last executing test programs: 4m39.020124609s ago: executing program 1 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000f, 0x12, r2, 0x7c4ec000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 4m38.873783271s ago: executing program 1 (id=627): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001d40)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x2, 0x3}}, 0x26) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="399d0b492373", 0x6, 0x0, &(0x7f0000000200)={0x11, 0x7, r3, 0x1, 0x0, 0x6, @local}, 0x14) 4m38.715934324s ago: executing program 1 (id=630): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 4m38.536511847s ago: executing program 1 (id=631): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$eJzs3c9vG1UeAPCv7SZN0uz2x+5h28O22lbqQtW4TdQkQr30hIRUQO2BYxUSNypx4ih2ShPlkEoc4I6gEifEoX8Agis9cewVeoIzUgUhJUKikpHHdppfLgbSWMp8PtLUb+ZN/X0v1vdp5o3HE0Bqnar9k4noj4iHEXG4vrp5h1P1l7WVpfHakolq9fqPmWS/1ZWl8eauzf93KCKWI6InIq69GvF2Znvc8sLi1FixWJhrrOcr07P58sLi+VvTY5OFycLM0MjgyOjw8MjopV3r63t3rrzx0S9X3v/sm/vfvZP54kytWf2Nuo392E31rnfF0Q3bDkTE5RcRrANyjf70droh/CW1z+9fEXE6yf/DkUs+TSANqtVq9Wn1YKvq5Sqwb2WTY+BMdiAi6uVsdmCgfgz/7+jLFkvlyrmbpfmZifqx8pHoyt68VSxcaJwrHImuTG39YlJ+tj64ZX0oIjkG/jDXm6wPjJeKE3s71AFbHNqS/09y9fwHUsIpP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5BKb169Wluqa4373yduL8xPlW6fnyiUpwam58cHxktzswOTpdJkcs/O9B+9X7FUmh2Kmfk7+UqhXMmXFxZvTJfmZyo3kvv6bxS69qRXQDuOnnzwKBMRy6/0JktNd6NOrsL+Vq1motP3IAOdkev0AAR0jKk/SC/n+MAOP9G7SU+ritndbwuwN7LPii1THNifzh53/Q/Syvw/pJf5f0gvx/iA+X9In2ynGwB0TH+L53/9Y8Ozuy5ExD8j4ttc18Hms76A/SD7Q6bVPOCZiO7Mr8klgu6IePeT6x/fGatU5i7Wtv+0vr1yr7F9sP2o3bvWfqBdzTxt5jEAkF6rK0vjzWUv4z6+Uj/5qMVdayz1mgONucme5Bpl32pm0zlKy3OWP2n5bkT8J+LJytJ4c2lGqD/vvH7lo281ty3+scZrpv4WSXsPJM9Nj7a/Tv134h/fEP+/G+Kf2IW/C6TBg9r4c2H7+HewkdOxnn+bx5/+XfruRHP8W9s2/mXXx79ci/HvZJsxLuffWm0Z/27EiR3jN+P1JLG2xq+17Wyb8b/+4OeHreqqn9bfZ6f4TbVSvjI9my8vLJ5PfkdusjAzNDI4Mjo8PDJ6KZ/MUeebM9XbPfrf06+e1/++FvF36n/3hja91Gb/f7v35blTz4n//9M7f/7Hdojf1BsRL7cZ/7XPv7/Wqq4Wf6JF/7Mt4mcilmvbhtqMf/3+49fb3BUA2APlhcWpsWKxMKegoKCwXuj0yAS8aM+SvtMtAQAAAAAAAAAAANq1F18n7nQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g98DAAD//3wG2HA=") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180), 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m34.648162517s ago: executing program 1 (id=642): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010080, &(0x7f0000000040)=ANY=[], 0x1, 0x304, &(0x7f0000000680)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x1, r2}) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 4m32.092535168s ago: executing program 1 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 4m32.026450898s ago: executing program 32 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1m23.976483714s ago: executing program 5 (id=1236): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x803, 0x10000000}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000007640)={0x0, 0xffffffffffffff93, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}}, 0x0) 1m20.796272994s ago: executing program 5 (id=1244): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c064296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f2e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a3868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd1a81bb6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f00", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.575324645s ago: executing program 5 (id=1248): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 1m16.084460258s ago: executing program 5 (id=1254): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 1m15.621268385s ago: executing program 5 (id=1256): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) sendmsg$xdp(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0}, 0x40045) 1m15.32451292s ago: executing program 5 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f00000013c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878ce3db471a5a29b9509986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1bd93d423621c99cbd5af9cebc6c95cb35ef71b38ae07b9843ec4753ef7da5d14ba1d0f7d651284e72e637570a2544a5b99086d340f50c11691eb92dfe6037d82b3fd6de224ac16c5a1599c463bda1c8912666f54477f36aa812bc8ed0a3ac7b2a11384eedecec4119679aa6f4dddcfb61ca4c19345b0763f776d96e0d8b278a0f64af7bb44074f8fa896b3cc62b4e9462edf29d5c14d627a666639660bd1c4880d18640e41db4671c10bb4c146ed1aa166b3e695b107dcaec7fa44148c165afb866cdfe8f4b01144543766be57ca5e8aa8f04ddd3bbba2303a1f117d5c5542f", @ANYRES8, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b383c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aafdfda02823a69030b19126f82a4", @ANYRES8=0x0, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000300)) 1m14.181869548s ago: executing program 33 