last executing test programs: 3m25.500974756s ago: executing program 3 (id=699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00"/28, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 3m22.222327086s ago: executing program 3 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 3m22.066135228s ago: executing program 0 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=[r3, r3, r3], 0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m20.58479511s ago: executing program 3 (id=706): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x7fffffff, 0x1, 'client0\x00', 0xc, "97bb1c1b67dda3c1", "fb918b3c78e5e11c0100883b9d7aa0a1000000dc00", 0x31, 0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) clock_gettime(0x6, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m19.525674956s ago: executing program 0 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) 3m18.514813281s ago: executing program 0 (id=722): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014"], 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 3m18.325355704s ago: executing program 3 (id=715): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 3m17.439629657s ago: executing program 3 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001f40)='./file1\x00', 0x2, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 3m15.672392104s ago: executing program 0 (id=729): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 3m15.553143015s ago: executing program 0 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 3m15.463702847s ago: executing program 3 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 3m15.403304728s ago: executing program 32 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 3m12.523541221s ago: executing program 0 (id=732): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m12.215683935s ago: executing program 33 (id=732): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m2.510478031s ago: executing program 6 (id=748): openat(0xffffffffffffff9c, 0x0, 0x103ec2, 0x100) clock_gettime(0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m0.899812866s ago: executing program 6 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80002006}) 2m59.191419561s ago: executing program 6 (id=757): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000040)=0x10) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m58.149872176s ago: executing program 6 (id=758): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x524, &(0x7f0000000e00)="$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") prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000200)=0x100000001) 2m56.858193536s ago: executing program 6 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 2m50.451429512s ago: executing program 6 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x10, 0x0, '\x00', @d}) syz_open_procfs(0xffffffffffffffff, 0x0) 2m49.29204099s ago: executing program 34 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x10, 0x0, '\x00', @d}) syz_open_procfs(0xffffffffffffffff, 0x0) 29.470850958s ago: executing program 1 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x17}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2, 0x1, 0x3, 0x1}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x0, 0x3d6, &(0x7f00000008c0)="$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") 27.869581832s ago: executing program 1 (id=1130): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000006,codepage=maccyrillic,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303030332c696f636861727365743d69736f383835392d31332c756d61736b3d30303030303030303030303030303030303030303030322c747970653d66dc3f232c66696c655f756d61736b3d30303030303030303030303030303030303030303030322c0072e7f73450b41cf308c9bf38860905ea70d029afec6e48592208ee7008c7e7f4735e3957dfe5cbaabc5bec194446697d9653a22c37678261f080ec3ba09f84ef90a61b4f6429f97203431524575491692c2cb0555d0018444ac46d6719bfa9340ea06b5f7ae53d32b3517dd5c8e9"], 0x4, 0x322, &(0x7f00000009c0)="$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") ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x123, 0x234}, 0x14}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 25.562367986s ago: executing program 1 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 23.287057211s ago: executing program 1 (id=1137): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x800003d, 0x7ff) write$binfmt_script(r3, &(0x7f00000000c0), 0xb) lseek(r3, 0x0, 0x3) 19.149947833s ago: executing program 4 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 14.796458918s ago: executing program 1 (id=1153): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x20800, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r3) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x2000c12, &(0x7f0000000280)=ANY=[@ANYBLOB='hide,check=relaxed,iocharset=macturki00000000000023b3,overriderockperm,map=normal,unhide,hide,iocharset=cp437,iocharset=iso8859-2,unhide,cruft,mode=0x0000000000000008,sbsector=0x0000000000008001,\x00'], 0x4, 0xa27, &(0x7f0000003500)="$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") 11.884218961s ago: executing program 4 (id=1156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9.914111811s ago: executing program 5 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) epoll_create1(0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8044) 9.824580803s ago: executing program 2 (id=1159): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.751104994s ago: executing program 4 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x4000, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 9.570838286s ago: executing program 7 (id=1161): socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.903148681s ago: executing program 5 (id=1162): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 7.801875493s ago: executing program 2 (id=1163): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x104}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 7.752129624s ago: executing program 4 (id=1164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000400)="e8", &(0x7f0000000440)=@tcp6=r1, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 7.726954344s ago: executing program 5 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.697263784s ago: executing program 7 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 7.649270165s ago: executing program 2 (id=1168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0x802c, @mcast1, 0x7}, 0xfffffffffffffe20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 6.488135803s ago: executing program 7 (id=1169): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x6, 0x5, 0x800, 0x401, 'syz0\x00', 0x3}, 0x3, 0x2, 0xb9b9, 0x0, 0x0, 0x401, 'syz0\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') exit(0x5) write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) 6.445275723s ago: executing program 4 (id=1170): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) 5.977431401s ago: executing program 5 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000180)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d31300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) sendmsg$inet6(r3, 0x0, 0x0) 3.191920722s ago: executing program 7 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r3, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8c) accept4(r3, 0x0, 0x0, 0x0) 3.191744892s ago: executing program 2 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) connect$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x2711}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) 3.188519542s ago: executing program 5 (id=1174): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x228100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x4bb, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.608624621s ago: executing program 4 (id=1175): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f6c, &(0x7f0000009080)="$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") 1.756820593s ago: executing program 2 (id=1176): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.751327274s ago: executing program 7 (id=1177): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000140)={[{@debug}, {@errors_remount}, {@quota}, {@errors_remount}, {@minixdf}, {@sb={'sb', 0x3d, 0x9}}]}, 0x1, 0x520, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x100000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831b538dfd8e012e79578e51bc5af65ff7ae735ffc8191a9bb0a83099e90f4580d760551b5b342f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea086e95767d42b4e54861d0227dbfd2e6d28715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c62fd5d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc2200000000000001ff9682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e2331d01ce99a069694124d37cef099ece729aa218f9f44ad06a223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb8fc500404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99ff987900040000009feb121c49e07dbed4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39e00213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd9205218ee0200e2ff08644fb94c06003dc39050f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e906049fe86e09c58e273cd905deb28c13c1ed1c9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f891fab9d3f2e82c5f6fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935000000009c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f281e6bad1e5aa6d901c279eb156c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b4c6936531effce7115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b402bbab76fbb9d8a917df5b2e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380b3e365f84a3e5b116ae3e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627aaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8d5f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c4a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d76ef45af7d87b308117a9ea24dcda2bc42cf20942c31268a400a221d7b1622585094e9dd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a420cc91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc1a170200a63a83ab25a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b47800acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7acb37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c901d99eced99b46b43016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa91811ccd7c1b1a92bac529df90000000000000000000000004000301b5557b674a86db8c4bfd58ff30000000000000000000000e8f1ed2ea68b0569be17bd73c0633ed4acaaef9e9f7d21998f55b71b26af7e284b1cc4685d740a9d106380dd8cb78f9d9c8cf59b155bc569ddd3098417286bec31896306410a60acadb0f3fb44d30b82986b792635155fa3d562d3aa09452cbb201b0dfed6412837bc2237acf7ca5997ee1898541f4a1c4031e240ccc80ee8fad036ce04409c4630821b8b99be5a3f72afc458f8417544014a67ae4ad31b15c8e13c9f0cdee4abefd0ed28a4a55dd992a748008822d05f13b1a8112d7f41e3bf28bcc1b0963798bed4e0db07d0574016276aa28a86eb33d20a5d58f58201edcef1253b02aac4c74427322ec24809bb059c41db9ee1c3e728c76c5ade17df0a7fc74229ea1a525ee42e8eac3675cb18d6c06748e93179c382f331dde2eea7eab2da71c2ea7086c0c71b6e3d837fdfdc1a5285c471b11eb3311a9f7459a57f7174d000000000000000000000000000000000000000000000008c6987f5d91d640fe5d83d4489b382fe3d3e49c23dcee2af69ba44ab575f354ed026cbf37acc05331084088093fa14152ee6d861dc27a69a9a563c0feb8b27fb7d4586b35a6f181793d5b73e231e7a2d1a6f564a06adc348b9a1c1017f908f99e136b04a0d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f065580be0ffff0003ba52c44277fb08061402e000030b62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 1.462316898s ago: executing program 2 (id=1178): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.461606448s ago: executing program 5 (id=1179): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.451207678s ago: executing program 1 (id=1180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000400)="e8", &(0x7f0000000440)=@tcp6=r1, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 0s ago: executing program 7 (id=1181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d3cbca85e30a02db8f48b9eb10526d0c7ade3391d6c844fb8b2fb70ec826465726fb78cc47db9636d337038f016d27c2eb3fa0da403214d11f3b3ea42b8b183e9226665de1fa1c808ad8ea5bf3080b0ad7d12050000001c1428f0e17612738a97fdc8ddffb031b71347213264d4f6972a888ba9fa77efede5bdbaf65fb32eddedeb421fa7f60c35d68372e2c80561588ec11456f5e53b7bdcf72d3e0272f1b22399ec78d37acac485e5375f1b654c70f0a1ae81f5940cddaac3", 0x1fc, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) kernel console output (not intermixed with test programs): dded [ 82.438709][ T4853] smc: adding ib device sz1 with port count 1 [ 82.447604][ T4853] smc: ib device sz1 port 1 has pnetid [ 83.221070][ T4861] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 83.227579][ T4348] lo speed is unknown, defaulting to 1000 [ 83.230102][ T1963] lo speed is unknown, defaulting to 1000 [ 83.232620][ T4853] lo speed is unknown, defaulting to 1000 [ 83.326198][ T4853] lo speed is unknown, defaulting to 1000 [ 83.587705][ T4853] lo speed is unknown, defaulting to 1000 [ 84.738844][ T4305] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 84.880360][ T4881] loop3: detected capacity change from 0 to 512 [ 84.897152][ T4881] EXT4-fs: Ignoring removed i_version option [ 84.922576][ T4881] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.951051][ T4881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.963275][ T4881] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 84.973341][ T4853] lo speed is unknown, defaulting to 1000 [ 84.980682][ T4881] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.984820][ T4881] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 85.009269][ T4881] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.042826][ T4881] EXT4-fs (loop3): Remounting filesystem read-only [ 85.051616][ T4881] EXT4-fs (loop3): 1 truncate cleaned up [ 85.053293][ T4881] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.121635][ T4881] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 85.178065][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 85.199627][ T4853] lo speed is unknown, defaulting to 1000 [ 85.468933][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 85.496831][ T4894] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.499267][ T4894] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.501588][ T4894] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.503909][ T4894] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.511747][ T4894] Zero length message leads to an empty skb [ 87.610372][ T4925] syz.3.161 sent an empty control message without MSG_MORE. [ 87.885425][ T4932] netlink: 'syz.3.163': attribute type 10 has an invalid length. [ 87.980519][ T4932] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.093014][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 88.098670][ T4931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.368778][ T4945] process 'syz.1.167' launched '/dev/fd/3' with NULL argv: empty string added [ 92.315390][ T4978] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 92.322427][ T4978] CIFS mount error: No usable UNC path provided in device string! [ 92.322427][ T4978] [ 92.325294][ T4978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.314185][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 94.324073][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 97.643046][ T5028] loop4: detected capacity change from 0 to 1024 [ 99.509149][ T5041] binder: BINDER_SET_CONTEXT_MGR already set [ 99.510911][ T5041] binder: 5039:5041 ioctl 4018620d 20000040 returned -16 [ 99.522615][ T5041] binder: 5039:5041 got transaction to invalid handle, 1 [ 99.594321][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.596975][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.599387][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.601869][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.604437][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.607106][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.609299][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.611565][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.614089][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.616528][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 100.119115][ T5041] binder: 5041:5039 cannot find target node [ 100.130644][ T5041] binder: 5039:5041 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3054 [ 100.141334][ T5053] binder: 5039:5053 got reply transaction with no transaction stack [ 100.151240][ T5053] binder: 5039:5053 transaction reply to 0:0 failed 4/29201/-71, size 0-0 line 2955 [ 100.173508][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.916915][ T5062] loop4: detected capacity change from 0 to 2048 [ 100.921165][ T5062] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 101.149360][ T5062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.857170][ T5068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.881856][ T5065] loop3: detected capacity change from 0 to 256 [ 101.907771][ T5068] loop0: detected capacity change from 0 to 1024 [ 101.942433][ T5068] JBD2: no valid journal superblock found [ 101.944023][ T5068] EXT4-fs (loop0): error loading journal [ 102.726216][ T4305] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 102.728752][ T4305] Bluetooth: hci4: Injecting HCI hardware error event [ 102.731914][ T4305] Bluetooth: hci4: hardware error 0x00 [ 102.787419][ T5065] FAT-fs (loop3): Directory bread(block 64) failed [ 102.789524][ T5065] FAT-fs (loop3): Directory bread(block 65) failed [ 102.791432][ T5065] FAT-fs (loop3): Directory bread(block 66) failed [ 102.793224][ T5065] FAT-fs (loop3): Directory bread(block 67) failed [ 102.843682][ T5065] FAT-fs (loop3): Directory bread(block 68) failed [ 102.846874][ T5065] FAT-fs (loop3): Directory bread(block 69) failed [ 102.848687][ T5065] FAT-fs (loop3): Directory bread(block 70) failed [ 102.850448][ T5065] FAT-fs (loop3): Directory bread(block 71) failed [ 102.861136][ T5065] FAT-fs (loop3): Directory bread(block 72) failed [ 102.871865][ T5065] FAT-fs (loop3): Directory bread(block 73) failed [ 104.579673][ T5091] loop0: detected capacity change from 0 to 256 [ 104.814174][ T5091] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.817522][ T5091] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 104.877138][ T5091] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.449511][ T5094] loop3: detected capacity change from 0 to 8 [ 105.499206][ T5096] loop4: detected capacity change from 0 to 8 [ 105.529396][ T5096] SQUASHFS error: zlib decompression failed, data probably corrupt [ 105.531722][ T5096] SQUASHFS error: Failed to read block 0x9b: -5 [ 105.533435][ T5096] SQUASHFS error: Unable to read metadata cache entry [99] [ 105.534258][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.545628][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.555854][ T5096] SQUASHFS error: Unable to read inode 0x127 [ 105.756150][ T5094] SQUASHFS error: Unable to read directory block [629:2b] [ 106.561166][ T4305] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 112.606305][ T5127] loop0: detected capacity change from 0 to 131072 [ 112.729561][ T5127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.770942][ T5127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.889380][ T5153] overlayfs: failed to clone upperpath [ 114.264861][ T5167] loop4: detected capacity change from 0 to 512 [ 115.116679][ T5167] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 115.121098][ T5167] EXT4-fs (loop4): 1 truncate cleaned up [ 115.122624][ T5167] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.130002][ T5170] loop3: detected capacity change from 0 to 1024 [ 115.172224][ T5170] EXT4-fs: inline encryption not supported [ 115.174036][ T5170] EXT4-fs: Ignoring removed bh option [ 115.255070][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.390704][ T5185] binder: 5184:5185 tried to acquire reference to desc 0, got 1 instead [ 115.410420][ T5185] binder: 5184:5185 got new transaction with bad transaction stack, transaction 9 has target 5184:0 [ 115.488801][ T5185] binder: 5184:5185 transaction call to 5184:0 failed 10/29201/-71, size 0-48 line 3114 [ 115.524696][ T14] binder: release 5184:5185 transaction 9 out, still active [ 115.527305][ T14] binder: undelivered TRANSACTION_COMPLETE [ 115.529253][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.686097][ T14] binder: send failed reply for transaction 9, target dead [ 115.879405][ T5251] __nla_validate_parse: 43 callbacks suppressed [ 115.879419][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 115.883389][ T5251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 115.963150][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 116.061928][ T5271] loop0: detected capacity change from 0 to 2048 [ 116.248717][ T5280] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 116.306000][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 116.410151][ T5278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.414614][ T5281] sch_tbf: burst 9987 is lower than device lo mtu (65550) ! [ 116.529993][ T5278] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 116.536743][ T5278] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 116.552500][ T5278] Remounting filesystem read-only [ 118.169045][ T5301] fuse: Bad value for 'fd' [ 118.223509][ T5301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 118.393397][ T5308] binder: 5307:5308 tried to acquire reference to desc 0, got 1 instead [ 118.396732][ T5308] binder: 5307:5308 got new transaction with bad transaction stack, transaction 15 has target 5307:0 [ 118.399887][ T5308] binder: 5307:5308 transaction call to 5307:0 failed 16/29201/-71, size 0-48 line 3114 [ 118.403551][ T4307] binder: release 5307:5308 transaction 15 out, still active [ 118.405930][ T4307] binder: undelivered TRANSACTION_COMPLETE [ 118.407528][ T4307] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.671789][ T4355] binder: send failed reply for transaction 15, target dead [ 119.661645][ T5318] binder: 5317:5318 tried to acquire reference to desc 0, got 1 instead [ 119.666558][ T5318] binder: 5317:5318 got reply transaction with bad transaction stack, transaction 21 has target 5317:0 [ 120.611478][ T5318] binder: 5317:5318 transaction reply to 0:0 failed 22/29201/-71, size 0-0 line 2970 [ 121.251128][ T14] binder: release 5317:5318 transaction 21 out, still active [ 121.253201][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.360133][ T14] binder: send failed reply for transaction 21, target dead [ 122.685272][ T5332] loop3: detected capacity change from 0 to 131072 [ 122.815377][ T5332] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.842071][ T5332] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.951784][ T5350] CIFS mount error: No usable UNC path provided in device string! [ 122.951784][ T5350] [ 122.954649][ T5350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.633477][ T5349] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 123.705425][ T5351] netlink: 'syz.4.262': attribute type 10 has an invalid length. [ 123.870241][ T5351] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.886384][ T5349] sch_tbf: burst 9987 is lower than device lo mtu (65550) ! [ 124.757113][ T5348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.022988][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.024754][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.190274][ T5355] loop0: detected capacity change from 0 to 32768 [ 126.256838][ T5355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.276 (5355) [ 126.496849][ T5355] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.499721][ T5355] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 126.502111][ T5355] BTRFS info (device loop0): setting nodatacow, compression disabled [ 126.504262][ T5355] BTRFS info (device loop0): max_inline at 0 [ 126.513093][ T5355] BTRFS info (device loop0): enabling disk space caching [ 127.265679][ T5355] BTRFS info (device loop0): turning off barriers [ 127.267586][ T5355] BTRFS info (device loop0): turning on flush-on-commit [ 127.269578][ T5355] BTRFS info (device loop0): doing ref verification [ 127.271399][ T5355] BTRFS info (device loop0): force clearing of disk cache [ 127.273355][ T5355] BTRFS info (device loop0): enabling ssd optimizations [ 127.275239][ T5355] BTRFS info (device loop0): max_inline at 4096 [ 127.276980][ T5355] BTRFS info (device loop0): disk space caching is enabled [ 127.520370][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.520547][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.520706][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.520752][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.520886][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.521032][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.521176][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.521304][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.521433][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 127.521537][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 128.543058][ T5355] BTRFS error (device loop0): open_ctree failed: -12 [ 128.759299][ T5415] loop4: detected capacity change from 0 to 256 [ 129.865182][ T5428] CIFS mount error: No usable UNC path provided in device string! [ 129.865182][ T5428] [ 129.867918][ T5428] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.124881][ T4288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4288) [ 130.191918][ T5415] FAT-fs (loop4): Directory bread(block 64) failed [ 130.193759][ T5415] FAT-fs (loop4): Directory bread(block 65) failed [ 130.199036][ T5415] FAT-fs (loop4): Directory bread(block 66) failed [ 130.200840][ T5415] FAT-fs (loop4): Directory bread(block 67) failed [ 130.202586][ T5415] FAT-fs (loop4): Directory bread(block 68) failed [ 130.204280][ T5415] FAT-fs (loop4): Directory bread(block 69) failed [ 130.245674][ T5415] FAT-fs (loop4): Directory bread(block 70) failed [ 130.247501][ T5415] FAT-fs (loop4): Directory bread(block 71) failed [ 130.249239][ T5415] FAT-fs (loop4): Directory bread(block 72) failed [ 130.250935][ T5415] FAT-fs (loop4): Directory bread(block 73) failed [ 130.412329][ T4305] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 130.415187][ T4305] CPU: 1 PID: 4305 Comm: kworker/u5:4 Not tainted 6.1.141-syzkaller #0 [ 130.417355][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.419995][ T4305] Workqueue: hci3 hci_rx_work [ 130.421196][ T4305] Call trace: [ 130.422048][ T4305] dump_backtrace+0x1c8/0x1f4 [ 130.423277][ T4305] show_stack+0x2c/0x3c [ 130.424367][ T4305] __dump_stack+0x30/0x40 [ 130.425508][ T4305] dump_stack_lvl+0xf8/0x160 [ 130.426693][ T4305] dump_stack+0x1c/0x5c [ 130.427772][ T4305] sysfs_create_dir_ns+0x22c/0x24c [ 130.429148][ T4305] kobject_add_internal+0x5a8/0xb30 [ 130.430528][ T4305] kobject_add+0x134/0x1f8 [ 130.431708][ T4305] device_add+0x3f0/0xf94 [ 130.432852][ T4305] hci_conn_add_sysfs+0xbc/0x1cc [ 130.434161][ T4305] le_conn_complete_evt+0xa24/0xf8c [ 130.435534][ T4305] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 130.437093][ T4305] hci_le_meta_evt+0x2c0/0x4a4 [ 130.438320][ T4305] hci_event_packet+0x6ac/0xf08 [ 130.439620][ T4305] hci_rx_work+0x324/0xaa0 [ 130.440766][ T4305] process_one_work+0x7f4/0x13a8 [ 130.442081][ T4305] worker_thread+0x8c8/0xfbc [ 130.443307][ T4305] kthread+0x250/0x2d8 [ 130.444372][ T4305] ret_from_fork+0x10/0x20 [ 130.445715][ T4305] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.449126][ T4305] Bluetooth: hci3: failed to register connection device [ 131.511021][ T5439] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 132.828197][ T5443] sch_tbf: burst 9987 is lower than device lo mtu (65550) ! [ 132.902267][ T5454] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 132.923788][ T5453] binder: 5452:5453 tried to acquire reference to desc 0, got 1 instead [ 133.875785][ T5453] binder: 5452:5453 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 133.879426][ T5453] binder: 5453 RLIMIT_NICE not set [ 133.880900][ T5453] binder: 5453 RLIMIT_NICE not set [ 133.884103][ T5453] binder: 5453 RLIMIT_NICE not set [ 133.893758][ T5453] binder_alloc: 5452: binder_alloc_buf, no vma [ 133.908125][ T5451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.921061][ T5453] binder: cannot allocate buffer: vma cleared, target dead or dying [ 133.921095][ T5453] binder: 5452:5453 transaction reply to 5452:5453 failed 28/29189/-3, size 0-0 line 3239 [ 133.941326][ T5453] binder: send failed reply for transaction 27 to 5452:5453 [ 133.950858][ T4349] binder: undelivered TRANSACTION_COMPLETE [ 133.952491][ T4349] binder: undelivered TRANSACTION_ERROR: 29189 [ 133.981779][ T4349] binder: undelivered TRANSACTION_ERROR: 29190 [ 134.677573][ T5472] CIFS mount error: No usable UNC path provided in device string! [ 134.677573][ T5472] [ 134.680421][ T5472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.194902][ T5454] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.205831][ T5461] __nla_validate_parse: 44 callbacks suppressed [ 135.205845][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.209903][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.212185][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.214527][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.216914][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.219146][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.221475][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.223768][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.226449][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.228880][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 