x30, 0x0, 0x9, 0xfffffff5, 0x0, 0x3, 0x9a, 0x3, 0x10, 0x7, 0x8, 0x0, 0x3, 0x1, 0x0, 0x70, 0x6, 0x2, 0x3, 0x5, 0x6, 0x0, 0x4, 0x10, 0x3, 0x4, 0x3, 0xff, 0x7, 0x3, 0x9, 0x7, 0x5, 0x6, 0xf, 0x9, 0x20, 0x2, 0x8001, 0xc2, 0x7, 0x40, 0x3, 0x5, 0x7, 0x5, 0x3ff, 0x10, 0x2, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x40, 0xff, 0x7, 0x0, 0x4, 0x9, 0x9, 0x80000000, 0x5, 0x60, 0x7, 0x9, 0x6, 0x2, 0x7f, 0x9fe2fe5f, 0x401, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1a1, 0x2, 0xffffffff, 0xd35, 0x8001, 0x9, 0x6, 0x1ff, 0x2, 0x5, 0x6, 0x2, 0x0, 0x9, 0x10000, 0xff, 0x2, 0x9, 0x4, 0xeb, 0x8, 0xf, 0x3ff, 0x8, 0x3, 0x9, 0x10001, 0x9, 0x0, 0x6d, 0x39e, 0xffff, 0x8, 0x80, 0x6, 0x3ff, 0x200, 0x6, 0xfffffffc, 0x2, 0x4, 0x30, 0x1000, 0x6, 0xa7, 0xfffffffb, 0x5f08, 0x1, 0x1, 0xd1, 0x9, 0xd1, 0x7fffffff, 0x2, 0x9, 0x9, 0x6, 0x6, 0xfffffeaf, 0x8a2, 0x8, 0x5, 0xfffffff7, 0x0, 0x4, 0x8, 0xcbf40c5, 0xfffffffc, 0xe0, 0x9, 0x2, 0x3, 0x6, 0x6, 0x9, 0x5, 0x3f800000, 0x2, 0x700000, 0x200, 0x81, 0x7, 0x55, 0x5, 0x8000, 0x2, 0x3, 0x4d9, 0x1, 0x1, 0x4, 0xffff658f, 0x10000, 0x8, 0x4, 0x3ff, 0x0, 0x4, 0xfff80000, 0x6, 0x6, 0x2400000, 0x2, 0xff, 0x6, 0x1, 0x0, 0x82c, 0x8, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x831, 0xdc7, 0x7, 0x4, 0x5, 0x9, 0x8d1f, 0x7, 0x3, 0x1, 0x3, 0x6, 0x6a, 0x5, 0xfffffffb, 0xff, 0x4, 0x4, 0xc000000, 0x7, 0x6, 0x1ff, 0x3451, 0x5, 0xfffffff7, 0x4, 0x9, 0x8, 0xa3a, 0x401, 0x6, 0x40, 0x0, 0x6, 0x1, 0x7ff, 0xffff0001, 0x3, 0xd, 0x4, 0x4, 0x6, 0x4, 0x6, 0x401, 0x57, 0xfffffffc, 0x7175, 0x5ca3, 0x2, 0x7, 0x0, 0x8, 0x4, 0x1, 0x7, 0x5, 0x9, 0x4, 0x26, 0xfffffffd, 0x200, 0x80000001, 0x6, 0xd12, 0x4, 0x4, 0x7, 0x5, 0x5, 0x7, 0x5, 0x7, 0x0, 0xffffffff, 0x4, 0x7, 0x9, 0x10001, 0x8b5b, 0x9, 0x3, 0x861a, 0x4, 0x4, 0xe, 0x600000, 0x9, 0x8, 0xfffffff9, 0x400, 0x401, 0x7, 0x6, 0x10, 0x0, 0x450, 0x35, 0x40, 0x7, 0x1ff, 0x8, 0x1930, 0x1, 0x3, 0x0, 0x27a4, 0x9c, 0x7, 0x0, 0x2, 0x5, 0x2, 0x8, 0x400, 0x1f, 0x3, 0x8000, 0xe, 0xffff, 0x7d5a, 0x86c, 0xe, 0x9, 0x80000001, 0xdd, 0x8, 0xfbaa, 0x1, 0x8, 0x10001, 0x8, 0x9, 0x6fcec212, 0x4, 0x7, 0x5, 0x7f, 0x3, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x0, 0x40, 0xfffffffa, 0x9, 0xaf, 0x2, 0x10, 0x608e, 0xfffffff9, 0x1, 0x7ff, 0x9a7, 0x3, 0xc9, 0x2d, 0x4, 0x8, 0x9, 0xffff7fff, 0xe5, 0x4, 0x6, 0x6, 0x650, 0x80000000, 0xa464, 0x5, 0x0, 0x10000, 0x3, 0x9, 0x7, 0x800, 0x3b27, 0xffffffff, 0xa7, 0x10, 0x4, 0x1, 0x9, 0xfffffffc, 0x9, 0x6, 0xfffff001, 0x7, 0x0, 0x1, 0x35d6, 0x7, 0x0, 0x0, 0x9, 0xe9dd, 0x0, 0x10001, 0xb, 0x7, 0x7, 0x0, 0x4, 0xc, 0x3ff, 0x26f1, 0x985, 0x6, 0x6, 0x600000, 0x2, 0x6, 0x8, 0x5, 0x3ff, 0x7d0, 0x9, 0x2, 0x0, 0x4, 0x101, 0x1, 0x8b, 0x6, 0x2, 0x19aa0b82, 0x61, 0x2, 0x9, 0x2, 0x0, 0x49122717, 0x72, 0x80, 0x9, 0x5, 0x1, 0x100000, 0x4, 0x48defa6a, 0x9, 0x100, 0x9, 0x1, 0x6, 0xfffffff9, 0x8ae, 0x8, 0x0, 0x9, 0xfd, 0xf, 0xfd, 0x0, 0x6, 0xfff, 0xa, 0x81, 0x80000001, 0x3, 0x3ea, 0x3ff, 0x6, 0xfffffffc, 0x3, 0xfff, 0x7ff, 0x10000, 0xb1, 0x2, 0x100, 0x4b9f, 0x101, 0x6, 0x3, 0x0, 0x5, 0xc0, 0x6, 0x8, 0x9, 0x7, 0x7fffffff, 0x9, 0x1, 0x2, 0x8, 0x13, 0xe, 0x9, 0x0, 0x3, 0x5, 0x2, 0xe93, 0x9, 0xffff, 0x9, 0x8001, 0x1f, 0x9, 0x2, 0x7ff, 0x8, 0x3, 0x7f, 0x80000001, 0x0, 0x8, 0x4, 0xc12, 0xffff, 0x3, 0x10001, 0x0, 0x1, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x8, 0x8, 0x1, 0x5, 0xffff, 0xe6, 0x7, 0x9, 0xa4e, 0x0, 0x1, 0x3ff, 0xbf7e, 0x401, 0x7, 0x2000, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x800, 0x3ff, 0x1, 0xffff, 0x7, 0x3, 0x5, 0x101, 0x7ff, 0xd5d7, 0x30, 0x8, 0x8, 0x9, 0x7, 0x8, 0x1, 0x3db, 0xfffffffb, 0x7, 0x2, 0x0, 0x5, 0x8ed6, 0x9, 0x80000001, 0x101, 0x4fa, 0x6, 0x9, 0x4154, 0x5, 0xe3, 0x1000, 0x6, 0x6, 0x5, 0x3, 0x1, 0x8, 0xf, 0x8, 0x200, 0x6, 0x1, 0x0, 0x9, 0x9, 0xfffff001, 0x4ef, 0x8001, 0x0, 0x5, 0xd, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x7ff, 0x20708c71, 0x6, {0x0, 0x1, 0x7, 0x6, 0xffff, 0xd}, {0x1, 0x0, 0x40, 0x3, 0x3, 0x1}, 0xc, 0x9fcb, 0xfffffffe}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x12d50b92, 0x0, 0x3, 0xbe, 0x800, 0x6, 0x1, 0xc, 0x1, 0x834, 0x2, 0x3ff, 0x6, 0x8, 0x3, 0xe, 0x8, 0xba19, 0x0, 0x5, 0x3, 0x5, 0x8c, 0x401, 0xd, 0xf57d, 0x1, 0xe, 0x230, 0x5, 0xfd, 0x2, 0x9, 0x7b0, 0x7fffffff, 0x8001, 0xa, 0x7, 0xfffffffe, 0x401, 0xffffff16, 0x81000000, 0x1, 0x7, 0xfffffffd, 0x1, 0xfffffff8, 0x8, 0x3, 0x0, 0x4, 0x8, 0x6, 0xa4, 0x6, 0xd1, 0x8, 0xffffffff, 0x0, 0x5, 0x4, 0x31aff44a, 0x7, 0x7, 0x2, 0xffffffdc, 0x5, 0x0, 0xd, 0x5, 0x4, 0x4, 0x2, 0x7, 0xffffff30, 0x80000001, 0x9e, 0xc, 0x2, 0x3, 0xc64a, 0x1000, 0x0, 0x0, 0x20, 0x1a, 0xf, 0x7ff, 0xfffffffc, 0x3, 0x7, 0x2, 0xb, 0x9, 0x101, 0x8, 0xa1d5, 0x644ccb07, 0x9, 0xfffffff8, 0x0, 0x9, 0x1000, 0x8f, 0xab2, 0x1, 0x3, 0x400, 0x5, 0x1ff, 0xffffffff, 0x5, 0x7, 0x100, 0x7, 0x7, 0x26, 0x81, 0x0, 0x0, 0x1, 0x6, 0x9, 0x8, 0x9, 0xea, 0x7, 0xa, 0xc35, 0xfffffffc, 0x6, 0xa, 0x0, 0x10001, 0xfffffff8, 0xd9, 0x0, 0x6, 0x2, 0x8, 0x2, 0x7, 0xff, 0x5, 0x5, 0x2, 0x3, 0x8, 0x9, 0x9, 0x8000, 0x6, 0x80000000, 0xcf1, 0x73e, 0x3, 0x8001, 0x2, 0x8, 0x7f, 0x3ff, 0x1, 0x101, 0x10001, 0xa6f, 0x9, 0x9f36, 0x8000, 0x1000, 0x2, 0x80000000, 0x4, 0x9, 0x80000001, 0xf, 0x4, 0xb, 0x2, 0x9, 0xa9, 0x0, 0x1, 0x80000, 0x9, 0x9, 0x69e90ae6, 0x2, 0x80000001, 0x2, 0x5, 0x1, 0x7, 0xfeb, 0xe2, 0x0, 0x0, 0x82, 0x6, 0x9, 0x4, 0x800, 0xede6, 0xfffffffc, 0x7, 0xff1d, 0x7, 0x32, 0x8, 0x7fff, 0x97, 0x3, 0x34735d7a, 0x19c, 0x80, 0x40, 0x4d7d, 0x920, 0x8001, 0xa, 0x7, 0x4, 0x2, 0x80000000, 0xfffffffb, 0x336, 0x4, 0x0, 0x1, 0x8001, 0x623, 0x9, 0x10001, 0x10000, 0xf2e, 0xffffffff, 0x7, 0x3, 0x0, 0x952, 0x0, 0x0, 0x10000, 0x4, 0x1, 0x4, 0x3, 0x9, 0x7, 0x9, 0x10000, 0xba, 0x4, 0x3, 0x7fff, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffc0, 0x5, 0x4, 0x0, 0xca, 0x1, 0xb, 0x1, 0x8, 0x7ff, 0x4, 0x4, 0x2, 0x3, 0x1241, 0x6, 0x7, 0xffff, 0x2, 0x10, 0x6, 0x26c, 0x5, 0xc, 0xf, 0x1, 0x7, 0x7, 0x4, 0x2, 0x39, 0xff, 0x7, 0x7fffffff, 0x8, 0x7, 0x8, 0x1ff, 0xb51, 0xfffff9c9, 0x7, 0x0, 0xffffff64, 0x0, 0x770f, 0x7, 0x401, 0x4, 0xbe50, 0x3, 0xfffff800, 0x0, 0x19c4, 0x0, 0x1, 0x1, 0x8, 0x6, 0x9, 0x81, 0x0, 0x400, 0x44fa, 0x1, 0x8, 0x3ff, 0xbd, 0x10000, 0x2, 0x6, 0x4, 0xffffffff, 0x80, 0x0, 0x4, 0x5, 0xfffffffc, 0x6, 0x3, 0x9, 0xf1, 0x5, 0x3f, 0xffffbcab, 0x36c6, 0x3, 0xd16, 0x356, 0xfff, 0x643, 0xfff0, 0x9, 0x6, 0x800, 0x8, 0x0, 0x2, 0x0, 0x3, 0xa, 0x1, 0xae70, 0x72, 0x8, 0xfff, 0x1, 0x800, 0x2653381d, 0x7fff, 0x7, 0x5eb8, 0x1, 0x3, 0x4, 0xfffffff7, 0xc22e, 0x3, 0xd, 0x2000000, 0x800, 0xfa0, 0x8, 0x9, 0x8, 0x0, 0x4, 0xffff, 0x0, 0x300000, 0x4, 0x7fffffff, 0x2, 0x5, 0x101, 0x8, 0x1000, 0x2, 0x10000, 0x8, 0x8, 0x79aa, 0x6, 0x4, 0xf639, 0xc000, 0xfffffffc, 0x8, 0x9, 0xbc5c, 0x40, 0x6, 0x4, 0x7, 0x4, 0xffff, 0x4, 0x5, 0x9, 0xff, 0x7, 0xfffffff7, 0x200, 0x100, 0x6, 0x0, 0x2, 0x3, 0x1, 0x8, 0x39, 0x40, 0x0, 0x0, 0x40, 0x6, 0x8, 0x3, 0x1, 0x9, 0xfffffffc, 0x2, 0x9, 0x5020, 0x9, 0x3, 0x2, 0xaa6, 0x7, 0x4884d3c, 0x1000, 0x0, 0xfffffffa, 0x2, 0xb, 0x2, 0x4, 0x4000000, 0x9335, 0x32, 0x9, 0x2, 0x10001, 0xa217, 0x3, 0x2, 0x7fffffff, 0x4, 0x80, 0x0, 0x94, 0x7, 0x0, 0x40, 0x9, 0xb, 0x10, 0x9, 0x4, 0x2, 0x8001, 0x800, 0xd, 0x0, 0xfffffeff, 0xa, 0x9, 0x7, 0x0, 0x8, 0x0, 0x72d9, 0x6, 0xf38, 0x3, 0xff, 0x1, 0x2, 0x4d, 0x8, 0x1ff, 0x3, 0x1000, 0x2, 0x5a4, 0xe, 0x3, 0x4, 0x2, 0x4, 0x8, 0x1, 0x7fff, 0xfffffffe, 0x1ff, 0x8, 0x80000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x9, 0x1, 0x2, 0x3, 0x3, 0x400, 0x4, 0x8, 0x10000, 0xffffffff, 0x618, 0x9, 0x6, 0x101, 0x200, 0x10, 0x4, 0xfffffffb, 0x3, 0x5, 0x8000, 0x400000, 0x2, 0x0, 0x8dde, 0xe, 0x1ff, 0x1, 0x6, 0x8000, 0x8, 0x3, 0x8000, 0x1, 0x2, 0x6084, 0x3, 0x9, 0x410, 0x1, 0x96, 0x6, 0x9, 0x80000000, 0x4, 0x1ff, 0x9, 0x5, 0x10000, 0x5e, 0xb, 0x8001, 0x2, 0x911a, 0x2, 0x6, 0x0, 0xb0a24cd5, 0x0, 0x2, 0x2, 0x1c0000, 0xfffffff9, 0x8, 0x0, 0x8, 0xee, 0xff, 0x1, 0x9, 0x1, 0x7, 0x2, 0xc54, 0x4, 0x0, 0x7, 0x2, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7398, 0x6, 0x7, 0x7ff, 0x4, 0x30, 0x0, 0x8, 0x2, 0x467, 0x1, 0x8, 0x8, 0x1ff, 0x4, 0x4, 0x1, 0xb0d0, 0x2, 0x8, 0x4, 0x5, 0x2, 0x2, 0x4f, 0x10001, 0x5, 0x86, 0xdc05, 0x2, 0xf, 0x2, 0x200, 0x8001, 0x1aa, 0x81, 0x1ff, 0x2, 0x3, 0xfffffffc, 0x7, 0x6, 0xc3, 0x7, 0x100, 0x3, 0x2, 0x9, 0x9, 0x80, 0xffff15b2, 0x8, 0x8, 0x5, 0x58, 0x10000, 0x7fff, 0x90, 0x6cb5, 0x400, 0x8, 0x7, 0xfffffff8, 0x1, 0x5, 0x9, 0x539b, 0xbce, 0x200, 0x6, 0x7, 0x1, 0x2, 0x2, 0x3, 0x3, 0x1ff, 0xfffffffc, 0x9, 0x6, 0x0, 0x3, 0x2, 0x8001, 0x5, 0x0, 0x9, 0x6, 0x5db29637, 0x81, 0x9, 0x6, 0x5, 0xfff, 0x4, 0x7, 0xfffffff4, 0xa1f, 0xffff, 0x400, 0x6, 0xcf9, 0xfff, 0x4, 0x2, 0x0, 0x8, 0xe, 0x1, 0x40, 0x0, 0x0, 0x6, 0x6, 0x10000, 0xfb2f, 0xef9d, 0x8, 0x3, 0x8, 0xa, 0x1c, 0x898, 0x81, 0x2, 0x1ff, 0x3, 0x8, 0x1000, 0x5, 0x80000001, 0x3, 0x1, 0x6, 0x3, 0x7, 0x2, 0x7, 0x4e, 0x1, 0x4, 0x6b91, 0x29, 0x9, 0x1, 0xcf20, 0x6, 0x8a05, 0x7, 0x9, 0x1, 0x7, 0x4, 0x6, 0x7, 0x6, 0x7, 0x0, 0x1c, 0x9, 0x1, 0xa, 0x9, 0x0, 0x7fffffff, 0x0, 0x8, 0x6, 0x8, 0x63, 0xfa, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x9, 0x9, 0x0, 0x4, 0x0, 0x200, 0x3, 0xb, 0x1, 0xc5c, 0x8, 0xbb, 0x1, 0x1, 0x5, 0x3, 0x9, 0x3, 0x8001, 0xffffffff, 0x800, 0x4, 0x0, 0xffffffff, 0x1, 0x2, 0x4, 0x5, 0x4, 0xfffffd82, 0x4, 0x154, 0x2, 0x9, 0x982a, 0x8, 0x8, 0x3, 0x5, 0xffff, 0x8, 0x74, 0x0, 0xe477, 0x4, 0x1c9, 0x1, 0x7, 0x1, 0x1, 0x5, 0x2, 0x6, 0x80000000, 0xfffff001, 0x1, 0xcd1a, 0x9, 0x7, 0xd2a, 0x84, 0x6, 0xd08, 0xfffffffd, 0x9, 0x8, 0x5, 0x8, 0xe02, 0x8, 0xffffffdb, 0x8, 0x1, 0x1, 0x0, 0x10, 0x7, 0x7, 0x4271, 0x3, 0x80000000, 0x1000, 0x16, 0xfffffffb, 0x6, 0xfffff000, 0x100000, 0xff, 0x3, 0xb, 0x2, 0x90, 0x40, 0x2, 0x800, 0x6, 0x5, 0xfffffffa, 0x7, 0x8, 0xb93b, 0xe, 0x9, 0xa, 0x7, 0xfffffffe, 0x4c65, 0x1, 0x2, 0x8, 0x9, 0xfffffff3, 0x2, 0x4, 0x3, 0xb, 0x7, 0x800, 0x3, 0xe, 0x4, 0x4, 0x2, 0x7, 0xa2c4, 0x3, 0x8000, 0x8, 0xc0, 0x8, 0x1, 0x5, 0xb, 0x3, 0x2, 0x6, 0x3d6f, 0x3, 0x7fffffff, 0xd6, 0x1, 0x4, 0x0, 0xffffff7f, 0x0, 0x3, 0x2c16, 0x6, 0x2, 0x8001, 0x9504, 0x2, 0xcbb, 0x7, 0x0, 0x3, 0x1ff, 0x1, 0xa, 0x8, 0x8000, 0x6, 0x7, 0x33, 0x10000, 0x5, 0x6, 0x1, 0x0, 0xfffff2ca, 0x688, 0x668f, 0x5, 0x0, 0x7, 0x2, 0x2, 0xfffffffd, 0xffffffff, 0x3a9c, 0x1, 0x10001, 0x80000000, 0x6, 0x7, 0x100, 0x0, 0x3, 0x4, 0x400, 0x6, 0x10, 0x8, 0x10001, 0x400, 0x8001, 0x80, 0x0, 0x5, 0xe, 0x0, 0x3d, 0xfffffffe, 0x4, 0x5, 0x2, 0xdf, 0x7, 0x0, 0x4, 0xfffffff8, 0x8, 0x8, 0x7, 0x7f, 0x2, 0x6, 0x200, 0x0, 0x3, 0x0, 0x8001, 0x0, 0x6, 0x2000000, 0x9, 0x0, 0x1, 0xa9, 0x0, 0xfffffffe, 0x0, 0xc3, 0x401, 0x2, 0x6, 0x80000001, 0x8, 0x7fff, 0x2, 0x6736, 0x5, 0x3, 0x6, 0xb432, 0x6, 0x6, 0x8, 0x0, 0x2, 0x75, 0x2, 0x1ff, 0x2, 0x6]}]]}, {0x6, 0x6, "40e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xc575bfaf0dc19dcd}}}}]}]}}]}, 0x3ec4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 508.513428ms ago: executing program 4 (id=2511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r0, 0x540a, 0xee6fe631b3c21e1b) 446.629331ms ago: executing program 4 (id=2514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 444.502111ms ago: executing program 2 (id=2515): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 443.295031ms ago: executing program 6 (id=2516): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x70bd26, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) 374.751854ms ago: executing program 3 (id=2517): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 339.672906ms ago: executing program 4 (id=2518): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x4, 0x2, 0x0, 0x400}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 338.538886ms ago: executing program 2 (id=2519): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000340)=0xfff, 0x4) 274.109199ms ago: executing program 6 (id=2520): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x0, 0x0, 0x8000) 273.976798ms ago: executing program 2 (id=2521): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') lseek(r0, 0x300000002, 0x0) 250.02582ms ago: executing program 6 (id=2522): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x700, 0x8, 0xffffffff, 0x7, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @local}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x1, @vifc_lcl_ifindex=r2, @local}, 0x10) 236.02289ms ago: executing program 3 (id=2523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x8, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0x200b, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x43, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 186.921442ms ago: executing program 2 (id=2524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) 185.925102ms ago: executing program 6 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000600517a1255ebed6aaaaaaaaaabb080046150119006600008002"], 0x12b) 183.463173ms ago: executing program 2 (id=2526): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_extract_tcp_res(0x0, 0x78, 0x4) 161.914964ms ago: executing program 4 (id=2527): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 74.913447ms ago: executing program 3 (id=2528): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb7, 0xad, 0x10, 0x16d8, 0x7213, 0xcbda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x51, 0xdd}}]}}]}}, 0x0) 19.711029ms ago: executing program 6 (id=2529): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0x3, 0x1800}, {0x1, 0xbbdd, 0x1000}, {0x1}, {0x0, 0x81, 0x2800}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 0s ago: executing program 2 (id=2530): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)='\"', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): p3: p114 start 591104 is beyond EOD, truncated [ 98.385666][ T5997] loop3: p115 size 268369920 extends beyond EOD, truncated [ 98.387328][ T5997] loop3: p116 start 591104 is beyond EOD, truncated [ 98.395523][ T5997] loop3: p117 size 268369920 extends beyond EOD, truncated [ 98.399675][ T5997] loop3: p118 start 591104 is beyond EOD, truncated [ 98.400782][ T5997] loop3: p119 size 268369920 extends beyond EOD, truncated [ 98.402464][ T5997] loop3: p120 start 591104 is beyond EOD, truncated [ 98.403479][ T5997] loop3: p121 size 268369920 extends beyond EOD, truncated [ 98.405124][ T5997] loop3: p122 start 591104 is beyond EOD, truncated [ 98.406261][ T5997] loop3: p123 size 268369920 extends beyond EOD, truncated [ 98.408382][ T5997] loop3: p124 start 591104 is beyond EOD, truncated [ 98.409364][ T5997] loop3: p125 size 268369920 extends beyond EOD, truncated [ 98.428531][ T5997] loop3: p126 start 591104 is beyond EOD, truncated [ 98.429600][ T5997] loop3: p127 size 268369920 extends beyond EOD, truncated [ 98.438372][ T5997] loop3: p128 start 591104 is beyond EOD, truncated [ 98.439358][ T5997] loop3: p129 size 268369920 extends beyond EOD, truncated [ 98.441665][ T6015] trusted_key: encrypted_key: insufficient parameters specified [ 98.444421][ T5997] loop3: p130 start 591104 is beyond EOD, truncated [ 98.445636][ T5997] loop3: p131 size 268369920 extends beyond EOD, truncated [ 98.449086][ T5997] loop3: p132 start 591104 is beyond EOD, truncated [ 98.450028][ T5997] loop3: p133 size 268369920 extends beyond EOD, truncated [ 98.452372][ T5997] loop3: p134 start 591104 is beyond EOD, truncated [ 98.453327][ T5997] loop3: p135 size 268369920 extends beyond EOD, truncated [ 98.459979][ T5997] loop3: p136 start 591104 is beyond EOD, truncated [ 98.461025][ T5997] loop3: p137 size 268369920 extends beyond EOD, truncated [ 98.465255][ T5997] loop3: p138 start 591104 is beyond EOD, truncated [ 98.466327][ T5997] loop3: p139 size 268369920 extends beyond EOD, truncated [ 98.471789][ T5997] loop3: p140 start 591104 is beyond EOD, truncated [ 98.472909][ T5997] loop3: p141 size 268369920 extends beyond EOD, truncated [ 98.474358][ T5997] loop3: p142 start 591104 is beyond EOD, truncated [ 98.475615][ T5997] loop3: p143 size 268369920 extends beyond EOD, truncated [ 98.480827][ T5997] loop3: p144 start 591104 is beyond EOD, truncated [ 98.483100][ T5997] loop3: p145 size 268369920 extends beyond EOD, truncated [ 98.486418][ T5997] loop3: p146 start 591104 is beyond EOD, truncated [ 98.489764][ T5997] loop3: p147 size 268369920 extends beyond EOD, truncated [ 98.491413][ T5997] loop3: p148 start 591104 is beyond EOD, truncated [ 98.492521][ T5997] loop3: p149 size 268369920 extends beyond EOD, truncated [ 98.494527][ T5997] loop3: p150 start 591104 is beyond EOD, truncated [ 98.501517][ T5997] loop3: p151 size 268369920 extends beyond EOD, truncated [ 98.502026][ T6021] loop0: detected capacity change from 0 to 512 [ 98.506822][ T5997] loop3: p152 start 591104 is beyond EOD, truncated [ 98.510192][ T5997] loop3: p153 size 268369920 extends beyond EOD, truncated [ 98.513172][ T6021] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.513818][ T5997] loop3: p154 start 591104 is beyond EOD, truncated [ 98.514253][ T6021] ext4: Unknown parameter 'seclabel' [ 98.517555][ T5997] loop3: p155 size 268369920 extends beyond EOD, truncated [ 98.522669][ T5997] loop3: p156 start 591104 is beyond EOD, truncated [ 98.523928][ T5997] loop3: p157 size 268369920 extends beyond EOD, truncated [ 98.533502][ T5997] loop3: p158 start 591104 is beyond EOD, truncated [ 98.534628][ T5997] loop3: p159 size 268369920 extends beyond EOD, truncated [ 98.540260][ T5997] loop3: p160 start 591104 is beyond EOD, truncated [ 98.541326][ T5997] loop3: p161 size 268369920 extends beyond EOD, truncated [ 98.544874][ T5997] loop3: p162 start 591104 is beyond EOD, truncated [ 98.545933][ T5997] loop3: p163 size 268369920 extends beyond EOD, truncated [ 98.552794][ T5997] loop3: p164 start 591104 is beyond EOD, truncated [ 98.553827][ T5997] loop3: p165 size 268369920 extends beyond EOD, truncated [ 98.558623][ T5997] loop3: p166 start 591104 is beyond EOD, truncated [ 98.559711][ T5997] loop3: p167 size 268369920 extends beyond EOD, truncated [ 98.564904][ T5997] loop3: p168 start 591104 is beyond EOD, truncated [ 98.566006][ T5997] loop3: p169 size 268369920 extends beyond EOD, truncated [ 98.581064][ T5997] loop3: p170 start 591104 is beyond EOD, truncated [ 98.582135][ T5997] loop3: p171 size 268369920 extends beyond EOD, truncated [ 98.585338][ T5997] loop3: p172 start 591104 is beyond EOD, truncated [ 98.586349][ T5997] loop3: p173 size 268369920 extends beyond EOD, truncated [ 98.595265][ T5997] loop3: p174 start 591104 is beyond EOD, truncated [ 98.596360][ T5997] loop3: p175 size 268369920 extends beyond EOD, truncated [ 98.601768][ T5997] loop3: p176 start 591104 is beyond EOD, truncated [ 98.602852][ T5997] loop3: p177 size 268369920 extends beyond EOD, truncated [ 98.609223][ T5997] loop3: p178 start 591104 is beyond EOD, truncated [ 98.610399][ T5997] loop3: p179 size 268369920 extends beyond EOD, truncated [ 98.615418][ T5997] loop3: p180 start 591104 is beyond EOD, truncated [ 98.616546][ T5997] loop3: p181 size 268369920 extends beyond EOD, truncated [ 98.619488][ T5997] loop3: p182 start 591104 is beyond EOD, truncated [ 98.620631][ T5997] loop3: p183 size 268369920 extends beyond EOD, truncated [ 98.624575][ T5997] loop3: p184 start 591104 is beyond EOD, truncated [ 98.625652][ T5997] loop3: p185 size 268369920 extends beyond EOD, truncated [ 98.650856][ T5997] loop3: p186 start 591104 is beyond EOD, truncated [ 98.651882][ T5997] loop3: p187 size 268369920 extends beyond EOD, truncated [ 98.673102][ T5997] loop3: p188 start 591104 is beyond EOD, truncated [ 98.674206][ T5997] loop3: p189 size 268369920 extends beyond EOD, truncated [ 98.675695][ T5997] loop3: p190 start 591104 is beyond EOD, truncated [ 98.676637][ T5997] loop3: p191 size 268369920 extends beyond EOD, truncated [ 98.678521][ T5997] loop3: p192 start 591104 is beyond EOD, truncated [ 98.679494][ T5997] loop3: p193 size 268369920 extends beyond EOD, truncated [ 98.681273][ T5997] loop3: p194 start 591104 is beyond EOD, truncated [ 98.682268][ T5997] loop3: p195 size 268369920 extends beyond EOD, truncated [ 98.684167][ T5997] loop3: p196 start 591104 is beyond EOD, truncated [ 98.685149][ T5997] loop3: p197 size 268369920 extends beyond EOD, truncated [ 98.686826][ T5997] loop3: p198 start 591104 is beyond EOD, truncated [ 98.687861][ T5997] loop3: p199 size 268369920 extends beyond EOD, truncated [ 98.689976][ T5997] loop3: p200 start 591104 is beyond EOD, truncated [ 98.690909][ T5997] loop3: p201 size 268369920 extends beyond EOD, truncated [ 98.692424][ T5997] loop3: p202 start 591104 is beyond EOD, truncated [ 98.693361][ T5997] loop3: p203 size 268369920 extends beyond EOD, truncated [ 98.694963][ T5997] loop3: p204 start 591104 is beyond EOD, truncated [ 98.695871][ T5997] loop3: p205 size 268369920 extends beyond EOD, truncated [ 98.697513][ T5997] loop3: p206 start 591104 is beyond EOD, truncated [ 98.703816][ T5997] loop3: p207 size 268369920 extends beyond EOD, truncated [ 98.713101][ T5997] loop3: p208 start 591104 is beyond EOD, truncated [ 98.714292][ T5997] loop3: p209 size 268369920 extends beyond EOD, truncated [ 98.715818][ T5997] loop3: p210 start 591104 is beyond EOD, truncated [ 98.716855][ T5997] loop3: p211 size 268369920 extends beyond EOD, truncated [ 98.721507][ T5997] loop3: p212 start 591104 is beyond EOD, truncated [ 98.723098][ T5997] loop3: p213 size 268369920 extends beyond EOD, truncated [ 98.724612][ T5997] loop3: p214 start 591104 is beyond EOD, truncated [ 98.725564][ T5997] loop3: p215 size 268369920 extends beyond EOD, truncated [ 98.726854][ T5997] loop3: p216 start 591104 is beyond EOD, truncated [ 98.727848][ T5997] loop3: p217 size 268369920 extends beyond EOD, truncated [ 98.729800][ T5997] loop3: p218 start 591104 is beyond EOD, truncated [ 98.730774][ T5997] loop3: p219 size 268369920 extends beyond EOD, truncated [ 98.732345][ T5997] loop3: p220 start 591104 is beyond EOD, truncated [ 98.733344][ T5997] loop3: p221 size 268369920 extends beyond EOD, truncated [ 98.734769][ T5997] loop3: p222 start 591104 is beyond EOD, truncated [ 98.735760][ T5997] loop3: p223 size 268369920 extends beyond EOD, truncated [ 98.737630][ T5997] loop3: p224 start 591104 is beyond EOD, truncated [ 98.739338][ T5997] loop3: p225 size 268369920 extends beyond EOD, truncated [ 98.743211][ T5997] loop3: p226 start 591104 is beyond EOD, truncated [ 98.744106][ T5997] loop3: p227 size 268369920 extends beyond EOD, truncated [ 98.745574][ T5997] loop3: p228 start 591104 is beyond EOD, truncated [ 98.746521][ T5997] loop3: p229 size 268369920 extends beyond EOD, truncated [ 98.747807][ T5997] loop3: p230 start 591104 is beyond EOD, truncated [ 98.748913][ T5997] loop3: p231 size 268369920 extends beyond EOD, truncated [ 98.750161][ T5997] loop3: p232 start 591104 is beyond EOD, truncated [ 98.751130][ T5997] loop3: p233 size 268369920 extends beyond EOD, truncated [ 98.752353][ T5997] loop3: p234 start 591104 is beyond EOD, truncated [ 98.753654][ T5997] loop3: p235 size 268369920 extends beyond EOD, truncated [ 98.764182][ T5997] loop3: p236 start 591104 is beyond EOD, truncated [ 98.765182][ T5997] loop3: p237 size 268369920 extends beyond EOD, truncated [ 98.766678][ T5997] loop3: p238 start 591104 is beyond EOD, truncated [ 98.767662][ T5997] loop3: p239 size 268369920 extends beyond EOD, truncated [ 98.830613][ T6040] random: crng reseeded on system resumption [ 98.845804][ T5997] loop3: p240 start 591104 is beyond EOD, truncated [ 98.846880][ T5997] loop3: p241 size 268369920 extends beyond EOD, truncated [ 98.869816][ T5997] loop3: p242 start 591104 is beyond EOD, truncated [ 98.870881][ T5997] loop3: p243 size 268369920 extends beyond EOD, truncated [ 98.875052][ T5997] loop3: p244 start 591104 is beyond EOD, truncated [ 98.876105][ T5997] loop3: p245 size 268369920 extends beyond EOD, truncated [ 98.878340][ T5997] loop3: p246 start 591104 is beyond EOD, truncated [ 98.879360][ T5997] loop3: p247 size 268369920 extends beyond EOD, truncated [ 98.882172][ T5997] loop3: p248 start 591104 is beyond EOD, truncated [ 98.883187][ T5997] loop3: p249 size 268369920 extends beyond EOD, truncated [ 98.887533][ T5997] loop3: p250 start 591104 is beyond EOD, truncated [ 98.895607][ T5997] loop3: p251 size 268369920 extends beyond EOD, truncated [ 98.919581][ T5997] loop3: p252 start 591104 is beyond EOD, truncated [ 98.920568][ T6047] net_ratelimit: 10 callbacks suppressed [ 98.920576][ T6047] bridge_slave_0: mtu less than device minimum [ 98.922310][ T5997] loop3: p253 size 268369920 extends beyond EOD, truncated [ 98.935997][ T5997] loop3: p254 start 591104 is beyond EOD, truncated [ 98.937587][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.939581][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.941496][ T5997] loop3: p255 size 268369920 extends beyond EOD, truncated [ 99.282088][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 99.338830][ T6058] loop4: detected capacity change from 0 to 1024 [ 100.116132][ T6068] loop2: detected capacity change from 0 to 164 [ 100.576202][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.581692][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.584612][ T4720] udevd[4720]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 100.587993][ T4725] udevd[4725]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 100.606180][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 100.618158][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 100.626159][ T4719] udevd[4719]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 100.645001][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.646426][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.653460][ T4725] udevd[4725]: inotify_add_watch(7, /dev/loop3p31, 10) failed: No such file or directory [ 100.658855][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 100.660936][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 101.062182][ T6105] loop0: detected capacity change from 0 to 128 [ 101.063773][ T6105] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.077199][ T6105] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.346292][ T6122] loop0: detected capacity change from 0 to 164 [ 101.620627][ T6126] loop1: detected capacity change from 0 to 128 [ 101.678280][ T6126] FAT-fs (loop1): bogus sectors per cluster 0 [ 101.679534][ T6126] FAT-fs (loop1): Can't find a valid FAT filesystem [ 101.899877][ T6134] random: crng reseeded on system resumption [ 102.613427][ T6143] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 102.771110][ T6154] loop3: detected capacity change from 0 to 4096 [ 102.787962][ T6154] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 103.122658][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.587'. [ 103.485543][ T6177] random: crng reseeded on system resumption [ 103.825718][ T4322] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 103.840129][ T6184] loop0: detected capacity change from 0 to 128 [ 103.907452][ T6184] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 53) [ 103.920923][ T6184] FAT-fs (loop0): Filesystem has been set read-only [ 103.941949][ T6194] loop2: detected capacity change from 0 to 128 [ 103.958641][ T6194] FAT-fs (loop2): bogus number of FAT sectors [ 103.959567][ T6194] FAT-fs (loop2): Can't find a valid FAT filesystem [ 104.049413][ T4313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.430698][ T6208] loop2: detected capacity change from 0 to 4096 [ 104.434400][ T6213] loop1: detected capacity change from 0 to 256 [ 104.443948][ T6208] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 104.537792][ T6218] loop1: detected capacity change from 0 to 512 [ 104.616732][ T6223] netlink: 36 bytes leftover after parsing attributes in process `syz.2.609'. [ 104.822080][ T6218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.824752][ T6218] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.896452][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 105.790291][ T27] audit: type=1326 audit(2000000005.400:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.844385][ T27] audit: type=1326 audit(2000000005.400:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.859402][ T4331] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 105.886414][ T27] audit: type=1326 audit(2000000005.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.896382][ T27] audit: type=1326 audit(2000000005.400:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.913067][ T6240] ptrace attach of "./syz-executor exec"[4321] was attempted by ""[6240] [ 105.927768][ T27] audit: type=1326 audit(2000000005.400:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.951601][ T27] audit: type=1326 audit(2000000005.400:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.954745][ T27] audit: type=1326 audit(2000000005.400:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x7ffc0000 [ 105.957724][ T27] audit: type=1326 audit(2000000005.400:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb2386108 code=0x7ffc0000 [ 105.998840][ T27] audit: type=1326 audit(2000000005.400:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb2386108 code=0x7ffc0000 [ 106.002102][ T27] audit: type=1326 audit(2000000005.