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f00000013c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRES8, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b383c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aafdfda02823a69030b19126f82a4", @ANYRES8=0x0, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000300)) 8.600487005s ago: executing program 0 (id=1394): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0x802c, @mcast1, 0x7}, 0xfffffffffffffe20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 8.510111087s ago: executing program 3 (id=1396): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 8.217028591s ago: executing program 0 (id=1397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 8.107706873s ago: executing program 4 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7.430815233s ago: executing program 3 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x80, 0x0) pidfd_send_signal(r3, 0x35, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) shutdown(r4, 0x1) 7.232025556s ago: executing program 0 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80800}) listen(r3, 0x5) io_uring_enter(r4, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 7.148471568s ago: executing program 2 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) 6.38996221s ago: executing program 3 (id=1403): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x2, 0x241, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 4.946695923s ago: executing program 0 (id=1404): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = getpgid(0x0) prlimit64(r4, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 4.881261073s ago: executing program 2 (id=1405): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.556811149s ago: executing program 4 (id=1406): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xc032, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 4.48478691s ago: executing program 2 (id=1407): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 3.479837325s ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r3) 2.319963943s ago: executing program 4 (id=1409): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x161042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x804}}], 0x1, 0x41) syz_io_uring_setup(0x495, &(0x7f0000000300)={0x0, 0x7079, 0x2000, 0x14, 0x28b}, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r3 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 2.240181785s ago: executing program 2 (id=1410): ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x50, 0x0, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0x2020) 1.984715069s ago: executing program 3 (id=1411): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e80)=[{0x0, 0x10}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'batadv_slave_1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.162005341s ago: executing program 2 (id=1412): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) 1.161323961s ago: executing program 4 (id=1413): socket(0x10, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x400445a0, 0xffffffffffffffff) write$nbd(r5, &(0x7f0000000440)=ANY=[], 0xd6) close_range(r0, 0xffffffffffffffff, 0x0) 1.112309892s ago: executing program 3 (id=1414): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffffc, @remote, 0x4}}, 0x24) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x5, &(0x7f0000000380)={[{}, {}, {@order_strict}, {@nobarrier}, {}, {@nodiscard}, {@nobarrier}], [{@smackfsroot={'smackfsroot', 0x3d, '/'}}]}, 0x3, 0xf43, &(0x7f0000001e80)="$eJzs3dFvW9X9APBjJ07SJjQO8IMCP0oHmygMktJWW/dWBNoj4mXvoNKyisDQyh6oOminCTGJsUmMp4kHJl4YkxjSHkCTpoqn7W3T/gG0SWPS1ElFe1ml1lOTcxL7NBfbt861HX8+0jfH957r+/1e203vubGPAzCx6ms/jxzZWwvh7U/eevxE6x+vX1t3z8YW+9d+1uJSM4TQuNbfarXa1yefxRVXLp09vlVbC4fWfqbl8MTFjfvOhxDOhf3hQmiGD1ZWv3j/nccOfPTa3G1vnnnule17BELY6jgAAGAn+vQXf//GA//800NLlz/cdyzMbqxP5+fNuDwfz/sPxhPldL5cD53LtbZoN5NtNxWjnm03lW03neWZLsjXyPbTKNhupku+qbZ1Wx0nAAAAjKM0rm2GWn25Y7leX15eH/df89niTG35hVOrJ08PqVAAAACgtP+8uvam2xGJ85uF9X//2eHXL6qNxgjUIIQQQgghhBDjEa3FYV59AAAAACZRPl9Y5nw4N9iZujb21uwpf7j4aH3r+8MAbPn6m23bYMCv/57yB/lHJf975/3GAQCgvJ16NpmOK51Hp3kM8nkEp7L79Xv+X8/2M91nnUXzCo7LfINFdeaP66gqqr/f53FYiurP58McVUX15/N0jqqi+mcrrqOsovrnKq6jrKL6d1VcR1lF9e+uuI6yiuqfr7iOsorqX6i4jrKK6r+p4jrKur7+9f959wyhljKKHv9xeVttUf3Niusoq6j+pYrrKKuo/psrrqOsovpvqbiOsorqv7XiOobl7timx2Ff1t8+fs7HdOMyxgMAAIBJ998t5v9buxYwAnMTCCHEtkdoDr8GIYQQQgghKohXh30BAgAAABi69LmA9Kn3VpT6p7r0T3fpb3Tpn+nSP9ulHwAAAAjh96+fvGOu7XP+NzofXpo3Ks2/1O88Rvl8hP3mv9F5z240/7jMWwYAAMBkqX37wtUHH3/3paXLH+471jb6vRrHu2ke0Ol4beDjuJzeF7CQLdfSGPpYR5rpesF2+fWBm4r29+SNHikAAABMrjR+b4Zafblt3N0M9fry8uZ4fG9o1E6eWj1xMC6n72f542Jj9tr6RyquGwAAAOjd5nh/6/F/+h7fvWGmtvzCqdWTp9eXFzbWN+rt1wUWN9fX2q8LNLP1hwrWH47L6fs7v7u4a2398vHvrT4z6IMHAACACXH65TPPPb26euL7O+3G9E4/wP5v/PSOnjeuxWkUh16zG8O6MeRfTAAAwMB9/vlbjR8cXvjD+uf/N+e/u3rpbMdUes04t9+f4wbpfQLpcwDXfV7/qc48i0Xbvdi5XTPbbirGbFb3XNt+Qtt8g+l+S0X5mp37mSnIN5/lW8jy5fMUTGfbp3x7