139.484833][ T5510] binder: 5509:5510 tried to acquire reference to desc 0, got 1 instead [ 139.491627][ T5510] binder: 5509:5510 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.505805][ T5510] binder: 5510 RLIMIT_NICE not set [ 139.507202][ T5510] binder: 5510 RLIMIT_NICE not set [ 139.512985][ T5510] binder: 5510 RLIMIT_NICE not set [ 139.514420][ T5510] binder_alloc: 5509: binder_alloc_buf, no vma [ 139.523177][ T5516] loop0: detected capacity change from 0 to 128 [ 139.526224][ T5510] binder: cannot allocate buffer: vma cleared, target dead or dying [ 139.526252][ T5510] binder: 5509:5510 transaction reply to 5509:5510 failed 34/29189/-3, size 0-0 line 3239 [ 139.547084][ T5510] binder: send failed reply for transaction 33 to 5509:5510 [ 139.819894][ T5516] FAT-fs (loop0): bogus logical sector size 0 [ 139.868708][ T5516] FAT-fs (loop0): Can't find a valid FAT filesystem [ 139.874153][ T4307] binder: undelivered TRANSACTION_COMPLETE [ 139.885160][ T4307] binder: undelivered TRANSACTION_ERROR: 29189 [ 140.280604][ T4346] binder: undelivered TRANSACTION_ERROR: 29190 [ 140.300364][ T5517] device syz_tun entered promiscuous mode [ 140.301932][ T5517] device vlan2 entered promiscuous mode [ 141.662731][ T5535] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 141.881852][ T5535] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.783939][ T5534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.814507][ T5559] loop0: detected capacity change from 0 to 128 [ 145.162358][ T5540] bridge0: port 3(vlan2) entered blocking state [ 145.164197][ T5540] bridge0: port 3(vlan2) entered disabled state [ 145.177928][ T5540] device vlan2 entered promiscuous mode [ 145.179447][ T5540] device bond0 entered promiscuous mode [ 145.180918][ T5540] device bond_slave_0 entered promiscuous mode [ 145.182600][ T5540] device bond_slave_1 entered promiscuous mode [ 145.184309][ T5540] device wlan1 entered promiscuous mode [ 145.216330][ T5247] bio_check_eod: 2674 callbacks suppressed [ 145.216342][ T5247] kworker/u4:26: attempt to access beyond end of device [ 145.216342][ T5247] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 145.440093][ T5572] binder: 5571:5572 tried to acquire reference to desc 0, got 1 instead [ 145.443512][ T5572] binder: 5571:5572 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.447125][ T5572] binder: 5572 RLIMIT_NICE not set [ 145.448501][ T5572] binder: 5572 RLIMIT_NICE not set [ 145.450427][ T5572] binder: 5572 RLIMIT_NICE not set [ 145.451922][ T5572] binder_alloc: 5571: binder_alloc_buf, no vma [ 145.453625][ T5572] binder: cannot allocate buffer: vma cleared, target dead or dying [ 145.453654][ T5572] binder: 5571:5572 transaction reply to 5571:5572 failed 40/29189/-3, size 0-0 line 3239 [ 145.463255][ T5572] binder: send failed reply for transaction 39 to 5571:5572 [ 145.471447][ T4348] binder: undelivered TRANSACTION_COMPLETE [ 145.473056][ T4348] binder: undelivered TRANSACTION_ERROR: 29189 [ 145.512961][ T4346] binder: undelivered TRANSACTION_ERROR: 29190 [ 148.010083][ T5600] binder: 5599:5600 tried to acquire reference to desc 0, got 1 instead [ 148.052529][ T5602] loop4: detected capacity change from 0 to 8 [ 148.176645][ T5401] binder: undelivered TRANSACTION_COMPLETE [ 148.178286][ T5401] binder: undelivered TRANSACTION_COMPLETE [ 148.916720][ T5401] binder: undelivered transaction 46, process died. [ 148.918615][ T5401] binder: undelivered transaction 45, process died. [ 150.571867][ T5615] ptrace attach of "./syz-executor exec"[4302] was attempted by ""[5615] [ 150.620923][ T5618] trusted_key: encrypted_key: insufficient parameters specified [ 150.631077][ T5619] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 152.200112][ T5619] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.408021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 154.026623][ T5663] Invalid option length (1047307) for dns_resolver key [ 155.603698][ T5691] __nla_validate_parse: 43 callbacks suppressed [ 155.603712][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 155.610932][ T5691] netlink: 48 bytes leftover after parsing attributes in process `syz.4.357'. [ 155.719577][ T5697] loop0: detected capacity change from 0 to 256 [ 155.793206][ T5697] FAT-fs (loop0): Directory bread(block 64) failed [ 155.802470][ T5697] FAT-fs (loop0): Directory bread(block 65) failed [ 155.804289][ T5697] FAT-fs (loop0): Directory bread(block 66) failed [ 155.816937][ T5697] FAT-fs (loop0): Directory bread(block 67) failed [ 155.818739][ T5697] FAT-fs (loop0): Directory bread(block 68) failed [ 155.837204][ T5697] FAT-fs (loop0): Directory bread(block 69) failed [ 155.843688][ T5697] FAT-fs (loop0): Directory bread(block 70) failed [ 155.852828][ T5697] FAT-fs (loop0): Directory bread(block 71) failed [ 155.854622][ T5697] FAT-fs (loop0): Directory bread(block 72) failed [ 155.865027][ T5697] FAT-fs (loop0): Directory bread(block 73) failed [ 156.036213][ T5709] loop3: detected capacity change from 0 to 512 [ 156.053237][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 156.074413][ T5711] netlink: 'syz.2.364': attribute type 5 has an invalid length. [ 156.187205][ T5711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 157.050406][ T5709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.142102][ T5711] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 157.159943][ T5711] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 157.162220][ T5711] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 157.164465][ T5711] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 157.220547][ T5709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.223919][ T5711] device geneve2 entered promiscuous mode [ 157.434006][ T5726] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.300892][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 158.321241][ T5726] netlink: 136 bytes leftover after parsing attributes in process `syz.2.367'. [ 159.398380][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 159.640953][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 159.714977][ T5750] bridge1: port 1(ip6gretap1) entered blocking state [ 159.723253][ T5750] bridge1: port 1(ip6gretap1) entered disabled state [ 159.726191][ T5750] device ip6gretap1 entered promiscuous mode [ 159.765794][ T5750] device veth3 entered promiscuous mode [ 159.767524][ T5750] bridge1: port 2(veth3) entered blocking state [ 159.769708][ T5750] bridge1: port 2(veth3) entered disabled state [ 160.731122][ T5764] fuse: Unknown parameter 'fd18446744073709551615' [ 160.821186][ T27] audit: type=1326 audit(160.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 160.847723][ T27] audit: type=1326 audit(160.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 160.853289][ T27] audit: type=1326 audit(160.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.188583][ T27] audit: type=1326 audit(160.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.452013][ T27] audit: type=1326 audit(160.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.610238][ T27] audit: type=1326 audit(160.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.650079][ T27] audit: type=1326 audit(160.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.659422][ T27] audit: type=1326 audit(160.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.665152][ T27] audit: type=1326 audit(160.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 161.671054][ T27] audit: type=1326 audit(160.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b5a8a8 code=0x7ffc0000 [ 163.136194][ T5778] loop3: detected capacity change from 0 to 256 [ 163.159093][ T5778] exfat: Bad value for 'uid' [ 163.395398][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.671211][ T5766] loop4: detected capacity change from 0 to 1024 [ 163.679918][ T5766] ext3: Unknown parameter 'subj_user' [ 164.378042][ T5805] loop4: detected capacity change from 0 to 256 [ 164.567990][ T5805] FAT-fs (loop4): Directory bread(block 64) failed [ 164.570056][ T5805] FAT-fs (loop4): Directory bread(block 65) failed [ 164.572398][ T5805] FAT-fs (loop4): Directory bread(block 66) failed [ 164.574365][ T5805] FAT-fs (loop4): Directory bread(block 67) failed [ 164.576643][ T5805] FAT-fs (loop4): Directory bread(block 68) failed [ 164.578630][ T5805] FAT-fs (loop4): Directory bread(block 69) failed [ 164.580972][ T5805] FAT-fs (loop4): Directory bread(block 70) failed [ 164.582805][ T5805] FAT-fs (loop4): Directory bread(block 71) failed [ 164.584962][ T5805] FAT-fs (loop4): Directory bread(block 72) failed [ 164.586840][ T5805] FAT-fs (loop4): Directory bread(block 73) failed [ 165.135361][ T5811] loop0: detected capacity change from 0 to 1024 [ 165.139915][ T5811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.202867][ T5811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.162399][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 167.603908][ T5841] binder: 5839:5841 tried to acquire reference to desc 0, got 1 instead [ 167.610440][ T5841] binder: 5839:5841 ioctl c0306201 20000280 returned -14 [ 167.635380][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 167.636949][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 167.651499][ T5846] loop4: detected capacity change from 0 to 512 [ 167.712569][ T4347] binder: undelivered transaction 52, process died. [ 167.714216][ T4347] binder: undelivered transaction 51, process died. [ 167.737967][ T5846] EXT2-fs (loop4): error: revision level too high, forcing read-only mode [ 167.740263][ T5846] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 170.012684][ T5861] xt_nat: multiple ranges no longer supported [ 172.084677][ T5883] binder: 5881:5883 tried to acquire reference to desc 0, got 1 instead [ 172.088808][ T5883] binder: release 5881:5883 transaction 57 out, still active [ 172.138765][ T5883] binder: undelivered TRANSACTION_COMPLETE [ 172.314153][ T5880] loop0: detected capacity change from 0 to 32768 [ 172.372229][ T5880] XFS (loop0): Mounting V5 Filesystem [ 173.155195][ T24] binder: send failed reply for transaction 57, target dead [ 173.189097][ T5880] XFS (loop0): Ending clean mount [ 173.262233][ T5880] XFS (loop0): Quotacheck needed: Please wait. [ 174.285482][ T5880] XFS (loop0): Quotacheck: Done. [ 174.546405][ T4304] XFS (loop0): Unmounting Filesystem [ 178.232766][ T5941] device gtp0 entered promiscuous mode [ 179.747238][ T5957] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 179.847499][ T5958] batman_adv: batadv0: Adding interface: ip6gretap1 [ 179.849368][ T5958] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.907010][ T5958] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 179.922523][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.924553][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.956666][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.958740][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.141458][ T5958] batman_adv: batadv0: Removing interface: ip6gretap1 [ 182.779848][ T5992] loop3: detected capacity change from 0 to 1024 [ 182.795651][ T5992] EXT4-fs: Ignoring removed nobh option [ 182.797270][ T5992] EXT4-fs: Ignoring removed bh option [ 182.809051][ T5992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.863994][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 182.920390][ T5992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.416851][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 185.490403][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 187.022192][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 187.024618][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 187.670048][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.671872][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.693049][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 189.703290][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.461'. [ 193.074771][ T6080] loop3: detected capacity change from 0 to 32768 [ 193.250061][ T6080] XFS (loop3): Mounting V5 Filesystem [ 193.598982][ T6080] XFS (loop3): Ending clean mount [ 194.111656][ T6080] XFS (loop3): Quotacheck needed: Please wait. [ 194.163511][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 194.166043][ T6080] XFS (loop3): Quotacheck: Done. [ 194.184995][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.476'. [ 195.196249][ T4297] XFS (loop3): Unmounting Filesystem [ 195.236458][ T6095] loop0: detected capacity change from 0 to 32768 [ 196.326136][ T6135] MPTCP: kernel_bind error, err=-98 [ 199.021052][ T6168] loop3: detected capacity change from 0 to 2048 [ 199.026113][ T6168] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 199.885944][ T6168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.431222][ T6204] infiniband syz1: set active [ 202.432808][ T6204] infiniband syz1: added syz_tun [ 203.181587][ T6204] RDS/IB: syz1: added [ 203.182746][ T6204] smc: adding ib device syz1 with port count 1 [ 203.184369][ T6204] smc: ib device syz1 port 1 has pnetid [ 205.908011][ T6218] loop4: detected capacity change from 0 to 262144 [ 206.482350][ T6218] F2FS-fs (loop4): invalid crc value [ 206.483915][ T6218] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 206.946136][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.954394][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.999293][ T6238] loop3: detected capacity change from 0 to 512 [ 207.018566][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.183257][ T6247] loop0: detected capacity change from 0 to 2048 [ 207.186037][ T6247] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 208.002949][ T6247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.671431][ T6257] loop4: detected capacity change from 0 to 8 [ 208.873031][ T6257] SQUASHFS error: Failed to read block 0x4e8: -5 [ 