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb2386108 code=0x7ffc0000 [ 108.091921][ T6319] binder: 6318:6319 ioctl c018620c 20000000 returned -22 [ 108.273335][ T6326] netlink: 188 bytes leftover after parsing attributes in process `syz.1.651'. [ 108.281778][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.283986][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.649789][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 109.374634][ T6380] loop1: detected capacity change from 0 to 256 [ 109.392698][ T6380] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 109.876895][ T6386] xt_CT: No such helper "pptp" [ 109.945764][ T6363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.031704][ T6395] loop2: detected capacity change from 0 to 2048 [ 110.084761][ T6084] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.032336][ T6435] random: crng reseeded on system resumption [ 111.172148][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.174328][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.544542][ T6449] loop0: detected capacity change from 0 to 4096 [ 111.562032][ T6449] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 111.731604][ T6459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.701'. [ 112.561205][ T4327] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 112.599575][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.165942][ T6500] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 113.271662][ T6503] binder: tried to use weak ref as strong ref [ 113.272818][ T6503] binder: 6502:6503 Acquire 1 refcount change on invalid ref 0 ret -22 [ 113.276754][ T6504] random: crng reseeded on system resumption [ 113.288972][ T6503] binder: 6502:6503 got transaction to invalid handle, 1 [ 113.292293][ T6503] binder: 6503:6502 cannot find target node [ 113.293187][ T6503] binder: 6502:6503 transaction call to 0:0 failed 4/29201/-22, size 72-48 line 3045 [ 113.297164][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.911896][ T6525] binder: 6524:6525 got transaction to invalid handle, 1 [ 113.923749][ T6525] binder: 6525:6524 cannot find target node [ 113.924637][ T6525] binder: 6524:6525 transaction call to 0:0 failed 8/29201/-22, size 72-48 line 3045 [ 113.986301][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.046209][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 114.047679][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 114.268471][ T6544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.462262][ T6553] random: crng reseeded on system resumption [ 114.988399][ T6567] binder: 6566:6567 got transaction to invalid handle, 1 [ 114.989773][ T6567] binder: 6567:6566 cannot find target node [ 114.990655][ T6567] binder: 6566:6567 transaction call to 0:0 failed 12/29201/-22, size 72-48 line 3045 [ 114.997642][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.569395][ T6577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.066834][ T6598] binder: 6597:6598 got transaction to invalid handle, 1 [ 116.068311][ T6598] binder: 6598:6597 cannot find target node [ 116.134941][ T6603] loop0: detected capacity change from 0 to 2048 [ 116.151665][ T6603] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 116.164753][ T6603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.246958][ T4327] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 116.252821][ T4327] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 116.592327][ T6615] random: crng reseeded on system resumption [ 117.239719][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.242001][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.243649][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.245260][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.246736][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.248467][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.252263][ T6626] cgroup: No subsys list or none specified [ 117.280459][ T4417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.379130][ T4417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.509147][ T4417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.518632][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.530097][ T6641] netlink: 'syz.3.778': attribute type 6 has an invalid length. [ 117.531222][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 117.619662][ T6651] binder: 6650:6651 tried to acquire reference to desc 0, got 1 instead [ 117.664888][ T6651] binder: 6650:6651 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 117.666836][ T6651] binder: 6650:6651 got transaction to invalid handle, 1 [ 117.670343][ T4417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.733136][ T6623] chnl_net:caif_netlink_parms(): no params data found [ 117.835150][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.836517][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.842573][ T6623] device bridge_slave_0 entered promiscuous mode [ 117.857319][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.858920][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.860314][ T6623] device bridge_slave_1 entered promiscuous mode [ 118.093841][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.096968][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.115249][ T6623] team0: Port device team_slave_0 added [ 118.120100][ T6623] team0: Port device team_slave_1 added [ 118.142126][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.143324][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.147514][ T6623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.154661][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.155845][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.161571][ T6623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.409581][ T6623] device hsr_slave_0 entered promiscuous mode [ 118.448309][ T6623] device hsr_slave_1 entered promiscuous mode [ 118.488254][ T6623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.490250][ T6623] Cannot create hsr debugfs directory [ 118.541158][ T6710] tap0: tun_chr_ioctl cmd 1074025677 [ 118.542128][ T6710] tap0: linktype set to 768 [ 118.744188][ T6623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.847581][ T6623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.085370][ T6623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.120745][ T6623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.278295][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 119.555989][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.802104][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.821127][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.822662][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.826311][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.159642][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.161381][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.164012][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.165171][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.226998][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.228913][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.231290][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.232925][ T4781] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.234004][ T4781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.245256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.247169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.256015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.260182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.268263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.273204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.280417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.285177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.298735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.305910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.311836][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.313582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.374263][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.375935][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.224375][ T4417] device hsr_slave_0 left promiscuous mode [ 121.270957][ T4417] device hsr_slave_1 left promiscuous mode [ 121.338617][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.339760][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.341464][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.342492][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.343912][ T4417] device bridge_slave_1 left promiscuous mode [ 121.345781][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.358018][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 121.399481][ T4417] device bridge_slave_0 left promiscuous mode [ 121.400592][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.528825][ T4417] device veth1_macvtap left promiscuous mode [ 121.529952][ T4417] device veth0_macvtap left promiscuous mode [ 121.530907][ T4417] device veth1_vlan left promiscuous mode [ 121.531841][ T4417] device veth0_vlan left promiscuous mode [ 123.438003][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 124.180646][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 124.359548][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 124.529221][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.728740][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.518052][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 125.928482][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929515][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.081368][ T4417] bond0 (unregistering): Released all slaves [ 127.356704][ T6623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.369581][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.370827][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.467120][ T6880] xt_addrtype: ipv6 does not support BROADCAST matching [ 127.597541][ T6895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.839'. [ 127.674296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.675960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.691552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.693192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.694714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.697143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.920473][ T6623] device veth0_vlan entered promiscuous mode [ 128.055763][ T6623] device veth1_vlan entered promiscuous mode [ 128.082091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.084905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.100596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.106395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.111693][ T6623] device veth0_macvtap entered promiscuous mode [ 128.114470][ T6623] device veth1_macvtap entered promiscuous mode [ 128.125612][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.132041][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.133609][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.135178][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.136829][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.140982][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.142439][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.143944][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.146394][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.147756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.151608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.153586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.155242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.158181][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.159966][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.161674][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.163353][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.164969][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.166562][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.174236][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.176124][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.179153][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.180907][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.183027][ T1890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.186310][ T6623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.187814][ T6623] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.189208][ T6623] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.190504][ T6623] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.724247][ T1890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.726051][ T1890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.732427][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.740342][ T1890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.741690][ T1890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.743880][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.383162][ T6941] loop3: detected capacity change from 0 to 1024 [ 129.426976][ T6941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.526566][ T6941] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.851: inode #10665728: comm syz.3.851: iget: illegal inode # [ 129.530841][ T6941] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.851: error while reading EA inode 10665728 err=-117 [ 129.551707][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 130.448188][ T6973] hub 2-0:1.0: USB hub found [ 130.449822][ T6973] hub 2-0:1.0: 8 ports detected [ 130.934968][ T6998] binder: 6996:6998 got transaction to invalid handle, 1 [ 130.936050][ T6998] binder_debug: 7 callbacks suppressed [ 130.936063][ T6998] binder: 6998:6996 cannot find target node [ 130.937765][ T6998] binder: 6996:6998 transaction call to 0:0 failed 26/29201/-22, size 72-48 line 3045 [ 130.948568][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.960380][ T7004] loop2: detected capacity change from 0 to 132 [ 130.968993][ T7003] loop4: detected capacity change from 0 to 1024 [ 130.970320][ T7003] ext4: Unknown parameter 'noacl' [ 131.000578][ T6884] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.533131][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 131.579521][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 131.995623][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.879'. [ 132.246115][ T7058] loop4: detected capacity change from 0 to 256 [ 132.312777][ T7058] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 132.314266][ T7058] FAT-fs (loop4): Filesystem has been set read-only [ 132.315342][ T7058] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 132.318747][ T7058] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 132.320206][ T7058] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 132.920746][ T7078] random: crng reseeded on system resumption [ 133.154334][ T7082] binder: BINDER_SET_CONTEXT_MGR already set [ 133.155424][ T7082] binder: 7081:7082 ioctl 4018620d 20004a80 returned -16 [ 133.298424][ T7098] loop5: detected capacity change from 0 to 1024 [ 133.302129][ T7098] EXT4-fs: Ignoring removed bh option [ 133.303036][ T7098] EXT4-fs: Ignoring removed nobh option [ 133.587922][ T7098] EXT4-fs: Ignoring removed bh option [ 133.607334][ T7098] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.635129][ T7108] loop2: detected capacity change from 0 to 128 [ 133.643513][ T7098] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.680495][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.683171][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.733373][ T7015] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.931270][ T7123] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.895: Allocating blocks 497-513 which overlap fs metadata [ 133.943184][ T7123] EXT4-fs (loop5): pa 00000000397ad9b1: logic 256, phys. 385, len 8 [ 133.944408][ T7123] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 134.153070][ T7126] binder: BINDER_SET_CONTEXT_MGR already set [ 134.154011][ T7126] binder: 7125:7126 ioctl 4018620d 20004a80 returned -16 [ 134.307822][ T6623] EXT4-fs (loop5): unmounting filesystem. [ 134.365651][ T7143] netlink: 280 bytes leftover after parsing attributes in process `syz.5.910'. [ 134.475759][ T7156] binder: BINDER_SET_CONTEXT_MGR already set [ 134.476749][ T7156] binder: 7155:7156 ioctl 4018620d 20004a80 returned -16 [ 135.192464][ T7195] binder: 7194:7195 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 135.195238][ T7195] binder: 7194:7195 got transaction to invalid handle, 1 [ 135.196309][ T7195] binder: 7195:7194 cannot find target node [ 135.197224][ T7195] binder: 7194:7195 transaction call to 0:0 failed 32/29201/-22, size 72-48 line 3045 [ 135.199571][ T4446] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.489075][ T7223] binder: 7221:7223 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 135.492043][ T7223] binder: 7221:7223 got transaction to invalid handle, 1 [ 135.493195][ T7223] binder: 7223:7221 cannot find target node [ 135.494104][ T7223] binder: 7221:7223 transaction call to 0:0 failed 35/29201/-22, size 72-48 line 3045 [ 135.496187][ T4312] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.811441][ T7234] loop5: detected capacity change from 0 to 164 [ 135.838943][ T6884] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.866424][ T112] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 135.874491][ T112] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.877426][ T7238] loop5: detected capacity change from 0 to 2048 [ 136.441130][ T7255] binder: 7254:7255 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 136.452807][ T7255] binder: 7254:7255 got transaction to invalid handle, 1 [ 136.453934][ T7255] binder: 7255:7254 cannot find target node [ 136.454852][ T7255] binder: 7254:7255 transaction call to 0:0 failed 38/29201/-22, size 72-48 line 3045 [ 136.466492][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.919961][ T7286] binder: 7285:7286 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 137.317907][ T7309] random: crng reseeded on system resumption [ 137.454575][ T7316] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 137.969063][ T7330] binder: 7329:7330 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 138.751331][ T7396] netlink: 84 bytes leftover after parsing attributes in process `syz.5.999'. [ 138.952667][ T7400] random: crng reseeded on system resumption [ 139.642712][ T7411] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1004'. [ 139.761749][ T4446] hid-generic 0005:0002:5508.