svX5/IRpu8VsfT4P43SWo5blvzcAAABAsZWXnn9x5fTLZx4+9fzTz5549sQLhw8d/dbRowcf+eYjK2vv619pf3c/AAAAMI423/Q77EoAAAAAAAAAAAAAAAAAAABgclXxdWLDPkYAAACYdP9+NYRwTgghhBBi3KO+eYIz9FrExMXM9ux3xuv5S+Jyq9Uadg1CjFe0Wvk3zQMAAABsryuXzh5fu1Er2OBcUUc5G3trrjdXY/7ULjz816VrkTa7+Gjn9ZLdA62GSZde/xv/DnIDfv2PY/7tvGTZ5/Hvqjr/e+cH+/jPpRs9//6rd+7gWLm896/8em97/june8yfH/+T5fIfyPLfH3rL33o3y/9UufwPZPl395j/uuN/sVz+B2P+vXH5wH3rr+Xu+Tuf/9nYpuPo9R/E17Pjfya2fR9/s8eEmYdifgCYRPVhF7BN0llCOo+ej8vpeOPpZsiHEv2Of+rZfqZvuPLO/abzoNvjcjpfWsjyJv3WP5/t76aSdebG5V0lRfUP6nncbkX1Nyquo6yi+mfK37VSRUXMVlxHWUX1z1VcR1lF9Q/8wsw2Kap/XK4rF9U/X3EdZRXVv1BxHWUV1d/v/+PDUlT/norrKKuo/sWK6yirqP6Sl9UqV1T/UsV1lFVU/80V11FWUf23VFxHWUX131pxHcNyV2yLxsNp/LkY+9JyM1ue3eKxHIkTdAAAACD8y/x/Qoi+48cLw69B7PyYGoEaBhhhBGoQYpJjrP4Nzo1ADYOKXSNQgxAixdqcmUys0p8mvjDYOgCo1vbO5sGo8/xPNs//ZPP882XSe/hr2XIy1aV/ukt/o0v/TNafv15nu/Tfku23FaX+W7v0/1+X/j1d+m/v0r+3S/8dXfrv7NJ/V5d+AAAAJsNtsTU+BAAAgJ3rh7/5+I3f3f/UpaXLH+47Fmaum3f+YFyejX9bfz0u5/PeJ434N/8fxeVfxfbT2P4t2977TwAAAGD7pe+J8fd/AAAA2LnS95Qa/wMAAMDOtRRb438AAADYuW6OrfE/AAAA7GC1ua1XxzZdF7g3tr3O6wcAjL7/j+3dsd0X23ti+5XYpvOA+2L71YrqAwAG55ff+cnRn9c25/s/nPVfietTe51z61cKavXOmfx3xXZ3bL/WYz359wH0mj/Z02Oe7cq/eIP5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdo77288iRvbUQ3v7krcd/NvPGX66tu2dji/1rP2txqRlCaGzcL/VuLv82bnjl0tnj7e3V2NbCoVALtY314YmLG5nmQwjnwv5wITTDByurX7z/zmMHPnpt7rY3zzz3yjY+BB3HBwAAADvR/wIAAP//jlEheQ==") 1.104029772s ago: executing program 4 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) brk(0xfffffffffffffff9) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 972.538885ms ago: executing program 0 (id=1416): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0xa1) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) 56.474139ms ago: executing program 2 (id=1417): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 16.471169ms ago: executing program 4 (id=1418): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000780)={0x0}) socket$inet(0x2, 0xa, 0x2) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 0s ago: executing program 0 (id=1419): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.984670][ T4428] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 43.989053][ T4428] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.989053][ T4428] [ 43.991704][ T4428] EXT4-fs (loop3): Total free blocks count 0 [ 43.993327][ T4428] EXT4-fs (loop3): Free/Dirty block details [ 43.994916][ T4428] EXT4-fs (loop3): free_blocks=68451041280 [ 43.995029][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.997738][ T4428] EXT4-fs (loop3): dirty_blocks=32 [ 44.000911][ T4428] EXT4-fs (loop3): Block reservation details [ 44.002535][ T4428] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 44.010935][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.034067][ T4426] loop0: detected capacity change from 0 to 32768 [ 44.076499][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.185663][ T4428] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 44.208154][ T4402] kernel write not supported for file bpf-prog (pid: 4402 comm: kworker/0:9) [ 44.314231][ T4436] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 44.321765][ T4436] CIFS mount error: No usable UNC path provided in device string! [ 44.321765][ T4436] [ 44.324662][ T4436] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 45.216343][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 46.244024][ T4443] sched: RT throttling activated [ 46.246179][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 46.249449][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 46.251124][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 46.252733][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 46.254287][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 50.550502][ T4501] loop4: detected capacity change from 0 to 1024 [ 50.717283][ T4505] loop2: detected capacity change from 0 to 1024 [ 51.635364][ T4505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.674516][ T4505] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.697070][ T4505] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 51.713747][ T4505] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.713747][ T4505] [ 51.723916][ T4505] EXT4-fs (loop2): Total free blocks count 0 [ 51.725615][ T4505] EXT4-fs (loop2): Free/Dirty block details [ 51.746723][ T4505] EXT4-fs (loop2): free_blocks=68451041280 [ 51.753194][ T4505] EXT4-fs (loop2): dirty_blocks=32 [ 51.756904][ T4505] EXT4-fs (loop2): Block reservation details [ 51.758519][ T4505] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 51.769641][ T4517] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 52.830719][ T4523] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 52.912465][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 54.668082][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 