208.875293][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.877273][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.879242][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.881261][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.883248][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.885230][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.887184][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.889183][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.891139][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.893156][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.895249][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.897280][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.899262][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.901313][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.903367][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.905089][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.907232][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.909164][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.911202][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.913152][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.915534][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.917502][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.919587][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.921605][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.923720][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.925759][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.927953][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.930012][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.932157][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.934159][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 208.936333][ T6257] SQUASHFS error: Failed to read block 0x4de: -5 [ 209.167729][ T6238] __quota_error: 4 callbacks suppressed [ 209.167742][ T6238] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 209.302905][ T6238] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.497445][ T6256] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 211.400147][ T6256] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 211.405936][ T6256] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 212.351617][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 212.565383][ T6286] binder: 6282:6286 tried to acquire reference to desc 0, got 1 instead [ 212.580182][ T6286] binder: 6282:6286 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 212.583663][ T6286] binder: 6286 RLIMIT_NICE not set [ 212.593613][ T6286] binder: 6286 RLIMIT_NICE not set [ 212.605341][ T7] binder: release 6282:6286 transaction 62 out, still active [ 212.607280][ T7] binder: undelivered TRANSACTION_COMPLETE [ 212.680693][ T7] binder: release 6282:6286 transaction 62 in, still active [ 212.682861][ T7] binder: send failed reply for transaction 62, target dead [ 213.917025][ T6304] loop3: detected capacity change from 0 to 1024 [ 213.922890][ T6304] EXT4-fs: Ignoring removed orlov option [ 213.973258][ T6304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.012698][ T6309] tipc: Started in network mode [ 214.014170][ T6309] tipc: Node identity ac1414aa, cluster identity 4711 [ 214.043936][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 214.057730][ T6309] tipc: Enabled bearer , priority 10 [ 214.101481][ T6309] tipc: Enabled bearer , priority 0 [ 215.499584][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.535'. [ 215.792050][ T6325] tipc: Started in network mode [ 215.800305][ T6325] tipc: Node identity 080211000001, cluster identity 4711 [ 215.811282][ T6325] tipc: Enabled bearer , priority 0 [ 215.824838][ T6325] device syzkaller0 entered promiscuous mode [ 215.853302][ T6325] tipc: Resetting bearer [ 215.918687][ T111] tipc: Node number set to 2886997162 [ 217.606726][ T7] tipc: Node number set to 134418688 [ 220.338110][ T6369] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 221.228888][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 221.307262][ T6374] loop3: detected capacity change from 0 to 8192 [ 221.514642][ T6385] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 221.526317][ T6385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.369170][ T6385] bond1: (slave gretap1): making interface the new active one [ 222.382310][ T6385] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 222.384862][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 222.714055][ T6397] netlink: 165 bytes leftover after parsing attributes in process `syz.3.555'. [ 224.458242][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 227.767997][ T6449] loop3: detected capacity change from 0 to 1764 [ 229.500688][ T6458] device syzkaller0 entered promiscuous mode [ 229.504737][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 229.641039][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.579'. [ 229.647052][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 231.221527][ T6465] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 231.249727][ T6465] bridge0: port 3(team0) entered blocking state [ 231.254454][ T6465] bridge0: port 3(team0) entered disabled state [ 231.294652][ T6465] device team0 entered promiscuous mode [ 231.300387][ T6465] device team_slave_0 entered promiscuous mode [ 231.302354][ T6465] device team_slave_1 entered promiscuous mode [ 231.326985][ T6465] bridge0: port 3(team0) entered blocking state [ 231.329050][ T6465] bridge0: port 3(team0) entered forwarding state [ 231.398716][ T6476] loop0: detected capacity change from 0 to 4096 [ 231.600378][ T6476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.645141][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.061952][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 234.588792][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 234.974673][ C0] vcan0: j1939_session_tx_dat: 0x0000000053fb5879: queue data error: -100 [ 234.977152][ C0] vcan0: j1939_tp_rxtimer: 0x000000001d6aacbd: rx timeout, send abort [ 234.980793][ C0] vcan0: j1939_tp_rxtimer: 0x0000000053fb5879: rx timeout, send abort [ 239.817871][ T27] audit: type=1326 audit(495.787:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.607" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf5a8a8 code=0x0 [ 240.509593][ T6580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.511977][ T6580] IPv6: NLM_F_CREATE should be set when creating new route [ 241.434679][ T6586] rdma_rxe: rxe_register_device failed with error -23 [ 241.443761][ T6586] rdma_rxe: failed to add syz_tun [ 241.674483][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'. [ 241.882621][ T6599] loop3: detected capacity change from 0 to 128 [ 242.755706][ T6599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 242.930605][ T6605] loop0: detected capacity change from 0 to 256 [ 242.992659][ T6597] fscrypt: Error allocating hmac(sha512): -2 [ 243.350814][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 243.576440][ T6615] binder: 6614:6615 tried to acquire reference to desc 0, got 1 instead [ 243.594059][ T6615] binder_alloc: 6614: pid 6614 spamming oneway? 2 buffers allocated for a total size of 5120 [ 243.641588][ T6615] binder_alloc: 6614: pid 6614 spamming oneway? 3 buffers allocated for a total size of 5128 [ 243.650362][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 243.652097][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 243.653712][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 243.843076][ T4347] binder: undelivered transaction 68, process died. [ 243.845015][ T4347] binder: undelivered transaction 69, process died. [ 243.846850][ T4347] binder: undelivered transaction 67, process died. [ 245.730217][ T6636] loop0: detected capacity change from 0 to 256 [ 246.625135][ T6643] netlink: 'syz.2.628': attribute type 4 has an invalid length. [ 249.257439][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.259228][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.386691][ T27] audit: type=1326 audit(505.237:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.633" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf5a8a8 code=0x0 [ 249.396113][ T6665] xt_bpf: check failed: parse error [ 255.143311][ T6709] netlink: 165 bytes leftover after parsing attributes in process `syz.2.643'. [ 255.823175][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 255.842926][ T6721] device team0 left promiscuous mode [ 255.849253][ T6721] device team_slave_0 left promiscuous mode [ 255.850989][ T6721] device team_slave_1 left promiscuous mode [ 255.854184][ T6721] bridge0: port 3(team0) entered disabled state [ 256.528905][ T6721] device bridge_slave_1 left promiscuous mode [ 256.530838][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.606612][ T6721] device bridge_slave_0 left promiscuous mode [ 256.608574][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.327185][ T27] audit: type=1326 audit(515.727:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.2.656" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd5a8a8 code=0x0 [ 263.159390][ T6769] netlink: 165 bytes leftover after parsing attributes in process `syz.1.662'. [ 263.201252][ T6773] loop4: detected capacity change from 0 to 1024 [ 264.055641][ T6773] EXT4-fs: Ignoring removed orlov option [ 264.134212][ T6773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.283654][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 270.914818][ T27] audit: type=1326 audit(526.507:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.1.673" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x0 [ 271.844678][ T6832] loop0: detected capacity change from 0 to 512 [ 271.945209][ T6837] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 275.367178][ T6832] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 275.500732][ T6837] netlink: 136 bytes leftover after parsing attributes in process `syz.3.676'. [ 277.749108][ T6855] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 277.754365][ T6855] netlink: 136 bytes leftover after parsing attributes in process `syz.0.692'. [ 278.527327][ T6876] tipc: Started in network mode [ 278.528790][ T6876] tipc: Node identity 080211000001, cluster identity 4711 [ 278.530951][ T6876] tipc: Enabled bearer , priority 0 [ 278.534492][ T6876] device syzkaller0 entered promiscuous mode [ 278.560777][ T6876] tipc: Resetting bearer [ 279.476699][ T6878] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 279.561571][ T6878] infiniband sz1: set down [ 279.588089][ T7] lo speed is unknown, defaulting to 1000 [ 279.590046][ T7] lo speed is unknown, defaulting to 1000 [ 279.606289][ T111] tipc: Node number set to 134418688 [ 281.360495][ T6893] loop4: detected capacity change from 0 to 4096 [ 281.460863][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.807261][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 284.905877][ T6921] loop0: detected capacity change from 0 to 256 [ 285.073003][ T6921] FAT-fs (loop0): Directory bread(block 64) failed [ 285.075095][ T6921] FAT-fs (loop0): Directory bread(block 65) failed [ 285.077337][ T6921] FAT-fs (loop0): Directory bread(block 66) failed [ 285.079281][ T6921] FAT-fs (loop0): Directory bread(block 67) failed [ 285.081566][ T6921] FAT-fs (loop0): Directory bread(block 68) failed [ 285.083520][ T6921] FAT-fs (loop0): Directory bread(block 69) failed [ 285.085773][ T6921] FAT-fs (loop0): Directory bread(block 70) failed [ 285.087650][ T6921] FAT-fs (loop0): Directory bread(block 71) failed [ 285.090008][ T6921] FAT-fs (loop0): Directory bread(block 72) failed [ 285.091885][ T6921] FAT-fs (loop0): Directory bread(block 73) failed [ 285.621064][ T6924] tipc: Enabled bearer , priority 0 [ 285.738318][ T6924] tipc: Resetting bearer [ 288.344338][ T6942] netlink: 'syz.3.706': attribute type 4 has an invalid length. [ 290.342153][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.893413][ T6978] loop4: detected capacity change from 0 to 128 [ 291.202179][ T6978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.905289][ T6978] fscrypt: Error allocating hmac(sha512): -2 [ 292.056085][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 292.226074][ T6994] device syz_tun entered promiscuous mode [ 292.227774][ T6994] device vlan2 entered promiscuous mode [ 292.338811][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 292.341354][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 293.749058][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.757141][ T7012] netlink: 'syz.1.727': attribute type 4 has an invalid length. [ 293.778123][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.780700][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.783702][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.787074][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.790108][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.165972][ T4315] Bluetooth: hci1: command 0x0409 tx timeout [ 296.395455][ T7013] lo speed is unknown, defaulting to 1000 [ 296.536097][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.560092][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.563346][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.577423][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.587309][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.589472][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.821408][ T7047] MPTCP: kernel_bind error, err=-98 [ 298.665126][ T4315] Bluetooth: hci1: command 0x041b tx timeout [ 298.668314][ T4315] Bluetooth: hci3: command 0x0409 tx timeout [ 299.277885][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 299.396952][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 299.433342][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.440115][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.442794][ T7013] device bridge_slave_0 entered promiscuous mode [ 299.489148][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.491163][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.515956][ T7013] device bridge_slave_1 entered promiscuous mode [ 299.539732][ T7036] lo speed is unknown, defaulting to 1000 [ 299.554878][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.560861][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.586323][ T7013] team0: Port device team_slave_0 added [ 299.589676][ T7013] team0: Port device team_slave_1 added [ 299.601990][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.603977][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.611352][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.504021][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.528762][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.541111][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.834995][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 300.836753][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 300.868291][ T7013] device hsr_slave_0 entered promiscuous mode [ 300.915476][ T7013] device hsr_slave_1 entered promiscuous mode [ 300.945112][ T7013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.947221][ T7013] Cannot create hsr debugfs directory [ 301.076644][ T7013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.119076][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 301.122800][ T7013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.157345][ T7013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.208412][ T7013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.293299][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.301036][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.303622][ T7036] device bridge_slave_0 entered promiscuous mode [ 301.309855][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.311821][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.314300][ T7036] device bridge_slave_1 entered promiscuous mode [ 301.329474][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.334328][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.351529][ T7036] team0: Port device team_slave_0 added [ 301.357258][ T7036] team0: Port device team_slave_1 added [ 301.381470][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.383367][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.391041][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.396208][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.398054][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.404846][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.467471][ T7036] device hsr_slave_0 entered promiscuous mode [ 301.515381][ T7036] device hsr_slave_1 entered promiscuous mode [ 301.565147][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.567310][ T7036] Cannot create hsr debugfs directory [ 301.644748][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.669079][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.679088][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.681677][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.698576][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.701349][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.703921][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.705951][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.708327][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.710923][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.713350][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.715225][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.717665][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.734638][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.737657][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.740511][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.744755][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.753796][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.757963][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.760771][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.763782][ T7036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.819716][ T7036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 301.859899][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.862572][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.865890][ T7036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 301.906752][ T7036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.953446][ T7013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.956930][ T7013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.961704][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.964896][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.010936][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.038392][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.040901][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.044699][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.057730][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.060437][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.063258][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.065264][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.082253][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.084877][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.088093][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.090568][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.092456][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.094734][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.098969][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.111289][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.118111][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.123879][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.127160][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.129813][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.137182][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.139289][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.141253][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.143786][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.151341][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.154234][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.163255][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.167600][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.302155][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.304285][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.311465][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.321838][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.324633][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.350544][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.353323][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.361652][ T7013] device veth0_vlan entered promiscuous mode [ 302.364030][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.367369][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.375726][ T7013] device veth1_vlan entered promiscuous mode [ 302.388920][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.391510][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.394063][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.403445][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.409334][ T7013] device veth0_macvtap entered promiscuous mode [ 302.413489][ T7013] device veth1_macvtap entered promiscuous mode [ 302.423474][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.429748][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.432363][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.440150][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.442791][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.445992][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.449621][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.453023][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.457214][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.459773][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.462448][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.467480][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.470341][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.472940][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.476986][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.479715][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.482487][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.485753][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.488502][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.493175][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.496745][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.499662][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.503399][ T7013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.506210][ T7013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.508566][ T7013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.510778][ T7013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.570082][ T5233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.572482][ T5233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.580003][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.604860][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.608944][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.616029][ T5265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.618932][ T5265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.630401][ T7036] device veth0_vlan entered promiscuous mode [ 302.632702][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.636510][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.639101][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.641812][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.644825][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.658876][ T7036] device veth1_vlan entered promiscuous mode [ 302.672053][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.674643][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.681223][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.683892][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.688562][ T7036] device veth0_macvtap entered promiscuous mode [ 302.692561][ T7036] device veth1_macvtap entered promiscuous mode [ 302.715969][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.718844][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.721491][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.733056][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.744849][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.809945][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.812986][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.815891][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.823674][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.833425][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.836537][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.838954][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.841520][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.847582][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.850402][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.852881][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.871422][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.874066][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.882375][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.905982][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.906188][ T4315] Bluetooth: hci1: command 0x0419 tx timeout [ 302.910450][ T4315] Bluetooth: hci3: command 0x040f tx timeout [ 302.929462][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.932061][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.934833][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.943874][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.950476][ T7036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.952792][ T7036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.035430][ T7036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.037891][ T7036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.066300][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.068848][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.286866][ T5233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.290207][ T5233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.331936][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.333158][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.342142][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.354482][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.075067][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 305.251698][ T7131] loop4: detected capacity change from 0 to 128 [ 305.332104][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.334791][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.941719][ T7141] loop5: detected capacity change from 0 to 128 [ 306.756583][ T7141] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 308.360850][ T7133] fscrypt: Error allocating hmac(sha512): -2 [ 308.462531][ T7156] MPTCP: kernel_bind error, err=-98 [ 308.663060][ T7013] EXT4-fs (loop5): unmounting filesystem. [ 310.270808][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.273284][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.802486][ T7178] loop6: detected capacity change from 0 to 512 [ 310.949443][ T7036] syz-executor: attempt to access beyond end of device [ 310.949443][ T7036] loop6: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 310.990724][ T7036] EXT2-fs (loop6): error: ext2_readdir: bad page in #2 [ 312.543709][ T7184] loop5: detected capacity change from 0 to 2048 [ 312.561714][ T7184] EXT4-fs (loop5): invalid inodes per group: 1 [ 312.561714][ T7184] [ 312.773610][ T6759] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.061871][ T7203] device syz_tun entered promiscuous mode [ 315.063491][ T7203] device vlan3 entered promiscuous mode [ 319.776425][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.781312][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.784016][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.785936][ T5235] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.798482][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.801558][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.805764][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.679017][ T5235] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.683917][ T27] audit: type=1326 audit(577.647:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 321.692523][ T27] audit: type=1326 audit(577.657:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 321.843793][ T27] audit: type=1326 audit(577.747:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 321.851413][ T27] audit: type=1326 audit(577.747:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 322.307872][ T4315] Bluetooth: hci3: command 0x0409 tx timeout [ 322.314567][ T27] audit: type=1326 audit(577.857:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff83358dd4 code=0x7ffc0000 [ 322.323498][ T27] audit: type=1326 audit(577.857:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 322.565457][ T27] audit: type=1326 audit(577.857:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 322.571167][ T27] audit: type=1326 audit(577.857:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 322.594438][ T27] audit: type=1326 audit(577.857:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 322.611326][ T27] audit: type=1326 audit(578.517:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.788" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x0 [ 322.629015][ T7275] loop5: detected capacity change from 0 to 512 [ 322.643394][ T5235] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.716065][ T7241] lo speed is unknown, defaulting to 1000 [ 322.765768][ T7275] EXT4-fs (loop5): Test dummy encryption mode enabled [ 322.767670][ T7275] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 322.813988][ T7275] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.789: bad orphan inode 131083 [ 322.818114][ T7275] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 322.976731][ T5235] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.759320][ T7013] EXT4-fs (loop5): unmounting filesystem. [ 324.845005][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 324.868417][ T7241] chnl_net:caif_netlink_parms(): no params data found [ 325.020871][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.022904][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.025972][ T7241] device bridge_slave_0 entered promiscuous mode [ 325.036392][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.038355][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.040846][ T7241] device bridge_slave_1 entered promiscuous mode [ 325.110886][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.199260][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 327.524761][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.571351][ T7241] team0: Port device team_slave_0 added [ 327.574730][ T7241] team0: Port device team_slave_1 added [ 327.719528][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.809'. [ 328.064614][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.066752][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.021203][ T7241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.108859][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.217637][ T4315] Bluetooth: hci3: command 0x0419 tx timeout [ 330.301771][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.303676][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.472539][ T7241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.368154][ T7241] device hsr_slave_0 entered promiscuous mode [ 331.555767][ T7241] device hsr_slave_1 entered promiscuous mode [ 332.295082][ T7241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.298243][ T7241] Cannot create hsr debugfs directory [ 333.542851][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 333.560937][ T7410] bridge0: port 1(ip6gretap1) entered blocking state [ 333.563031][ T7410] bridge0: port 1(ip6gretap1) entered disabled state [ 333.611069][ T7410] device ip6gretap1 entered promiscuous mode [ 334.373249][ T7413] device veth3 entered promiscuous mode [ 334.375556][ T7413] bridge0: port 2(veth3) entered blocking state [ 334.377363][ T7413] bridge0: port 2(veth3) entered disabled state [ 337.841347][ T7241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 337.935995][ T7241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 337.962232][ T7241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 337.996810][ T7241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 338.474414][ T7241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.484016][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.486918][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.494018][ T7241] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.501086][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.504620][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.515914][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.517882][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.522011][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.541186][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.544237][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.547946][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.549815][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.552158][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.566192][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.569321][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.573174][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.576560][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.580508][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.583079][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.589280][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.596662][ T7241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.605791][ T7241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.608293][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.610897][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.618712][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.641296][ T5235] device hsr_slave_0 left promiscuous mode [ 338.665400][ T5235] device hsr_slave_1 left promiscuous mode [ 338.745786][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.747996][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.750742][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.752751][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.762443][ T5235] device bridge_slave_1 left promiscuous mode [ 338.765784][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.816323][ T5235] device bridge_slave_0 left promiscuous mode [ 338.818135][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.955594][ T5235] device veth1_macvtap left promiscuous mode [ 338.957645][ T5235] device veth0_macvtap left promiscuous mode [ 338.959360][ T5235] device veth1_vlan left promiscuous mode [ 338.961065][ T5235] device veth0_vlan left promiscuous mode [ 340.799883][ T5235] team0 (unregistering): Port device team_slave_1 removed [ 340.988410][ T5235] team0 (unregistering): Port device team_slave_0 removed [ 341.157213][ T5235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.406624][ T5235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.871981][ T5235] bond0 (unregistering): Released all slaves [ 344.316979][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.319245][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.324556][ T7241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.518374][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.521184][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.540846][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.543364][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.547058][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.549779][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.553657][ T7241] device veth0_vlan entered promiscuous mode [ 344.562210][ T7241] device veth1_vlan entered promiscuous mode [ 344.583218][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.593185][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.596752][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.614885][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.620202][ T7241] device veth0_macvtap entered promiscuous mode [ 344.624164][ T7241] device veth1_macvtap entered promiscuous mode [ 344.641190][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.644133][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.647850][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.650812][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.653418][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.656992][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.659577][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.662244][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.666926][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.668962][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.677363][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.679888][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.682571][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.692109][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.695117][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.698059][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.700763][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.703333][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.706746][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.709302][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.712014][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.714595][ T7241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.718565][ T7241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.722248][ T7241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.724556][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.727761][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.736126][ T7241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.738461][ T7241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.740723][ T7241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.742957][ T7241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.818260][ T5231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.820542][ T5231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.825898][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.854675][ T5231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.857845][ T5231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.862445][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.027243][ T7546] tipc: Started in network mode [ 345.053936][ T7551] loop5: detected capacity change from 0 to 128 [ 345.056185][ T7546] tipc: Node identity ac1414aa, cluster identity 4711 [ 345.068701][ T7546] tipc: Enabled bearer , priority 10 [ 345.096142][ T7551] EXT4-fs (loop5): Test dummy encryption mode enabled [ 345.118089][ T7551] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 345.876731][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.845'. [ 345.920778][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.845'. [ 347.727318][ T7013] EXT4-fs (loop5): unmounting filesystem. [ 347.873495][ T4346] tipc: Node number set to 2886997162 [ 350.246540][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.555367][ T7605] binder: 7600:7605 tried to acquire reference to desc 0, got 1 instead [ 351.569170][ T7605] binder: 7600:7605 ioctl c0306201 200003c0 returned -14 [ 351.615901][ T7605] loop5: detected capacity change from 0 to 1024 [ 352.618697][ T14] binder: release 7600:7605 transaction 74 out, still active [ 352.686879][ T14] binder: undelivered TRANSACTION_COMPLETE [ 352.738747][ T14] binder: send failed reply for transaction 74, target dead [ 352.780191][ T7619] set match dimension is over the limit! [ 354.253019][ T7635] loop7: detected capacity change from 0 to 512 [ 354.336273][ T7635] EXT2-fs (loop7): error: revision level too high, forcing read-only mode [ 354.338708][ T7635] EXT2-fs (loop7): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 357.305192][ T7665] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 359.093137][ T7680] netlink: 76 bytes leftover after parsing attributes in process `syz.1.868'. [ 359.144381][ T7675] Injecting memory failure for pfn 0x121d35 at process virtual address 0x20000000 [ 359.285050][ T7675] Memory failure: 0x121d35: recovery action for dirty LRU page: Recovered [ 359.287798][ T7675] Injecting memory failure for pfn 0x121d36 at process virtual address 0x20001000 [ 359.311676][ T7675] Memory failure: 0x121d36: recovery action for dirty LRU page: Recovered [ 359.314081][ T7675] Injecting memory failure for pfn 0x121d37 at process virtual address 0x20002000 [ 359.324086][ T7675] Memory failure: 0x121d37: recovery action for dirty LRU page: Recovered [ 359.476626][ T7675] Injecting memory failure for pfn 0x13ca04 at process virtual address 0x20003000 [ 360.116258][ T7675] Memory failure: 0x13ca04: recovery action for dirty LRU page: Recovered [ 360.118507][ T7675] Injecting memory failure for pfn 0x14090a at process virtual address 0x20004000 [ 360.180487][ T7675] Memory failure: 0x14090a: recovery action for dirty LRU page: Recovered [ 360.182807][ T7675] Injecting memory failure for pfn 0x14090b at process virtual address 0x20005000 [ 360.209257][ T7675] Memory failure: 0x14090b: recovery action for dirty LRU page: Recovered [ 360.211429][ T7675] Injecting memory failure for pfn 0x13e604 at process virtual address 0x20006000 [ 360.214111][ T7675] Memory failure: 0x13e604: recovery action for dirty LRU page: Recovered [ 360.235054][ T7675] Injecting memory failure for pfn 0x13e605 at process virtual address 0x20007000 [ 360.237894][ T7675] Memory failure: 0x13e605: recovery action for dirty LRU page: Recovered [ 360.240187][ T7675] Injecting memory failure for pfn 0x121b31 at process virtual address 0x20008000 [ 360.242829][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 360.242847][ T27] audit: type=1326 audit(616.207:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.250613][ T7675] Memory failure: 0x121b31: recovery action for dirty LRU page: Recovered [ 360.252991][ T7675] Injecting memory failure for pfn 0x121b32 at process virtual address 0x20009000 [ 360.259974][ T27] audit: type=1326 audit(616.217:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.265655][ T7675] Memory failure: 0x121b32: recovery action for dirty LRU page: Recovered [ 360.267942][ T7675] Injecting memory failure for pfn 0x121b33 at process virtual address 0x2000a000 [ 360.271093][ T27] audit: type=1326 audit(616.217:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.272007][ T7675] Memory failure: 0x121b33: recovery action for dirty LRU page: Recovered [ 360.286885][ T27] audit: type=1326 audit(616.217:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.309253][ T7675] Injecting memory failure for pfn 0x1387f4 at process virtual address 0x2000b000 [ 360.315170][ T7675] Memory failure: 0x1387f4: recovery action for dirty LRU page: Recovered [ 360.315298][ T27] audit: type=1326 audit(616.217:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.317496][ T7675] Injecting memory failure for pfn 0x1387f5 at process virtual address 0x2000c000 [ 360.339925][ T27] audit: type=1326 audit(616.217:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.376717][ T27] audit: type=1326 audit(616.217:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.382602][ T27] audit: type=1326 audit(616.217:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.388678][ T7675] Memory failure: 0x1387f5: recovery action for dirty LRU page: Recovered [ 360.390954][ T7675] Injecting memory failure for pfn 0x1387f6 at process virtual address 0x2000d000 [ 360.403586][ T7675] Memory failure: 0x1387f6: recovery action for dirty LRU page: Recovered [ 360.405207][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.7.872'. [ 360.408569][ T7675] Injecting memory failure for pfn 0x1387f7 at process virtual address 0x2000e000 [ 360.411206][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.415565][ T7675] Memory failure: 0x1387f7: recovery action for dirty LRU page: Recovered [ 360.417861][ T7675] Injecting memory failure for pfn 0x13f584 at process virtual address 0x2000f000 [ 360.425494][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.427381][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.429358][ T27] audit: type=1326 audit(616.217:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.447234][ T27] audit: type=1326 audit(616.217:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.870" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8335a8a8 