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 139.867576][ T112] kernel write not supported for file /vcsa (pid: 112 comm: kworker/0:2) [ 139.870167][ T7424] fido_id[7424]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 140.034265][ T7444] loop5: detected capacity change from 0 to 512 [ 140.437871][ T7468] random: crng reseeded on system resumption [ 140.994154][ T7481] input: syz1 as /devices/virtual/input/input4 [ 141.190953][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 142.174341][ T7511] random: crng reseeded on system resumption [ 142.306640][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1038'. [ 143.183665][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 143.183677][ T27] audit: type=1326 audit(143.225:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.5.1047" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf5b9e8 code=0x0 [ 143.241183][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.290837][ T7562] random: crng reseeded on system resumption [ 143.407137][ T7576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.928851][ T7592] loop3: detected capacity change from 0 to 512 [ 143.932588][ T7592] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.934633][ T7592] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 143.938165][ T7592] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 143.940498][ T7592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.965398][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 143.994535][ T7596] loop3: detected capacity change from 0 to 16 [ 143.996118][ T7596] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.486129][ T7602] random: crng reseeded on system resumption [ 144.582392][ T7605] binder: 7604:7605 ioctl 4018620d 0 returned -22 [ 144.600344][ T7605] binder: 7604:7605 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 144.617372][ T7605] binder: 7604:7605 got transaction to invalid handle, 1 [ 144.624911][ T7605] binder: 7605:7604 cannot find target node [ 144.625763][ T7605] binder: 7604:7605 transaction call to 0:0 failed 43/29201/-22, size 72-48 line 3045 [ 144.647301][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.192812][ T7632] device syzkaller0 entered promiscuous mode [ 145.574639][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.687315][ T7666] random: crng reseeded on system resumption [ 146.365374][ T7690] loop4: detected capacity change from 0 to 2048 [ 146.474566][ T7706] binder: BINDER_SET_CONTEXT_MGR already set [ 146.475486][ T7706] binder: 7703:7706 ioctl 4018620d 20004a80 returned -16 [ 146.590763][ T7714] random: crng reseeded on system resumption [ 147.352802][ T7753] binder: BINDER_SET_CONTEXT_MGR already set [ 147.355778][ T7753] binder: 7752:7753 ioctl 4018620d 20004a80 returned -16 [ 147.490839][ T7763] random: crng reseeded on system resumption [ 147.877698][ T7806] binder: BINDER_SET_CONTEXT_MGR already set [ 147.878766][ T7806] binder: 7805:7806 ioctl 4018620d 20004a80 returned -16 [ 147.892263][ T7808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'. [ 147.916310][ T7810] tc_dump_action: action bad kind [ 148.259407][ T7759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.778501][ T7835] binder: 7833:7835 ioctl c0306201 0 returned -14 [ 148.782000][ T7835] binder: 7833:7835 got transaction to invalid handle, 1 [ 148.783682][ T7835] binder: 7835:7833 cannot find target node [ 148.784576][ T7835] binder: 7833:7835 transaction call to 0:0 failed 50/29201/-22, size 72-48 line 3045 [ 148.790550][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.811460][ T7837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1128'. [ 148.825813][ T7841] tap0: tun_chr_ioctl cmd 2147767506 [ 149.015959][ T7850] random: crng reseeded on system resumption [ 149.041993][ T7861] binder: 7860:7861 ioctl c0306201 0 returned -14 [ 149.044252][ T7861] binder: 7860:7861 got transaction to invalid handle, 1 [ 149.045239][ T7861] binder: 7861:7860 cannot find target node [ 149.046359][ T7861] binder: 7860:7861 transaction call to 0:0 failed 54/29201/-22, size 72-48 line 3045 [ 149.048048][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.072506][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'. [ 149.109436][ T7869] loop2: detected capacity change from 0 to 256 [ 149.112967][ T7869] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.119804][ T7869] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 149.128668][ T7869] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 149.880748][ T7895] binder: 7894:7895 ioctl c0306201 0 returned -14 [ 149.883429][ T7895] binder: 7894:7895 got transaction to invalid handle, 1 [ 149.884676][ T7895] binder: 7895:7894 cannot find target node [ 149.885716][ T7895] binder: 7894:7895 transaction call to 0:0 failed 58/29201/-22, size 72-48 line 3045 [ 149.887376][ T4985] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.909612][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.911228][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.957521][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.800957][ T7919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1163'. [ 150.920299][ T7922] random: crng reseeded on system resumption [ 151.302843][ T7933] binfmt_misc: register: failed to install interpreter file ./file0 [ 151.306279][ T7935] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1167'. [ 152.414686][ T7969] loop5: detected capacity change from 0 to 1024 [ 152.421101][ T7969] hfsplus: unable to find HFS+ superblock [ 152.443894][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.979539][ T7987] random: crng reseeded on system resumption [ 153.448060][ T7999] loop5: detected capacity change from 0 to 1024 [ 153.453693][ T7999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.487402][ T8006] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1195'. [ 154.333185][ T8030] random: crng reseeded on system resumption [ 154.482045][ T8015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.621458][ T8035] syz.4.1204 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.667895][ T8039] loop5: detected capacity change from 0 to 1024 [ 154.671589][ T8039] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64 [ 154.696480][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1207'. [ 155.311123][ T8063] random: crng reseeded on system resumption [ 155.429996][ T8070] loop3: detected capacity change from 0 to 512 [ 155.439100][ T8070] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 155.440880][ T8070] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 155.442526][ T8070] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 155.455019][ T8070] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 155.456747][ T8070] EXT4-fs (loop3): failed to initialize system zone (-117) [ 155.458245][ T8070] EXT4-fs (loop3): mount failed [ 156.742070][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.007171][ T8120] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1234'. [ 159.274182][ T8132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.349777][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.351345][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.419056][ T8153] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1240'. [ 159.528330][ T4329] Bluetooth: hci1: command 0x0406 tx timeout [ 159.529546][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 159.530755][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 159.665639][ T8151] loop5: detected capacity change from 0 to 512 [ 159.667502][ T8151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.674674][ T8151] EXT4-fs (loop5): 1 truncate cleaned up [ 159.675747][ T8151] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 159.699049][ T6623] EXT4-fs (loop5): unmounting filesystem. [ 159.809577][ T8164] loop2: detected capacity change from 0 to 1024 [ 159.811041][ T8164] hfsplus: creator requires a 4 character value [ 159.813128][ T8164] hfsplus: unable to parse mount options [ 162.168366][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.223474][ T8214] loop2: detected capacity change from 0 to 2048 [ 162.282014][ T8221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1269'. [ 162.283430][ T8221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1269'. [ 162.476698][ T8226] random: crng reseeded on system resumption [ 162.939006][ T8214] EXT4-fs (loop2): failed to initialize system zone (-117) [ 162.940282][ T8214] EXT4-fs (loop2): mount failed [ 163.019262][ T8237] binder: 8236:8237 ioctl c0306201 0 returned -14 [ 163.020553][ T8237] binder: 8236:8237 got transaction to invalid handle, 1 [ 163.021756][ T8237] binder: 8237:8236 cannot find target node [ 163.022834][ T8237] binder: 8236:8237 transaction call to 0:0 failed 62/29201/-22, size 72-48 line 3045 [ 163.024951][ T4312] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.039185][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.041918][ T4329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.043504][ T4329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.045261][ T4329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.047030][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.048372][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.066286][ T8271] binder: 8269:8271 ioctl c0306201 0 returned -14 [ 164.067530][ T8271] binder: 8269:8271 got transaction to invalid handle, 1 [ 164.068694][ T8271] binder: 8271:8269 cannot find target node [ 164.070261][ T8271] binder: 8269:8271 transaction call to 0:0 failed 66/29201/-22, size 72-48 line 3045 [ 164.076982][ T4446] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.180745][ T4658] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.195777][ T8277] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 164.270820][ T8281] random: crng reseeded on system resumption [ 164.298061][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.541604][ T4658] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.925936][ T4658] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.930033][ T8266] chnl_net:caif_netlink_parms(): no params data found [ 164.998227][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.999553][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.001020][ T8266] device bridge_slave_0 entered promiscuous mode [ 165.004781][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.006021][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.007770][ T8266] device bridge_slave_1 entered promiscuous mode [ 165.021435][ T8303] loop2: detected capacity change from 0 to 16 [ 165.023265][ T8303] erofs: (device loop2): mounted with root inode @ nid 36. [ 165.116242][ T4658] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.127086][ T8266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.129782][ T8266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.806282][ T8266] team0: Port device team_slave_0 added [ 165.809513][ T8266] team0: Port device team_slave_1 added [ 165.885060][ T8317] binder: 8316:8317 got transaction to invalid handle, 1 [ 165.886086][ T8317] binder: 8317:8316 cannot find target node [ 165.886955][ T8317] binder: 8316:8317 transaction call to 0:0 failed 70/29201/-22, size 72-48 line 3045 [ 165.889044][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.899149][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.900256][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.921109][ T8266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.930265][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.931285][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.941933][ T8266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.068605][ T8336] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 166.111303][ T8266] device hsr_slave_0 entered promiscuous mode [ 166.436534][ T8341] random: crng reseeded on system resumption [ 166.442566][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 166.759583][ T8266] device hsr_slave_1 entered promiscuous mode [ 166.808563][ T8266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.809797][ T8266] Cannot create hsr debugfs directory [ 166.866956][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.956053][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.957526][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.983912][ T8360] loop2: detected capacity change from 0 to 16 [ 166.985620][ T8360] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.985782][ T8380] binder: 8378:8380 got transaction to invalid handle, 1 [ 167.986918][ T8380] binder: 8380:8378 cannot find target node [ 168.328929][ T27] audit: type=1326 audit(524455.961:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.4.1318" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235b9e8 code=0x0 [ 168.453864][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.455232][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.494565][ T4329] Bluetooth: hci2: command 0x041b tx timeout [ 168.514944][ T8407] random: crng reseeded on system resumption [ 168.844704][ T8413] loop3: detected capacity change from 0 to 16 [ 168.846533][ T8413] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.883228][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.959839][ T8432] binder: 8431:8432 got transaction to invalid handle, 1 [ 169.961180][ T8432] binder_debug: 2 callbacks suppressed [ 169.961187][ T8432] binder: 8432:8431 cannot find target node [ 169.962881][ T8432] binder: 8431:8432 transaction call to 0:0 failed 78/29201/-22, size 72-48 line 3045 [ 169.969501][ T4312] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.329813][ T8266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.364688][ T8266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.395604][ T8266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.583933][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 170.609157][ T8475] loop3: detected capacity change from 0 to 16 [ 170.620349][ T8475] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.002212][ T8266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.126792][ T8486] binder: 8485:8486 got transaction to invalid handle, 1 [ 171.131185][ T8486] binder: 8486:8485 cannot find target node [ 171.132181][ T8486] binder: 8485:8486 transaction call to 0:0 failed 82/29201/-22, size 72-48 line 3045 [ 171.133896][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.267528][ T8266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.272499][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.273901][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.276639][ T8266] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.279797][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.591538][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.593218][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.594294][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.623147][ T8507] cgroup: Name too long [ 171.902387][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.903911][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.905351][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.906766][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.907820][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.909924][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.920176][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.929225][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.935758][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.938515][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.940858][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.017588][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.019804][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.021634][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.023651][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.027567][ T8266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.029323][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.050612][ T8532] binder: 8531:8532 got transaction to invalid handle, 1 [ 172.051716][ T8532] binder: 8532:8531 cannot find target node [ 172.053904][ T8532] binder: 8531:8532 transaction call to 0:0 failed 86/29201/-22, size 72-48 line 3045 [ 172.056448][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.058631][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.065494][ T4658] device hsr_slave_0 left promiscuous mode [ 172.457587][ T4658] device hsr_slave_1 left promiscuous mode [ 172.510550][ T4985] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.596764][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.614244][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.634723][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.666665][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.676872][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 172.711319][ T4658] device bridge_slave_1 left promiscuous mode [ 172.712474][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.739828][ T8540] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 172.757417][ T4658] device bridge_slave_0 left promiscuous mode [ 172.758682][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.188299][ T4658] device veth1_macvtap left promiscuous mode [ 173.189712][ T4658] device veth0_macvtap left promiscuous mode [ 173.190670][ T4658] device veth1_vlan left promiscuous mode [ 173.191574][ T4658] device veth0_vlan left promiscuous mode [ 174.083199][ T8571] binder: 8570:8571 got transaction to invalid handle, 1 [ 174.084389][ T8571] binder: 8571:8570 cannot find target node [ 174.243707][ T8563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.188894][ T8587] random: crng reseeded on system resumption [ 175.526423][ T8591] loop4: detected capacity change from 0 to 132 [ 175.908455][ T8598] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 176.019225][ T8601] binder: 8600:8601 tried to acquire reference to desc 0, got 1 instead [ 176.340273][ T8601] binder: 8600:8601 ioctl c0306201 0 returned -14 [ 177.108875][ T4658] team0 (unregistering): Port device team_slave_1 removed [ 177.339052][ T4658] team0 (unregistering): Port device team_slave_0 removed [ 177.508404][ T4658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.633070][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.698342][ T4658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.390897][ T8629] random: crng reseeded on system resumption [ 180.601545][ T4658] bond0 (unregistering): Released all slaves [ 180.831626][ T8266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.833778][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.834984][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.923678][ T8646] loop2: detected capacity change from 0 to 16 [ 180.929101][ T8646] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.995156][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.996701][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.014565][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.016063][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.017807][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.030740][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.032786][ T8266] device veth0_vlan entered promiscuous mode [ 181.036973][ T8266] device veth1_vlan entered promiscuous mode [ 181.045296][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.046763][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.048198][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.049863][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.052796][ T8266] device veth0_macvtap entered promiscuous mode [ 181.203009][ T8266] device veth1_macvtap entered promiscuous mode [ 181.557433][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.559041][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.560789][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.562382][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.563811][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.565351][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.566833][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.568353][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.570597][ T8266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.572197][ T8203] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.573675][ T8203] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.575110][ T8203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.576634][ T8203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.579548][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.581457][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.583105][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.584706][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.586220][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.587880][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.589456][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.591248][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.593812][ T8266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.595322][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.597058][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.599868][ T8266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.602174][ T8266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.603607][ T8266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.605021][ T8266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.646593][ T4508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.648428][ T4508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.651291][ T8203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.664504][ T8538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.666081][ T8538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.669984][ T8203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.720618][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.722308][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.786433][ T8666] loop2: detected capacity change from 0 to 256 [ 181.915142][ T8666] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 181.916278][ T8666] FAT-fs (loop2): Filesystem has been set read-only [ 181.917235][ T8666] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 181.919636][ T8666] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 181.921750][ T8666] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 182.296201][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1396'. [ 182.402905][ T8690] loop2: detected capacity change from 0 to 1024 [ 182.409960][ T8691] loop3: detected capacity change from 0 to 16 [ 182.411785][ T8691] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.429676][ T8690] EXT4-fs: Ignoring removed bh option [ 182.435076][ T8690] EXT4-fs: Ignoring removed nobh option [ 182.438302][ T8690] EXT4-fs: Ignoring removed bh option [ 182.454689][ T8690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.492335][ T8690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 183.093607][ T8700] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.1401: Allocating blocks 497-513 which overlap fs metadata [ 183.098635][ T8700] EXT4-fs (loop2): pa 00000000b3f4ebe0: logic 256, phys. 385, len 8 [ 183.099784][ T8700] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 183.483447][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 183.489398][ T8705] binder: 8704:8705 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 183.491581][ T8705] binder: 8705 RLIMIT_NICE not set [ 183.965822][ T8724] binder: 8723:8724 tried to acquire reference to desc 0, got 1 instead [ 184.041861][ T8732] loop2: detected capacity change from 0 to 16 [ 184.043441][ T8732] erofs: (device loop2): mounted with root inode @ nid 36. [ 184.701152][ T8739] overlayfs: unrecognized mount option "?Zug=2Dt.ٵn 1GE-"fhǏ!%Tɠΰ8YP9)-N5\\ϰx=mjYp1kW'<m{ѥ{wгQKSm@YQK8?rjj 1\{>1Q!@dRN ;+!sׂ3~&R~5tfG MY!K0Xll~" or missing value [ 184.828806][ T8749] loop5: detected capacity change from 0 to 2048 [ 184.836266][ T8749] UDF-fs: bad mount option "volume=00000000&00000000016" or missing value [ 184.906506][ T6884] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.934720][ T8753] binder: 8752:8753 tried to acquire reference to desc 0, got 1 instead [ 185.862933][ T8774] loop2: detected capacity change from 0 to 256 [ 185.864481][ T8774] exfat: Deprecated parameter 'namecase' [ 186.652149][ T8796] loop3: detected capacity change from 0 to 2048 [ 186.680903][ T8796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.807262][ T8800] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1441: bg 0: block 345: padding at end of block bitmap is not set [ 186.818525][ T8800] EXT4-fs (loop3): Remounting filesystem read-only [ 186.928475][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 187.937326][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.981486][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.954437][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.956017][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.332268][ T8905] loop4: detected capacity change from 0 to 1024 [ 190.364029][ T8905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.696386][ T8905] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1478: inode #10665728: comm syz.4.1478: iget: illegal inode # [ 190.711502][ T8905] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1478: error while reading EA inode 10665728 err=-117 [ 190.736261][ T8916] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 190.783644][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 192.016846][ T8946] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1493'. [ 192.052633][ T8948] input: syz1 as /devices/virtual/input/input5 [ 192.115452][ T8951] loop4: detected capacity change from 0 to 512 [ 192.132752][ T8952] raw_sendmsg: syz.5.1487 forgot to set AF_INET. Fix it! [ 192.271757][ T8951] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1495: iget: bad i_size value: 38620345925642 [ 192.276595][ T8951] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1495: couldn't read orphan inode 15 (err -117) [ 192.278815][ T8951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.798450][ T8967] loop5: detected capacity change from 0 to 16 [ 192.800203][ T8967] erofs: (device loop5): mounted with root inode @ nid 36. [ 193.336154][ T1890] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 193.339669][ T1890] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 193.347892][ T1890] EXT4-fs (loop4): This should not happen!! Data will be lost [ 193.347892][ T1890] [ 193.353853][ T1890] EXT4-fs (loop4): Total free blocks count 0 [ 193.359762][ T1890] EXT4-fs (loop4): Free/Dirty block details [ 193.362937][ T1890] EXT4-fs (loop4): free_blocks=0 [ 193.363723][ T1890] EXT4-fs (loop4): dirty_blocks=202 [ 193.366738][ T1890] EXT4-fs (loop4): Block reservation details [ 193.367595][ T1890] EXT4-fs (loop4): i_reserved_data_blocks=202 [ 193.433734][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 194.029652][ T8996] input: syz1 as /devices/virtual/input/input6 [ 195.406313][ T9011] loop5: detected capacity change from 0 to 512 [ 195.445871][ T9011] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.5.1512: corrupted xattr block 95 [ 195.469835][ T9011] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 195.483755][ T9011] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1512: bg 0: block 7: invalid block bitmap [ 195.503365][ T9011] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 195.508375][ T9011] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2935: inode #11: comm syz.5.1512: corrupted xattr block 95 [ 195.532677][ T9011] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 195.537484][ T9011] EXT4-fs (loop5): 1 orphan inode deleted [ 195.544639][ T9011] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.617076][ T9017] loop2: detected capacity change from 0 to 512 [ 195.676913][ T9017] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1514: iget: bad i_size value: 38620345925642 [ 195.717359][ T9017] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1514: couldn't read orphan inode 15 (err -117) [ 195.724002][ T9017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.733342][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 196.587500][ T39] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 196.605846][ T39] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 196.607873][ T39] EXT4-fs (loop2): This should not happen!! Data will be lost [ 196.607873][ T39] [ 196.641772][ T39] EXT4-fs (loop2): Total free blocks count 