54.670956][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 54.675498][ T4297] Bluetooth: hci4: hardware error 0x00 [ 55.247314][ T4543] loop3: detected capacity change from 0 to 40427 [ 55.265909][ T4543] ======================================================= [ 55.265909][ T4543] WARNING: The mand mount option has been deprecated and [ 55.265909][ T4543] and is ignored by this kernel. Remove the mand [ 55.265909][ T4543] option from the mount to silence this warning. [ 55.265909][ T4543] ======================================================= [ 55.328251][ T4543] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 55.330493][ T4543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.341140][ T4543] F2FS-fs (loop3): invalid crc value [ 55.641357][ T4569] loop1: detected capacity change from 0 to 64 [ 56.379519][ T4543] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.404444][ T4569] hfs: get root inode failed [ 56.504745][ T4543] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.517115][ T4543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.740904][ T4471] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.587709][ T4297] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 58.594376][ T4590] netlink: 'syz.2.58': attribute type 5 has an invalid length. [ 58.669200][ T4594] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 58.694164][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.697593][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.727514][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 60.786434][ T4616] binder: 4614:4616 tried to acquire reference to desc 0, got 1 instead [ 60.797244][ T4616] binder: release 4614:4616 transaction 5 out, still active [ 60.888242][ T4616] binder: undelivered TRANSACTION_COMPLETE [ 60.942160][ T4623] binder: 4614:4623 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.946160][ T4623] binder: 4623 RLIMIT_NICE not set [ 60.947657][ T4623] binder: 4623 RLIMIT_NICE not set [ 61.823744][ T4346] binder: release 4614:4623 transaction 5 in, still active [ 61.825965][ T4346] binder: send failed reply for transaction 5, target dead [ 62.539848][ T4635] Invalid ELF header magic: != ELF [ 63.145608][ T4631] mmap: syz.3.61 (4631) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.122401][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.124338][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.044380][ T4663] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 66.059022][ T4663] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 66.305632][ T4672] loop3: detected capacity change from 0 to 64 [ 66.399228][ T4672] hfs: get root inode failed [ 67.875389][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.878100][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.881042][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.883810][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.887196][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.889978][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.892718][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.895435][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.898306][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 67.901159][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 69.645195][ T7] cfg80211: failed to load regulatory.db [ 74.563563][ T4736] loop2: detected capacity change from 0 to 512 [ 74.565910][ T4736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.620950][ T4736] EXT4-fs: Mount option(s) incompatible with ext3 [ 74.733238][ T4742] loop0: detected capacity change from 0 to 64 [ 74.789605][ T4742] hfs: get root inode failed [ 75.443154][ T4471] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.496734][ T4472] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.441733][ T4297] Bluetooth: hci3: hardware error 0x09 [ 77.629831][ T4761] bridge0: port 3(erspan0) entered blocking state [ 77.853066][ T4761] bridge0: port 3(erspan0) entered disabled state [ 78.365243][ T4761] device erspan0 entered promiscuous mode [ 78.368766][ T4761] bridge0: port 3(erspan0) entered blocking state [ 78.370771][ T4761] bridge0: port 3(erspan0) entered forwarding state [ 78.763628][ T4781] loop0: detected capacity change from 0 to 64 [ 80.426682][ T4297] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 81.482476][ T4803] bridge0: port 3(syz_tun) entered blocking state [ 81.484917][ T4803] bridge0: port 3(syz_tun) entered disabled state [ 81.503173][ T4803] device syz_tun entered promiscuous mode [ 81.504970][ T4803] bridge0: port 3(syz_tun) entered blocking state [ 81.506749][ T4803] bridge0: port 3(syz_tun) entered forwarding state [ 81.664004][ T4815] __nla_validate_parse: 44 callbacks suppressed [ 81.664017][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 81.667949][ T27] audit: type=1326 audit(81.