code=0x7ffc0000 [ 360.541087][ T7708] device veth3 entered promiscuous mode [ 360.592469][ T7675] Memory failure: 0x13f584: recovery action for dirty LRU page: Recovered [ 364.575095][ T7737] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 364.879324][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.881576][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.883545][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.885295][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.887253][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.889990][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.891714][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.893466][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.895359][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.897039][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.980989][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 370.782487][ T7826] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.784901][ T7826] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.787392][ T7826] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.789748][ T7826] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.804298][ T7826] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 371.019330][ T7836] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 371.707504][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.709395][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.742252][ T7841] loop4: detected capacity change from 0 to 128 [ 371.785422][ T7841] EXT4-fs (loop4): Test dummy encryption mode enabled [ 371.951747][ T7841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.627362][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 372.679530][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 372.750696][ T7847] serio: Serial port pts0 [ 372.841628][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 373.949303][ T7881] loop7: detected capacity change from 0 to 512 [ 374.146596][ T7881] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.922: casefold flag without casefold feature [ 374.150434][ T7881] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.922: couldn't read orphan inode 15 (err -117) [ 374.165174][ T7881] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 374.307982][ T7890] net_ratelimit: 1052 callbacks suppressed [ 374.307997][ T7890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.311245][ T7890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.313137][ T7890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.314809][ T7890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.316695][ T7890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.318419][ T7890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.320196][ T7890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.321917][ T7890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.323762][ T7890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.325511][ T7890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 377.766919][ T7241] EXT4-fs (loop7): unmounting filesystem. [ 377.856966][ T7915] loop5: detected capacity change from 0 to 1024 [ 379.362881][ T55] hfsplus: b-tree write err: -5, ino 4 [ 379.451728][ T7941] binder: 7940:7941 tried to acquire reference to desc 0, got 1 instead [ 379.512787][ T7941] binder: 7940:7941 got transaction with invalid data ptr [ 379.514878][ T7941] binder: 7940:7941 transaction async to 7940:0 failed 79/29201/-14, size 93-24 line 3342 [ 379.528485][ T4349] binder: undelivered TRANSACTION_ERROR: 29201 [ 379.578969][ T7949] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 379.582181][ T7949] XFS (loop7): SB validate failed with error -5. [ 379.705108][ T7963] loop4: detected capacity change from 0 to 1024 [ 379.707411][ T7963] EXT4-fs: Ignoring removed oldalloc option [ 379.709040][ T7963] EXT4-fs: Ignoring removed nobh option [ 379.742960][ T7963] EXT4-fs: Ignoring removed bh option [ 379.748505][ T7963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.798474][ T7963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 380.020788][ T7950] could not allocate digest TFM handle sha1-ssse3 [ 380.872644][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 381.051447][ T7990] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 381.145515][ T7990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.223544][ T7998] bond1: (slave veth5): Enslaving as an active interface with a down link [ 381.279243][ T7990] bond1: (slave veth0_to_bond): making interface the new active one [ 381.282821][ T7990] device veth0_to_bond entered promiscuous mode [ 381.297167][ T7990] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 381.305504][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 381.323860][ T7998] device veth1 entered promiscuous mode [ 381.373230][ T7998] device veth1 left promiscuous mode [ 381.391831][ T7998] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 382.928190][ T8020] binder: 8019:8020 tried to acquire reference to desc 0, got 1 instead [ 382.958791][ T8020] binder: 8019:8020 ioctl c0306201 200003c0 returned -14 [ 382.978059][ T8020] loop4: detected capacity change from 0 to 1024 [ 383.088070][ T7500] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 383.136435][ T5401] binder: release 8019:8020 transaction 84 out, still active [ 383.175317][ T5401] binder: undelivered TRANSACTION_COMPLETE [ 383.250573][ T4345] binder: send failed reply for transaction 84, target dead [ 383.394300][ T8045] loop7: detected capacity change from 0 to 1024 [ 383.405072][ T8045] EXT4-fs: Ignoring removed nobh option [ 383.406625][ T8045] EXT4-fs: inline encryption not supported [ 383.408140][ T8045] EXT4-fs: Ignoring removed bh option [ 383.419162][ T8045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 383.422190][ T8045] EXT4-fs: test_dummy_encryption requires encrypt feature [ 385.954800][ T8063] overlayfs: failed to clone lowerpath [ 386.741967][ T8067] loop5: detected capacity change from 0 to 512 [ 386.822067][ T8068] loop4: detected capacity change from 0 to 2048 [ 386.881190][ T8068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 386.905268][ T8067] __quota_error: 1 callbacks suppressed [ 386.905281][ T8067] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 386.931936][ T8067] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 386.965177][ T8067] EXT4-fs (loop5): mount failed [ 387.115652][ T8068] netlink: 'syz.4.956': attribute type 13 has an invalid length. [ 387.155236][ T47] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 387.157812][ T47] Bluetooth: hci1: Injecting HCI hardware error event [ 387.161248][ T4315] Bluetooth: hci1: hardware error 0x00 [ 387.191730][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 387.304169][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.7.971'. [ 387.311014][ T111] net_ratelimit: 2114 callbacks suppressed [ 387.311026][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.357348][ T8109] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 388.357565][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.469619][ T47] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 388.472077][ T47] Bluetooth: hci3: Injecting HCI hardware error event [ 388.475556][ T47] Bluetooth: hci3: hardware error 0x00 [ 389.385736][ T4315] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 389.394565][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.794359][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.806165][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.971511][ T47] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 392.996083][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.097734][ T8174] overlayfs: failed to clone lowerpath [ 393.600357][ T8177] loop7: detected capacity change from 0 to 512 [ 394.309828][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.394541][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.398448][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.448588][ T8177] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 394.451958][ T8177] EXT4-fs warning (device loop7): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 394.463355][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.471050][ T8177] EXT4-fs (loop7): mount failed [ 396.719002][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.188972][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.195317][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.665897][ T8240] lo speed is unknown, defaulting to 1000 [ 398.717809][ T8240] lo speed is unknown, defaulting to 1000 [ 398.728224][ T8240] lo speed is unknown, defaulting to 1000 [ 399.268357][ T8240] infiniband syz0: set active [ 399.270571][ T8240] infiniband syz0: added lo [ 399.275174][ T8240] infiniband syz0: Couldn't open port 1 [ 399.357069][ T111] lo speed is unknown, defaulting to 1000 [ 399.374119][ T8240] RDS/IB: syz0: added [ 399.375515][ T8240] smc: adding ib device syz0 with port count 1 [ 399.377401][ T8240] smc: ib device syz0 port 1 has pnetid [ 399.381219][ T8240] lo speed is unknown, defaulting to 1000 [ 399.435065][ T8240] lo speed is unknown, defaulting to 1000 [ 399.473438][ T8240] lo speed is unknown, defaulting to 1000 [ 399.516050][ T8240] lo speed is unknown, defaulting to 1000 [ 399.559064][ T8240] lo speed is unknown, defaulting to 1000 [ 399.592049][ T8240] lo speed is unknown, defaulting to 1000 [ 399.625546][ T8240] lo speed is unknown, defaulting to 1000 [ 399.713628][ T14] lo speed is unknown, defaulting to 1000 [ 399.750508][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.795208][ T8216] loop4: detected capacity change from 0 to 32768 [ 400.044770][ T8216] read_mapping_page failed! [ 400.046651][ T8216] jfs_mount: Failed to read AGGREGATE_I [ 400.048210][ T8216] Mount JFS Failure: -5 [ 400.049288][ T8216] jfs_mount failed w/return code = -5 [ 400.915065][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.970245][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.7.992'. [ 401.859278][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.946059][ T8274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.950455][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.996066][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.385218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.387854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.390112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.392389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.394638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.396945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.399204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.401488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.403720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.406004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.262062][ T8317] loop5: detected capacity change from 0 to 1024 [ 405.339212][ T8318] loop4: detected capacity change from 0 to 512 [ 405.396473][ T8318] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1006: casefold flag without casefold feature [ 405.805849][ T8318] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1006: couldn't read orphan inode 15 (err -117) [ 405.904694][ T8318] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 406.446184][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.448355][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.530443][ T8327] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.532641][ T8327] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.538705][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.540648][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.556456][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.558397][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.808501][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.824399][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.893016][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.895388][ T4581] device veth0_to_bond left promiscuous mode [ 406.915336][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.940807][ T8327] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.961276][ T8327] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.991564][ T8338] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.007386][ T8338] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.056768][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.073316][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.093364][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.107097][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 407.108167][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.130845][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.132765][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.138492][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.142899][ T8317] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.262288][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.284876][ T8358] loop4: detected capacity change from 0 to 1024 [ 408.292205][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.332049][ T8358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 408.686745][ T111] net_ratelimit: 85 callbacks suppressed [ 408.686757][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.384114][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.935241][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.124739][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 411.385447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.516056][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.627809][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.774797][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.346007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.585940][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.586569][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.905271][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.907743][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.659747][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.767336][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.021787][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.910535][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.774618][ T8479] rdma_rxe: rxe_register_device failed with error -23 [ 420.776799][ T8479] rdma_rxe: failed to add lo [ 421.790233][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.792771][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.172527][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.612250][ T8504] binder: 8501:8504 ioctl 4018620d 0 returned -22 [ 424.929360][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.297913][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.969085][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.905170][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.500440][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.357176][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.137508][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.736717][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.772370][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.774644][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.780820][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.815403][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.833286][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.876719][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.878890][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.146738][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.148656][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.011421][ T14] net_ratelimit: 3 callbacks suppressed [ 435.011436][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.791148][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.903760][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.906549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.034719][ T8585] loop4: detected capacity change from 0 to 8192 [ 436.059274][ T8585] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 436.073241][ T8585] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 436.168896][ T8597] loop5: detected capacity change from 0 to 256 [ 436.262934][ T8585] REISERFS (device loop4): using ordered data mode [ 437.117738][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.130292][ T8585] reiserfs: using flush barriers [ 437.161152][ T8597] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.390228][ T8585] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 437.496753][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.565447][ T8585] REISERFS (device loop4): checking transaction log (loop4) [ 438.646149][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.659598][ T8608] loop7: detected capacity change from 0 to 1764 [ 438.662127][ T8608] isofs_fill_super: bread failed, dev=loop7, iso_blknum=32785, block=65570 [ 439.175488][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.221910][ T8612] loop5: detected capacity change from 0 to 164 [ 440.753482][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.817133][ T8626] netlink: 'syz.5.1086': attribute type 1 has an invalid length. [ 440.899580][ T8585] REISERFS (device loop4): Using tea hash to sort names [ 440.903980][ T8585] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 441.686467][ T8626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.720984][ T8635] loop7: detected capacity change from 0 to 32768 [ 441.796507][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.796718][ T8636] bond1: (slave gretap1): making interface the new active one [ 441.831085][ T8636] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 441.833490][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 444.167405][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.169707][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.276797][ T8661] loop4: detected capacity change from 0 to 64 [ 445.935869][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.047969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.069114][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.238670][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.432993][ T8693] loop5: detected capacity change from 0 to 256 [ 448.454733][ T8693] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.483114][ T8693] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 448.595867][ T8694] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 448.613281][ T8693] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 448.655175][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.677253][ T8694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.851545][ T8696] bond2: (slave gretap2): making interface the new active one [ 449.935329][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.508007][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.554674][ T8696] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 450.557573][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 450.653676][ T8713] loop5: detected capacity change from 0 to 512 [ 451.871130][ T8718] loop7: detected capacity change from 0 to 40427 [ 452.223340][ T8718] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 452.225555][ T8718] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 452.271250][ T8713] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 452.396078][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.427403][ T8718] F2FS-fs (loop7): Found nat_bits in checkpoint [ 452.457450][ T8718] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 452.459415][ T8718] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 452.517477][ T8727] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 452.528373][ T8713] EXT4-fs (loop5): 1 truncate cleaned up [ 452.530167][ T8713] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 452.549121][ T8729] MPTCP: kernel_bind error, err=-98 [ 453.446647][ T7013] EXT4-fs (loop5): unmounting filesystem. [ 453.794271][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.844578][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.820279][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.003032][ T8757] loop7: detected capacity change from 0 to 16 [ 456.095373][ T8757] erofs: (device loop7): mounted with root inode @ nid 36. [ 456.270697][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.560520][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 456.563328][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 456.565952][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 456.568540][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 456.571065][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 456.573746][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 456.576296][ T8761] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.578856][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 456.581275][ T8761] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.583762][ T8761] erofs: (device loop7): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 456.587883][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.587883][ T8761] loop7: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 456.591750][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.591750][ T8761] loop7: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 456.595816][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.595816][ T8761] loop7: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 456.599637][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.599637][ T8761] loop7: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 456.603319][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.603319][ T8761] loop7: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 456.607179][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.607179][ T8761] loop7: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 456.610979][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.610979][ T8761] loop7: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 456.614650][ T8761] syz.7.1120: attempt to access beyond end of device [ 456.614650][ T8761] loop7: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 457.374947][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.403882][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.380006][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.396448][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.426847][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.555201][ T8791] overlayfs: missing 'lowerdir' [ 459.938043][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.467636][ T8806] loop7: detected capacity change from 0 to 2048 [ 461.478461][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.483990][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.740164][ T8806] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 461.765158][ T8806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.445631][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.519001][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.465896][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.736881][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.739395][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.743297][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.746678][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.754333][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.012082][ T8867] loop5: detected capacity change from 0 to 16 [ 468.502357][ T8867] erofs: (device loop5): mounted with root inode @ nid 36. [ 468.608794][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.611818][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.686524][ T8870] loop7: detected capacity change from 0 to 40427 [ 472.706058][ T5401] net_ratelimit: 3 callbacks suppressed [ 472.706071][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.709835][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.715406][ T8870] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 472.726206][ T8870] F2FS-fs (loop7): invalid crc value [ 472.728017][ T8870] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-12) [ 472.736966][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.020716][ T7500] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 474.261391][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.785306][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.943794][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.946137][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.987163][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.909223][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.110389][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.937465][ T4345] net_ratelimit: 369 callbacks suppressed [ 477.937479][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.059556][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.326792][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.888189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.895024][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.866110][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.029742][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.330683][ T8959] loop4: detected capacity change from 0 to 40427 [ 483.387943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.511442][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.545365][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.550476][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.605666][ T8959] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 484.617853][ T8959] F2FS-fs (loop4): invalid crc value [ 484.750659][ T8959] F2FS-fs (loop4): Found nat_bits in checkpoint [ 484.791414][ T8959] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 484.941686][ T8970] syz.5.1174 uses obsolete (PF_INET,SOCK_PACKET) [ 486.027956][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.135075][ T8981] loop7: detected capacity change from 0 to 512 [ 486.156676][ T8981] EXT2-fs (loop7): error: revision level too high, forcing read-only mode [ 486.164225][ T8981] EXT2-fs (loop7): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 487.765535][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.770140][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.821799][ T8992] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 487.824724][ T8992] Mem abort info: [ 487.825831][ T8992] ESR = 0x0000000086000006 [ 487.827036][ T8992] EC = 0x21: IABT (current EL), IL = 32 bits [ 487.828705][ T8992] SET = 0, FnV = 0 [ 487.829743][ T8992] EA = 0, S1PTW = 0 [ 487.830778][ T8992] FSC = 0x06: level 2 translation fault [ 487.832263][ T8992] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001378a1000 [ 487.834150][ T8992] [0000000000000000] pgd=0800000115764003, p4d=0800000115764003, pud=080000010db93003, pmd=0000000000000000 [ 487.837471][ T8992] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 487.839298][ T8992] Modules linked in: [ 487.840256][ T8992] CPU: 0 PID: 8992 Comm: syz.5.1179 Not tainted 6.1.141-syzkaller #0 [ 487.842320][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.844913][ T8992] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 487.847012][ T8992] pc : 0x0 [ 487.847825][ T8992] lr : bond_xdp_xmit+0x27c/0x45c [ 487.849166][ T8992] sp : ffff8000215a7220 [ 487.850232][ T8992] x29: ffff8000215a72e0 x28: 000000000000000f x27: ffff8000215a7248 [ 487.852428][ T8992] x26: dfff800000000000 x25: ffff800012b264b8 x24: ffff0000da0d8000 [ 487.854522][ T8992] x23: fffffbffefec7670 x22: ffff0000c3e88000 x21: fffffbffefec7670 [ 487.856676][ T8992] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 487.858814][ T8992] x17: 0000000000000000 x16: ffff8000082d0750 x15: 0000000000000002 [ 487.860978][ T8992] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 487.863105][ T8992] x11: 0000000000004cd4 x10: ffff80002394b000 x9 : ffff8000215a7280 [ 487.865146][ T8992] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 487.867220][ T8992] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 487.869300][ T8992] x2 : ffff8000215a72a0 x1 : 0000000000000001 x0 : ffff0000da0d8000 [ 487.871478][ T8992] Call trace: [ 487.872327][ T8992] 0x0 [ 487.872996][ T8992] bq_xmit_all+0xab0/0xf10 [ 487.874153][ T8992] __dev_flush+0xc4/0x18c [ 487.875301][ T8992] xdp_do_flush+0x14/0x28 [ 487.876365][ T8992] bpf_test_run_xdp_live+0x10e0/0x1544 [ 487.877762][ T8992] bpf_prog_test_run_xdp+0x560/0xb88 [ 487.879097][ T8992] bpf_prog_test_run+0x2dc/0x364 [ 487.880261][ T8992] __sys_bpf+0x4ec/0x634 [ 487.881363][ T8992] __arm64_sys_bpf+0x80/0x98 [ 487.882540][ T8992] invoke_syscall+0x98/0x2bc [ 487.883699][ T8992] el0_svc_common+0x138/0x258 [ 487.884898][ T8992] do_el0_svc+0x58/0x13c [ 487.885915][ T8992] el0_svc+0x58/0x138 [ 487.886918][ T8992] el0t_64_sync_handler+0x84/0xf0 [ 487.888127][ T8992] el0t_64_sync+0x18c/0x190 [ 487.889344][ T8992] Code: bad PC value [ 487.890403][ T8992] ---[ end trace 0000000000000000 ]--- [ 488.529774][ T8992] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 488.531952][ T8992] SMP: stopping secondary CPUs [ 488.533264][ T8992] Kernel Offset: disabled [ 488.534433][ T8992] CPU features: 0x080000,02070084,26017203 [ 488.535985][ T8992] Memory Limit: none [ 489.175268][ T8992] Rebooting in 86400 seconds..