0 [ 196.642737][ T39] EXT4-fs (loop2): Free/Dirty block details [ 196.643726][ T39] EXT4-fs (loop2): free_blocks=0 [ 196.644452][ T39] EXT4-fs (loop2): dirty_blocks=202 [ 196.653395][ T39] EXT4-fs (loop2): Block reservation details [ 196.654328][ T39] EXT4-fs (loop2): i_reserved_data_blocks=202 [ 196.661918][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 196.817581][ T9053] loop3: detected capacity change from 0 to 512 [ 196.818912][ T9053] EXT4-fs: Ignoring removed nobh option [ 196.836513][ T9053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.848632][ T9053] EXT4-fs (loop3): 1 truncate cleaned up [ 196.852177][ T9053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 197.151572][ T9053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1528: bg 0: block 3072: padding at end of block bitmap is not set [ 197.161808][ T9053] EXT4-fs (loop3): Remounting filesystem read-only [ 197.203636][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 197.690163][ T9074] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.691798][ T9074] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.172866][ T9089] loop3: detected capacity change from 0 to 2048 [ 198.173348][ T9091] loop4: detected capacity change from 0 to 512 [ 198.175388][ T9091] EXT4-fs: Ignoring removed i_version option [ 198.176294][ T9091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.177524][ T9091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.469382][ T9091] EXT4-fs: Ignoring removed i_version option [ 198.501457][ T9091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 198.503994][ T9091] System zones: 1-12 [ 198.509796][ T9091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1541: inode #1: comm syz.4.1541: iget: illegal inode # [ 198.550718][ T9091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1541: error while reading EA inode 1 err=-117 [ 198.561713][ T9091] EXT4-fs (loop4): 1 orphan inode deleted [ 198.562663][ T9091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.606388][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 198.766939][ T9115] mmap: syz.2.1548 (9115) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.983392][ T9123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.984694][ T9123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 199.735582][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.737008][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.753827][ T9142] loop2: detected capacity change from 0 to 2048 [ 199.835966][ T9152] loop5: detected capacity change from 0 to 512 [ 199.852622][ T9152] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1564: iget: bad i_size value: 38620345925642 [ 199.855513][ T9152] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1564: couldn't read orphan inode 15 (err -117) [ 199.858742][ T9152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.639403][ T9178] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.640814][ T9178] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 200.906005][ T4658] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:11: bg 0: block 5: invalid block bitmap [ 200.910129][ T4658] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 200.911904][ T4658] EXT4-fs (loop5): This should not happen!! Data will be lost [ 200.911904][ T4658] [ 200.913300][ T4658] EXT4-fs (loop5): Total free blocks count 0 [ 200.914139][ T4658] EXT4-fs (loop5): Free/Dirty block details [ 200.914909][ T4658] EXT4-fs (loop5): free_blocks=0 [ 200.915659][ T4658] EXT4-fs (loop5): dirty_blocks=202 [ 200.916380][ T4658] EXT4-fs (loop5): Block reservation details [ 200.917245][ T4658] EXT4-fs (loop5): i_reserved_data_blocks=202 [ 200.952465][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 201.027828][ T9185] loop4: detected capacity change from 0 to 1024 [ 201.558228][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.560509][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.223724][ T9237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.225301][ T9237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 202.552815][ T9242] loop2: detected capacity change from 0 to 1024 [ 202.600003][ T8203] hfsplus: b-tree write err: -5, ino 4 [ 205.258203][ T9326] loop5: detected capacity change from 0 to 256 [ 205.260815][ T9326] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.265774][ T9326] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 205.281286][ T9326] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 208.004456][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.005934][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.044363][ T9414] xt_policy: output policy not valid in PREROUTING and INPUT [ 208.999624][ T9420] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1665'. [ 209.353105][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.354615][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.601388][ T9434] loop2: detected capacity change from 0 to 16 [ 209.602996][ T9434] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.456925][ T9449] loop4: detected capacity change from 0 to 1024 [ 210.461477][ T9449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.462999][ T9449] EXT4-fs: Invalid want_extra_isize 1669892747 [ 210.993467][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 210.995110][ T9472] netem: change failed [ 211.074022][ T9474] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1687'. [ 211.076423][ T9474] device gretap0 entered promiscuous mode [ 211.096241][ T9476] loop4: detected capacity change from 0 to 16 [ 211.108003][ T9476] erofs: (device loop4): mounted with root inode @ nid 36. [ 211.123918][ T9478] loop3: detected capacity change from 0 to 512 [ 211.125370][ T9478] EXT4-fs: Ignoring removed nobh option [ 211.135663][ T9478] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1689: iget: bad i_size value: 38620345925642 [ 211.143035][ T9478] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1689: couldn't read orphan inode 15 (err -117) [ 211.148018][ T9478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.182969][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.184442][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.244765][ T27] audit: type=1326 audit(524498.780:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="syz.5.1690" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb975b9e8 code=0x0 [ 211.421725][ T9489] netlink: 'syz.1.1692': attribute type 2 has an invalid length. [ 211.423875][ T9489] netlink: 'syz.1.1692': attribute type 2 has an invalid length. [ 211.425097][ T9489] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 211.426335][ T9489] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1692'. [ 211.841792][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 212.495467][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 212.498115][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 212.499879][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 212.507311][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 212.509032][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 212.511299][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 212.519884][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.718133][ T9498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.861053][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 212.925951][ T9524] loop4: detected capacity change from 0 to 512 [ 212.933096][ T9524] EXT4-fs: Ignoring removed nobh option [ 212.939042][ T9524] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1706: iget: bad i_size value: 38620345925642 [ 212.943871][ T9524] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1706: couldn't read orphan inode 15 (err -117) [ 212.946102][ T9524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 212.975381][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.976971][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.713019][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 213.759084][ T9557] loop4: detected capacity change from 0 to 16 [ 213.765702][ T9557] erofs: (device loop4): mounted with root inode @ nid 36. [ 214.444412][ T27] audit: type=1326 audit(524501.979:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.1.1716" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83d5b9e8 code=0x0 [ 215.091905][ T9633] usb usb8: usbfs: process 9633 (syz.4.1723) did not claim interface 0 before use [ 215.521686][ T9638] loop2: detected capacity change from 0 to 256 [ 215.523278][ T9638] exfat: Bad value for 'time_offset' [ 215.572829][ T6884] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.883950][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.949527][ T9647] loop3: detected capacity change from 0 to 128 [ 218.417517][ T9687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.499619][ T9714] loop3: detected capacity change from 0 to 2048 [ 218.536878][ T9714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.569321][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 219.157817][ T9735] loop5: detected capacity change from 0 to 16 [ 219.180318][ T9735] erofs: (device loop5): mounted with root inode @ nid 36. [ 219.949502][ T9752] loop4: detected capacity change from 0 to 1024 [ 219.957060][ T9752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.959659][ T9752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 219.961150][ T9752] System zones: 0-1, 3-36 [ 219.963728][ T9752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.980069][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 220.836285][ T9755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.387391][ T9801] loop5: detected capacity change from 0 to 16 [ 222.401394][ T9801] erofs: (device loop5): mounted with root inode @ nid 36. [ 222.407189][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.408727][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.817441][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.425703][ T9853] loop2: detected capacity change from 0 to 16 [ 224.438884][ T9853] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.460598][ T9855] loop5: detected capacity change from 0 to 2048 [ 224.475436][ T9855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.527509][ T9859] loop5: detected capacity change from 0 to 512 [ 224.529954][ T9859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.541243][ T9859] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 224.542749][ T9859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 224.544439][ T9859] System zones: 0-1, 15-15, 18-18, 34-34 [ 224.545898][ T9859] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.547051][ T9859] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 224.548645][ T9859] EXT4-fs warning (device loop5): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 224.551051][ T9859] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 224.552660][ T9859] EXT4-fs (loop5): 1 truncate cleaned up [ 224.556925][ T9859] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.588841][ T9859] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 224.603369][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 225.414107][ T9886] Cannot find set identified by id 0 to match [ 225.545147][ T9895] Bluetooth: MGMT ver 1.22 [ 225.547490][ T9895] __nla_validate_parse: 68 callbacks suppressed [ 225.547501][ T9895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1811'. [ 225.549785][ T9895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1811'. [ 225.970893][ T9900] device bridge1 entered promiscuous mode [ 226.073435][ T9910] loop3: detected capacity change from 0 to 16 [ 226.076348][ T9909] loop5: detected capacity change from 0 to 164 [ 226.086325][ T9910] erofs: (device loop3): mounted with root inode @ nid 36. [ 226.141212][ T9909] isofs_fill_super: root inode is not a directory. Corrupted media? [ 226.315092][ T9925] loop2: detected capacity change from 0 to 512 [ 226.318829][ T9925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.637196][ T9925] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 226.638650][ T9925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 226.641555][ T9925] System zones: 0-1, 15-15, 18-18, 34-34 [ 226.735520][ T9925] EXT4-fs (loop2): orphan cleanup on readonly fs [ 226.736624][ T9925] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 226.775057][ T9925] EXT4-fs warning (device loop2): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.783968][ T9925] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 226.790820][ T9925] EXT4-fs (loop2): 1 truncate cleaned up [ 226.791623][ T9925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 226.930342][ T9925] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 226.964151][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 227.628012][ T9968] loop5: detected capacity change from 0 to 8192 [ 227.630902][ T9968] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.012573][ T9978] loop2: detected capacity change from 0 to 16 [ 228.022634][ T9978] erofs: (device loop2): mounted with root inode @ nid 36. [ 228.027072][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1845'. [ 228.028396][ T9979] tc_dump_action: action bad kind [ 228.113783][ T9985] loop5: detected capacity change from 0 to 512 [ 228.116685][ T9985] EXT4-fs: Ignoring removed oldalloc option [ 228.117985][ T9985] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 228.306208][ T9985] EXT4-fs (loop5): 1 truncate cleaned up [ 228.307071][ T9985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 228.352878][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 229.774118][T10051] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 230.813292][T10069] loop5: detected capacity change from 0 to 1024 [ 230.823912][T10069] hfsplus: unable to parse mount options [ 231.980068][T10115] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 233.173987][T10149] loop5: detected capacity change from 0 to 16 [ 233.179529][T10149] erofs: (device loop5): mounted with root inode @ nid 36. [ 233.323356][T10154] loop5: detected capacity change from 0 to 512 [ 233.347748][T10154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 233.399138][T10161] loop3: detected capacity change from 0 to 2048 [ 233.425006][ T7015] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.429085][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 233.429451][T10161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1915'. [ 233.571603][T10170] loop3: detected capacity change from 0 to 512 [ 233.573024][T10170] journal_path: Lookup failure for './bus' [ 233.573940][T10170] EXT4-fs: error: could not find journal device path [ 233.886094][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.887482][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.943990][T10177] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 234.328217][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.698624][T10206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.789665][T10212] loop4: detected capacity change from 0 to 512 [ 235.791045][T10212] EXT4-fs: quotafile must be on filesystem root [ 236.020018][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.021287][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.025021][ T4329] Bluetooth: hci4: command 0x0406 tx timeout [ 236.031146][T10236] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 236.916755][T10241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.034720][T10262] netlink: 6308 bytes leftover after parsing attributes in process `syz.3.1955'. [ 237.212135][T10276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.463680][T10279] loop5: detected capacity change from 0 to 512 [ 237.742041][T10291] loop3: detected capacity change from 0 to 512 [ 237.746373][T10291] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.066988][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1984'. [ 240.312514][T10304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.073894][T10376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.235945][T10410] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2013'. [ 243.237377][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2013'. [ 243.238784][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2013'. [ 243.240362][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2013'. [ 243.273038][T10414] loop5: detected capacity change from 0 to 512 [ 243.279261][T10414] EXT4-fs (loop5): Invalid log block size: 134217728 [ 243.354936][ T6884] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.138104][T10415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.397797][T10455] loop4: detected capacity change from 0 to 1024 [ 244.452076][T10460] loop2: detected capacity change from 0 to 16 [ 244.455411][T10460] erofs: (device loop2): mounted with root inode @ nid 36. [ 244.532270][T10467] netlink: 'syz.3.2037': attribute type 49 has an invalid length. [ 244.975418][T10478] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.983051][T10478] vhci_hcd: invalid port number 96 [ 244.983917][T10478] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 245.024242][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.027789][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.124659][T10492] loop3: detected capacity change from 0 to 512 [ 245.151664][T10492] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 245.155310][T10492] EXT4-fs (loop3): mount failed [ 245.292836][T10461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.499550][T10516] loop3: detected capacity change from 0 to 256 [ 245.503214][T10516] exfat: Deprecated parameter 'utf8' [ 245.505590][T10516] exfat: Deprecated parameter 'namecase' [ 245.506455][T10516] exfat: Deprecated parameter 'utf8' [ 245.520773][T10516] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 245.530696][T10518] loop2: detected capacity change from 0 to 16 [ 245.532156][T10516] exFAT-fs (loop3): hint_cluster is invalid (1) [ 245.532612][T10518] erofs: (device loop2): mounted with root inode @ nid 36. [ 245.549306][T10516] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 245.551929][T10516] exFAT-fs (loop3): error, failed to bmap (inode : 000000003805572b iblock : 9, err : -5) [ 245.556163][T10516] syz.3.2058: attempt to access beyond end of device [ 245.556163][T10516] loop3: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 245.568477][T10516] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 245.572595][T10516] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 245.574366][T10516] exFAT-fs (loop3): error, failed to bmap (inode : 000000003805572b iblock : 276758527, err : -5) [ 245.779239][T10541] loop5: detected capacity change from 0 to 4096 [ 245.784049][T10541] EXT4-fs (loop5): Test dummy encryption mode enabled [ 245.787406][T10541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 245.801906][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 246.513568][T10589] loop5: detected capacity change from 0 to 512 [ 246.561804][T10589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 246.876646][T10571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.929517][T10601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.931180][ T8266] EXT4-fs (loop5): unmounting filesystem. [ 247.566600][T10619] loop3: detected capacity change from 0 to 128 [ 247.583748][T10619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.684387][T10632] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 247.911237][T10635] loop2: detected capacity change from 0 to 512 [ 247.916247][T10635] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.918594][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 247.962734][T10635] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 247.971687][T10635] Quota error (device loop2): write_blk: dquota write failed [ 247.973760][T10635] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 247.975227][T10635] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.2109: Failed to acquire dquot type 0 [ 247.995204][T10635] EXT4-fs (loop2): 1 truncate cleaned up [ 247.999529][T10635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.042000][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 248.940174][T10649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.225829][T10662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.442731][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.443706][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.446651][T10665] loop2: detected capacity change from 0 to 512 [ 249.479300][T10671] netlink: 'syz.3.2122': attribute type 3 has an invalid length. [ 249.480794][T10671] netlink: 'syz.3.2122': attribute type 3 has an invalid length. [ 249.484897][T10665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 249.510800][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.512259][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.549483][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 250.926031][T10721] loop5: detected capacity change from 0 to 1024 [ 251.493484][T10750] loop5: detected capacity change from 0 to 16 [ 251.500509][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.502794][T10750] erofs: (device loop5): mounted with root inode @ nid 36. [ 252.032922][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.039937][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.171499][T10770] xt_socket: unknown flags 0x58 [ 252.424740][T10791] loop4: detected capacity change from 0 to 1024 [ 252.733909][T10791] hfsplus: unable to parse mount options [ 252.789830][T10804] loop2: detected capacity change from 0 to 128 [ 252.806350][T10804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 252.834164][T10809] loop4: detected capacity change from 0 to 1024 [ 252.845601][T10809] hfsplus: part requires an argument [ 252.852885][T10809] hfsplus: unable to parse mount options [ 252.956308][T10818] loop5: detected capacity change from 0 to 16 [ 252.958005][T10818] erofs: (device loop5): mounted with root inode @ nid 36. [ 253.379038][T10785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.861428][ T7015] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.890856][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 253.928561][T10831] loop5: detected capacity change from 0 to 1024 [ 254.027402][ T8266] hfsplus: walked past end of dir [ 254.031397][ T8266] hfsplus: walked past end of dir [ 254.246873][T10852] Invalid ELF header type: 25773 != 1 [ 254.268621][T10852] loop2: detected capacity change from 0 to 1024 [ 254.998792][T10865] loop3: detected capacity change from 0 to 512 [ 255.004075][T10865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.018491][T10865] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 255.039138][T10865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0102] [ 255.040370][T10865] System zones: 1-12 [ 255.041264][T10865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.043258][T10865] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2202: invalid indirect mapped block 2 (level 2) [ 255.064628][T10871] loop2: detected capacity change from 0 to 1024 [ 255.092511][T10865] EXT4-fs (loop3): Remounting filesystem read-only [ 255.094380][T10865] EXT4-fs (loop3): 1 truncate cleaned up [ 255.095242][T10865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.190818][ T7015] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.190862][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 255.665463][T10886] loop3: detected capacity change from 0 to 512 [ 255.673412][T10886] EXT4-fs (loop3): Test dummy encryption mode enabled [ 255.674625][T10886] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 255.675587][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.972739][ T4329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.001381][ T4329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.009322][ T4329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.011283][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.012716][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.168486][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.423096][T10878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.426112][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.511678][T10887] chnl_net:caif_netlink_parms(): no params data found [ 256.527576][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.528627][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.530063][T10887] device bridge_slave_0 entered promiscuous mode [ 256.532000][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.533287][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.534791][T10887] device bridge_slave_1 entered promiscuous mode [ 256.953444][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.002393][T10926] loop2: detected capacity change from 0 to 1024 [ 257.029280][ T260] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.029563][T10928] input: syz0 as /devices/virtual/input/input8 [ 257.047089][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.075533][T10887] team0: Port device team_slave_0 added [ 257.077580][T10887] team0: Port device team_slave_1 added [ 257.117693][ T260] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.125169][T10887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.126397][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.130131][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.133638][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.134731][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.142096][ T8203] hfsplus: b-tree write err: -5, ino 4 [ 257.142814][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.197649][ T260] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.227091][T10887] device hsr_slave_0 entered promiscuous mode [ 257.306896][T10887] device hsr_slave_1 entered promiscuous mode [ 258.308932][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 258.336010][T10887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.337244][T10887] Cannot create hsr debugfs directory [ 258.470944][ T260] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.988345][T10887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.292126][T10950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.302773][T10887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.378740][T10887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.408147][T10887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.331963][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.333439][T11016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.338519][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.339921][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.346086][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 260.357213][ T27] audit: type=1326 audit(524547.884:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.3.2253" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d5b9e8 code=0x0 [ 260.582358][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.588332][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.589672][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.593326][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.595720][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.597324][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.600360][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.601449][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.602894][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.606267][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.607656][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.612557][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.613668][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.276577][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.284990][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.374277][T10887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.383171][T11037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.384730][T10887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.388169][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.390848][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.392339][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.393853][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.395314][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.416277][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.417789][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.419247][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.422911][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.424527][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.599744][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.601088][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.623665][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2265'. [ 261.754622][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.755930][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.758006][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.904413][T11111] loop2: detected capacity change from 0 to 128 [ 262.201496][T11111] FAT-fs (loop2): bogus number of reserved sectors [ 262.202620][T11111] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 262.214662][T11111] FAT-fs (loop2): Can't find a valid FAT filesystem [ 262.426472][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 262.981590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.983453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.994260][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.995811][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.001553][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.003051][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.045089][T10887] device veth0_vlan entered promiscuous mode [ 263.049340][T10887] device veth1_vlan entered promiscuous mode [ 263.084050][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.085778][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.087618][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.091277][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.105589][T11171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.109793][T11171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.345126][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2297'. [ 263.388868][T11149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.472030][T10887] device veth0_macvtap entered promiscuous