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b5a9a8 code=0x7fc00000 [ 81.809127][ T4819] loop2: detected capacity change from 0 to 64 [ 81.871835][ T4819] hfs: get root inode failed [ 82.533075][ T27] audit: type=1326 audit(82.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb3b5a9a8 code=0x7fc00000 [ 82.575590][ T4818] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 83.725475][ T4837] syz.0.115 uses old SIOCAX25GETINFO [ 84.118505][ T4841] loop4: detected capacity change from 0 to 32768 [ 84.120966][ T4841] XFS: ikeep mount option is deprecated. [ 84.126057][ T4824] sctp: failed to load transform for md5: -2 [ 84.264076][ T4841] XFS (loop4): Mounting V5 Filesystem [ 84.282254][ T4339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.293655][ T4339] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.529789][ T4841] XFS (loop4): Ending clean mount [ 84.535615][ T4841] XFS (loop4): Quotacheck needed: Please wait. [ 84.589550][ T4841] XFS (loop4): Quotacheck: Done. [ 84.727596][ T4869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.400299][ T4879] ax25_connect(): syz.3.126 uses autobind, please contact jreuter@yaina.de [ 85.448481][ T4303] XFS (loop4): Unmounting Filesystem [ 85.645290][ T4888] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 85.648994][ T4887] Zero length message leads to an empty skb [ 86.738374][ T4904] loop2: detected capacity change from 0 to 2048 [ 86.771238][ T4906] loop3: detected capacity change from 0 to 128 [ 86.806944][ T4904] Alternate GPT is invalid, using primary GPT. [ 86.808934][ T4904] loop2: p1 p2 p3 [ 86.842207][ T4906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.853001][ T4906] process 'syz.3.136' launched '/dev/fd/3' with NULL argv: empty string added [ 87.857254][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 89.487418][ T4926] syz.0.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.526349][ T4926] loop0: detected capacity change from 0 to 1024 [ 90.431697][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 90.466093][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 91.999046][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 92.321724][ T4958] loop3: detected capacity change from 0 to 64 [ 92.363672][ T4958] hfs: get root inode failed [ 93.085665][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 93.109227][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.116892][ T4956] device vlan2 entered promiscuous mode [ 93.173212][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 93.242164][ T4954] loop0: detected capacity change from 0 to 4096 [ 93.299394][ T4964] loop3: detected capacity change from 0 to 2048 [ 93.322381][ T4954] ntfs: volume version 3.1. [ 93.419559][ T4964] Alternate GPT is invalid, using primary GPT. [ 93.421423][ T4964] loop3: p1 p2 p3 [ 93.486816][ T4954] bridge0: port 4(batadv0) entered blocking state [ 93.496377][ T4954] bridge0: port 4(batadv0) entered disabled state [ 93.512611][ T4954] device batadv0 entered promiscuous mode [ 93.514720][ T4954] bridge0: port 4(batadv0) entered blocking state [ 93.516667][ T4954] bridge0: port 4(batadv0) entered forwarding state [ 93.710972][ T174] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 93.713829][ T174] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 93.722095][ T4954] device batadv0 left promiscuous mode [ 93.731365][ T4954] bridge0: port 4(batadv0) entered disabled state [ 94.677134][ T4963] loop2: detected capacity change from 0 to 131072 [ 94.708111][ T4963] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.728394][ T4963] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.035898][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 95.080398][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 95.099312][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 96.853266][ T5090] loop2: detected capacity change from 0 to 64 [ 96.886523][ T5090] hfs: get root inode failed [ 98.889230][ T5105] loop4: detected capacity change from 0 to 2048 [ 98.972689][ T5105] Alternate GPT is invalid, using primary GPT. [ 98.974519][ T5105] loop4: p1 p2 p3 [ 98.986726][ T4297] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 98.989131][ T4297] Bluetooth: hci0: Injecting HCI hardware error event [ 98.991944][ T4299] Bluetooth: hci0: hardware error 0x00 [ 99.856624][ T5116] loop2: detected capacity change from 0 to 32768 [ 99.900391][ T5116] Dev loop2 SGI disklabel: csum bad, label corrupted [ 100.154422][ T4288] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.161425][ T5121] binder: 5120:5121 tried to acquire reference to desc 0, got 1 instead [ 100.174787][ T5121] binder: 5120:5121 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.181146][ T5121] binder: 5121 RLIMIT_NICE not set [ 100.182593][ T5121] binder: 5121 RLIMIT_NICE not set [ 101.527084][ T5121] binder: 5120:5121 got new transaction with bad transaction stack, transaction 10 has target 5120:5121 [ 101.530438][ T5121] binder: 5120:5121 transaction call to 5120:0 failed 11/29201/-71, size 0-48 line 3114 [ 101.547962][ T24] binder: release 5120:5121 transaction 10 out, still active [ 101.551588][ T24] binder: undelivered TRANSACTION_COMPLETE [ 101.553267][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.810545][ T4339] binder: release 5120:5121 transaction 10 in, still active [ 101.812724][ T4339] binder: send failed reply for transaction 10, target dead [ 101.924726][ T5137] loop0: detected capacity change from 0 to 64 [ 101.987697][ T4299] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 102.042408][ T5137] hfs: get root inode failed [ 103.815959][ T5156] device bridge0 entered promiscuous mode [ 103.928000][ T5156] batman_adv: batadv0: Adding interface: macsec1 [ 103.930949][ T5156] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.969984][ T5156] batman_adv: batadv0: Interface activated: macsec1 [ 104.741503][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 104.824764][ T5147] infiniband syz1: set active [ 104.840075][ T5168] loop3: detected capacity change from 0 to 256 [ 104.842484][ T5168] exfat: Deprecated parameter 'namecase' [ 104.853668][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 104.859650][ T5147] infiniband syz1: added syz_tun [ 104.865587][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 104.869087][ T5168] exfat: Deprecated parameter 'codepage' [ 104.870627][ T5168] exfat: Bad value for 'codepage' [ 104.884485][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 104.908303][ T5147] RDS/IB: syz1: added [ 104.909918][ T5147] smc: adding ib device syz1 with port count 1 [ 104.911739][ T5147] smc: ib device syz1 port 1 has pnetid [ 105.025312][ T5174] loop3: detected capacity change from 0 to 1024 [ 105.030246][ T5174] EXT4-fs: Ignoring removed nobh option [ 105.051530][ T5174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.076471][ T5178] loop2: detected capacity change from 0 to 512 [ 105.085379][ T5178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.092071][ T5174] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 105.121011][ T5178] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 105.123949][ T5178] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.192: invalid indirect mapped block 2683928664 (level 1) [ 105.140619][ T5178] EXT4-fs (loop2): Remounting filesystem read-only [ 105.144253][ T5178] EXT4-fs (loop2): 1 truncate cleaned up [ 105.146050][ T5178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.158502][ T5174] loop3: detected capacity change from 0 to 1024 [ 105.160765][ T5174] EXT4-fs: Ignoring removed orlov option [ 105.189488][ T5174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.227563][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 105.591538][ T5192] loop2: detected capacity change from 0 to 64 [ 105.724612][ T5192] hfs: get root inode failed [ 106.403068][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 106.824778][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 109.691901][ T5238] loop1: detected capacity change from 0 to 64 [ 109.776609][ T5238] hfs: get root inode failed [ 110.633830][ T5244] binder: 5242:5244 ioctl c0306201 20000080 returned -14 [ 110.641997][ T5244] binder: 5242:5244 tried to acquire reference to desc 0, got 1 instead [ 110.662354][ T4346] binder: undelivered transaction 16, process died. [ 110.736180][ T5218] loop0: detected capacity change from 0 to 32768 [ 110.775830][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 110.784513][ T5218] XFS (loop0): Mounting V5 Filesystem [ 110.805429][ T5252] loop4: detected capacity change from 0 to 256 [ 110.822459][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.853346][ T5218] XFS (loop0): Ending clean mount [ 110.895592][ T5218] XFS (loop0): Quotacheck needed: Please wait. [ 110.925361][ T5252] FAT-fs (loop4): Directory bread(block 64) failed [ 110.937766][ T5252] FAT-fs (loop4): Directory bread(block 65) failed [ 110.949164][ T5252] FAT-fs (loop4): Directory bread(block 66) failed [ 110.955346][ T5252] FAT-fs (loop4): Directory bread(block 67) failed [ 110.969956][ T5218] XFS (loop0): Quotacheck: Done. [ 110.970118][ T5252] FAT-fs (loop4): Directory bread(block 68) failed [ 110.981795][ T5252] FAT-fs (loop4): Directory bread(block 69) failed [ 110.984051][ T5252] FAT-fs (loop4): Directory bread(block 70) failed [ 110.995547][ T5252] FAT-fs (loop4): Directory bread(block 71) failed [ 111.004270][ T5252] FAT-fs (loop4): Directory bread(block 72) failed [ 111.012050][ T5252] FAT-fs (loop4): Directory bread(block 73) failed [ 112.442614][ T4300] XFS (loop0): Unmounting Filesystem [ 112.479214][ T5273] binder: 5271:5273 tried to acquire reference to