mode [ 263.474380][T10887] device veth1_macvtap entered promiscuous mode [ 263.503648][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.505360][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.509325][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.510997][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.512500][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.514051][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.515574][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.517364][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.518836][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.520353][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.523253][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.547299][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.548871][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.550219][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.552113][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.557244][ T260] device hsr_slave_0 left promiscuous mode [ 263.602047][ T260] device hsr_slave_1 left promiscuous mode [ 263.666254][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.667491][ T260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.669228][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.670393][ T260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.673945][ T260] device bridge_slave_1 left promiscuous mode [ 263.678930][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.743904][ T260] device bridge_slave_0 left promiscuous mode [ 263.745013][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.767994][T11223] loop3: detected capacity change from 0 to 4096 [ 263.916352][ T260] device veth1_macvtap left promiscuous mode [ 263.918725][ T260] device veth0_macvtap left promiscuous mode [ 263.919666][ T260] device veth1_vlan left promiscuous mode [ 263.920618][ T260] device veth0_vlan left promiscuous mode [ 264.011812][T11235] loop3: detected capacity change from 0 to 128 [ 264.506398][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 264.829778][T11251] loop3: detected capacity change from 0 to 164 [ 264.835294][T11251] isofs_fill_super: root inode is not a directory. Corrupted media? [ 264.987934][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.989481][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.992523][T11259] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 265.748825][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.658111][ T260] team0 (unregistering): Port device team_slave_1 removed [ 266.829526][ T260] team0 (unregistering): Port device team_slave_0 removed [ 266.996609][ T260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.206579][ T260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.497126][ T260] bond0 (unregistering): Released all slaves [ 269.729763][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.731416][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.732936][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.734481][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.735981][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.738629][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.740026][T10887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.741493][T10887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.743657][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.753613][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.755306][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.822082][T10887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.823330][T10887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.824554][T10887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.825815][T10887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.962328][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.963703][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.967721][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.991663][ T8203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.993008][ T8203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.995871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.132891][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.144609][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.632213][T11317] loop2: detected capacity change from 0 to 128 [ 270.898676][T11296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.045831][T11317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.091469][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 272.938166][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.939662][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.713233][T11354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.230491][T11440] device bridge0 entered promiscuous mode [ 275.065595][ T4322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 275.132597][ T4322] CPU: 1 PID: 4322 Comm: syz-executor Not tainted syzkaller #0 [ 275.133796][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 275.135230][ T4322] Call trace: [ 275.135685][ T4322] dump_backtrace+0x1c8/0x1f4 [ 275.136389][ T4322] show_stack+0x2c/0x3c [ 275.136958][ T4322] __dump_stack+0x30/0x40 [ 275.137549][ T4322] dump_stack_lvl+0xf8/0x160 [ 275.138180][ T4322] dump_stack+0x1c/0x5c [ 275.138800][ T4322] dump_header+0xc0/0x724 [ 275.139400][ T4322] oom_kill_process+0x360/0x674 [ 275.140063][ T4322] out_of_memory+0xc5c/0xf68 [ 275.140681][ T4322] mem_cgroup_out_of_memory+0x210/0x2bc [ 275.141461][ T4322] try_charge_memcg+0xac4/0x1448 [ 275.142140][ T4322] charge_memcg+0xa4/0x1f4 [ 275.142803][ T4322] mem_cgroup_swapin_charge_folio+0x270/0x3d8 [ 275.143669][ T4322] __read_swap_cache_async+0x3ac/0x6c0 [ 275.144403][ T4322] swapin_readahead+0x59c/0xa7c [ 275.145193][ T4322] do_swap_page+0x2c8/0x231c [ 275.145876][ T4322] handle_mm_fault+0xffc/0x2ff0 [ 275.146604][ T4322] do_page_fault+0x310/0x99c [ 275.147272][ T4322] do_translation_fault+0x94/0xc8 [ 275.148010][ T4322] do_mem_abort+0x70/0x194 [ 275.148654][ T4322] el0_da+0x70/0x154 [ 275.149189][ T4322] el0t_64_sync_handler+0x90/0xf0 [ 275.149910][ T4322] el0t_64_sync+0x18c/0x190 [ 275.174966][ T4322] memory: usage 267128kB, limit 307200kB, failcnt 10065 [ 275.176067][ T4322] memory+swap: usage 267880kB, limit 9007199254740988kB, failcnt 0 [ 275.180574][ T4322] kmem: usage 267100kB, limit 9007199254740988kB, failcnt 0 [ 275.188693][ T4322] Memory cgroup stats for /syz3: [ 275.189075][ T4322] anon 0 [ 275.189075][ T4322] file 24576 [ 275.189075][ T4322] kernel 271765504 [ 275.189075][ T4322] kernel_stack 98304 [ 275.189075][ T4322] pagetables 303104 [ 275.189075][ T4322] sec_pagetables 0 [ 275.189075][ T4322] percpu 1184 [ 275.189075][ T4322] sock 0 [ 275.189075][ T4322] vmalloc 8392704 [ 275.189075][ T4322] shmem 16384 [ 275.189075][ T4322] zswap 0 [ 275.189075][ T4322] zswapped 0 [ 275.189075][ T4322] file_mapped 24576 [ 275.189075][ T4322] file_dirty 8192 [ 275.189075][ T4322] file_writeback 0 [ 275.189075][ T4322] swapcached 15183872 [ 275.189075][ T4322] anon_thp 0 [ 275.189075][ T4322] file_thp 0 [ 275.189075][ T4322] shmem_thp 0 [ 275.189075][ T4322] inactive_anon 0 [ 275.189075][ T4322] active_anon 0 [ 275.189075][ T4322] inactive_file 0 [ 275.189075][ T4322] active_file 12288 [ 275.189075][ T4322] unevictable 16384 [ 275.189075][ T4322] slab_reclaimable 16264 [ 275.189075][ T4322] slab_unreclaimable 239208 [ 275.222489][ T4322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2346,pid=11347,uid=0 [ 275.226349][ T4322] Memory cgroup out of memory: Killed process 11348 (syz.3.2346) total-vm:102036kB, anon-rss:1120kB, file-rss:22604kB, shmem-rss:16kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 275.242746][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2382'. [ 275.563233][T11510] loop6: detected capacity change from 0 to 128 [ 275.567437][T11510] FAT-fs (loop6): bogus number of reserved sectors [ 275.568378][T11510] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 275.569978][T11510] FAT-fs (loop6): Can't find a valid FAT filesystem [ 275.609529][T11281] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.684613][T11521] loop6: detected capacity change from 0 to 512 [ 275.729236][T11281] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.795203][T11524] loop6: detected capacity change from 0 to 512 [ 275.801216][T11524] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.804474][T11524] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 58368 [ 276.069079][T11551] loop6: detected capacity change from 0 to 764 [ 276.079329][T11551] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 276.435068][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.438799][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.055540][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.057588][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.182918][T11645] loop2: detected capacity change from 0 to 512 [ 278.187793][T11645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.219781][T11645] EXT4-fs (loop2): 1 truncate cleaned up [ 278.220759][T11645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.231335][T11655] loop6: detected capacity change from 0 to 512 [ 278.232687][T11655] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.242438][T11655] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 278.244808][T11655] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2453: attempt to clear invalid blocks 2 len 1 [ 278.247752][T11655] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 278.250545][T11655] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2453: invalid indirect mapped block 1819239214 (level 0) [ 278.253141][T11655] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2453: invalid indirect mapped block 1819239214 (level 1) [ 278.255700][T11655] EXT4-fs (loop6): 1 truncate cleaned up [ 278.258903][T11655] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 278.296525][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 278.818919][T11678] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 278.828876][T11678] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 278.841318][T11678] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 278.855008][T11678] Error parsing options; rc = [-22] [ 278.871075][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 278.903609][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.910082][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.997036][T11685] bond0: (slave bond_slave_1): Releasing backup interface [ 279.593886][T11718] loop2: detected capacity change from 0 to 1024 [ 279.792067][T10887] EXT4-fs (loop6): unmounting filesystem. [ 280.298242][T11748] loop6: detected capacity change from 0 to 2048 [ 280.342628][T11754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2482'. [ 280.356399][T11748] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 280.746905][T11759] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2481: bg 0: block 345: padding at end of block bitmap is not set [ 280.753597][T11759] EXT4-fs (loop6): Remounting filesystem read-only [ 280.803030][T10887] EXT4-fs (loop6): unmounting filesystem. [ 281.288613][T11786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.290791][T11786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.357534][T11786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.574920][T11787] loop6: detected capacity change from 0 to 512 [ 281.607415][T11787] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.2492: Unrecognised inode hash code 255 [ 281.610223][T11787] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2492: Corrupt directory, running e2fsck is recommended [ 281.618982][T11787] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 281.620572][T11787] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2196: inode #15: comm syz.6.2492: corrupted in-inode xattr [ 281.632201][T11787] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2492: couldn't read orphan inode 15 (err -117) [ 281.642850][T11787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 281.673832][T10887] EXT4-fs (loop6): unmounting filesystem. [ 282.579090][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.801443][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.802875][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.906544][ T1890] [ 282.906552][ T1890] ============================================ [ 282.906555][ T1890] WARNING: possible recursive locking detected [ 282.906558][ T1890] syzkaller #0 Not tainted [ 282.906561][ T1890] -------------------------------------------- [ 282.906563][ T1890] kworker/u4:6/1890 is trying to acquire lock: [ 282.906567][ T1890] ffff0000de6209e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x140/0x480 [ 282.906594][ T1890] [ 282.906594][ T1890] but task is already holding lock: [ 282.906596][ T1890] ffff0000de6259e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 282.906609][ T1890] [ 282.906609][ T1890] other info that might help us debug this: [ 282.906611][ T1890] Possible unsafe locking scenario: [ 282.906611][ T1890] [ 282.906613][ T1890] CPU0 [ 282.906614][ T1890] ---- [ 282.906615][ T1890] lock(rlock-AF_UNIX); [ 282.906619][ T1890] lock(rlock-AF_UNIX); [ 282.906623][ T1890] [ 282.906623][ T1890] *** DEADLOCK *** [ 282.906623][ T1890] [ 282.906625][ T1890] May be due to missing lock nesting notation [ 282.906625][ T1890] [ 282.906626][ T1890] 4 locks held by kworker/u4:6/1890: [ 282.906630][ T1890] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 282.906646][ T1890] #1: ffff800026407c20 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 282.906659][ T1890] #2: ffff800017829718 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xb8/0x1334 [ 282.906672][ T1890] #3: ffff0000de6259e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480 [ 282.906686][ T1890] [ 282.906686][ T1890] stack backtrace: [ 282.906689][ T1890] CPU: 0 PID: 1890 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 282.906695][ T1890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 282.906698][ T1890] Workqueue: events_unbound __unix_gc [ 282.906706][ T1890] Call trace: [ 282.906708][ T1890] dump_backtrace+0x1c8/0x1f4 [ 282.906716][ T1890] show_stack+0x2c/0x3c [ 282.906719][ T1890] __dump_stack+0x30/0x40 [ 282.906724][ T1890] dump_stack_lvl+0xf8/0x160 [ 282.906728][ T1890] dump_stack+0x1c/0x5c [ 282.906732][ T1890] __lock_acquire+0x18b4/0x6544 [ 282.906737][ T1890] lock_acquire+0x20c/0x644 [ 282.906742][ T1890] _raw_spin_lock+0x54/0x6c [ 282.906748][ T1890] unix_collect_skb+0x140/0x480 [ 282.906755][ T1890] __unix_gc+0xd18/0x1334 [ 282.906760][ T1890] process_one_work+0x7f4/0x13a8 [ 282.906764][ T1890] worker_thread+0x8c8/0xfbc [ 282.906769][ T1890] kthread+0x250/0x2d8 [ 282.906774][ T1890] ret_from_fork+0x10/0x20 [ 283.147730][T11885] loop2: detected capacity change from 0 to 512 [ 283.149408][T11885] EXT4-fs: Ignoring removed bh option [ 283.543762][T11885] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 283.672392][T11885] EXT4-fs (loop2): 1 truncate cleaned up [ 283.673392][T11885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.827770][ T4331] EXT4-fs (loop2): unmounting filesystem.