desc 0, got 1 instead [ 113.198050][ T5276] binder: 5271:5276 got transaction with invalid data ptr [ 113.200293][ T5276] binder: 5271:5276 transaction async to 5271:0 failed 25/29201/-14, size 0-24 line 3342 [ 113.232851][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.236333][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.240632][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.243140][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.248058][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.250648][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.254288][ T5138] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.551379][ T5289] loop2: detected capacity change from 0 to 512 [ 113.554328][ T5289] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.559261][ T5289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.108591][ T5293] loop1: detected capacity change from 0 to 64 [ 114.661068][ T5293] hfs: get root inode failed [ 114.726500][ T5289] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.749341][ T5289] EXT4-fs (loop2): 1 truncate cleaned up [ 114.751025][ T5289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.099124][ T5289] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.224: iget: bad i_size value: 5497558147880 [ 115.582204][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 117.503588][ T5304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.582302][ T5304] device batadv_slave_0 entered promiscuous mode [ 117.744751][ T5308] device ip6tnl1 entered promiscuous mode [ 119.766874][ T5335] overlayfs: workdir and upperdir must reside under the same mount [ 120.053534][ T5352] loop1: detected capacity change from 0 to 8 [ 120.933623][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 120.972754][ T5360] netlink: 'syz.2.243': attribute type 4 has an invalid length. [ 120.991939][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.012850][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.023000][ T5359] binder: 5358:5359 tried to acquire reference to desc 0, got 1 instead [ 121.026120][ T5359] binder: 5358:5359 got transaction with invalid data ptr [ 121.032963][ T5359] binder: 5358:5359 transaction async to 5358:0 failed 30/29201/-14, size 0-24 line 3342 [ 121.034339][ T5352] SQUASHFS error: Unable to read directory block [629:2b] [ 121.345776][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.360708][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.399898][ T5138] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.746794][ T5138] usb 1-1: Using ep0 maxpacket: 16 [ 121.813479][ T5138] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 121.852011][ T5138] usb 1-1: config 1 has no interface number 0 [ 121.881485][ T5138] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.926451][ T5138] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.974788][ T5138] usb 1-1: config 1 interface 105 has no altsetting 0 [ 121.982124][ T27] audit: type=1326 audit(121.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 122.191451][ T5138] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 122.194005][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.209014][ T5138] usb 1-1: Product: syz [ 122.210185][ T5138] usb 1-1: Manufacturer: syz [ 122.211408][ T5138] usb 1-1: SerialNumber: syz [ 122.237575][ T27] audit: type=1326 audit(122.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=15 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 122.243374][ T27] audit: type=1326 audit(122.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 122.273080][ T5361] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.275182][ T5361] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.279468][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.281550][ T27] audit: type=1326 audit(122.200:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 122.499291][ T5375] binder: 5374:5375 tried to acquire reference to desc 0, got 1 instead [ 122.503209][ T5375] binder: 5374:5375 got transaction to invalid handle, 1 [ 122.505441][ T5375] binder: 5375:5374 cannot find target node [ 122.512841][ T5375] binder: 5374:5375 transaction async to 0:0 failed 42/29201/-22, size 0-0 line 3054 [ 122.516530][ T4346] binder: undelivered TRANSACTION_COMPLETE [ 122.536795][ T5359] syz.4.245 (5359): drop_caches: 2 [ 122.537182][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.540309][ T4346] binder: undelivered transaction 35, process died. [ 122.580064][ T5377] loop1: detected capacity change from 0 to 256 [ 122.589329][ T5377] exfat: Bad value for 'uid' [ 122.638031][ T5381] loop4: detected capacity change from 0 to 1024 [ 122.641162][ T4471] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.821912][ T5356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.824042][ T5356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.066230][ T5384] hfsplus: bad catalog entry type [ 123.146707][ T39] wlan1: Trigger new scan to find an IBSS to join [ 123.759148][ T5383] block device autoloading is deprecated and will be removed. [ 123.771535][ T5379] md2: error: bitmap file must be a regular file [ 123.782109][ T5138] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 123.785543][ T5138] aqc111: probe of 1-1:1.105 failed with error -71 [ 123.794225][ T5138] usb 1-1: USB disconnect, device number 2 [ 123.804044][ T5070] hfsplus: b-tree write err: -5, ino 4 [ 123.880682][ T5387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.254'. [ 124.180974][ T5397] No such timeout policy "syz1" [ 124.994118][ T5407] loop1: detected capacity change from 0 to 256 [ 125.048282][ T5407] FAT-fs (loop1): Directory bread(block 64) failed [ 125.052824][ T5407] FAT-fs (loop1): Directory bread(block 65) failed [ 125.055467][ T5407] FAT-fs (loop1): Directory bread(block 66) failed [ 125.061999][ T5407] FAT-fs (loop1): Directory bread(block 67) failed [ 125.066193][ T5407] FAT-fs (loop1): Directory bread(block 68) failed [ 125.081393][ T5407] FAT-fs (loop1): Directory bread(block 69) failed [ 125.099906][ T5407] FAT-fs (loop1): Directory bread(block 70) failed [ 125.114649][ T5407] FAT-fs (loop1): Directory bread(block 71) failed [ 125.129378][ T5407] FAT-fs (loop1): Directory bread(block 72) failed [ 125.133487][ T5407] FAT-fs (loop1): Directory bread(block 73) failed [ 125.948893][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.950827][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.003781][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 126.026503][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.368378][ T5414] bridge0: port 3(vlan4) entered blocking state [ 126.389549][ T5414] bridge0: port 3(vlan4) entered disabled state [ 126.406813][ T5414] device vlan4 entered promiscuous mode [ 126.408470][ T5414] device bond0 entered promiscuous mode [ 126.420284][ T5414] device bond_slave_0 entered promiscuous mode [ 126.422223][ T5414] device bond_slave_1 entered promiscuous mode [ 126.441260][ T5421] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 126.444930][ T5421] bridge0: port 3(erspan0) entered disabled state [ 126.446919][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.449058][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.604010][ T5421] bridge0: port 3(erspan0) entered blocking state [ 126.605925][ T5421] bridge0: port 3(erspan0) entered forwarding state [ 126.608810][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.610701][ T5421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.612716][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.614757][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.662296][ T5421] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.787798][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 127.737951][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 127.743225][ T5439] binder: 5435:5439 tried to acquire reference to desc 0, got 1 instead [ 127.762853][ T5439] binder: 5435:5439 ioctl c0306201 20000280 returned -14 [ 127.774149][ T5138] binder: undelivered TRANSACTION_COMPLETE [ 127.775803][ T5138] binder: undelivered TRANSACTION_COMPLETE [ 127.787057][ T5438] bridge1: port 1(ip6gretap1) entered blocking state [ 127.797899][ T5438] bridge1: port 1(ip6gretap1) entered disabled state [ 127.800453][ T5438] device ip6gretap1 entered promiscuous mode [ 127.821618][ T22] binder: undelivered transaction 48, process died. [ 127.823456][ T22] binder: undelivered transaction 47, process died. [ 127.826190][ T5438] device veth3 entered promiscuous mode [ 127.836835][ T5438] bridge1: port 2(veth3) entered blocking state [ 127.838657][ T5438] bridge1: port 2(veth3) entered disabled state [ 128.588251][ T5451] Invalid option length (1047307) for dns_resolver key [ 129.059664][ T5430] loop2: detected capacity change from 0 to 40427 [ 129.067843][ T5447] device batadv0 entered promiscuous mode [ 129.071088][ T5447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.087770][ T5447] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 129.091541][ T5430] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 129.093755][ T5430] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.121207][ T5430] F2FS-fs (loop2): invalid crc value [ 129.157960][ T5430] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.176802][ T4299] Bluetooth: hci1: Malformed Event: 0x48 [ 129.263671][ T5430] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 129.270047][ T5430] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.283394][ T5463] loop4: detected capacity change from 0 to 128 [ 129.477233][ T5463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.177771][ T5480] loop1: detected capacity change from 0 to 1024 [ 130.207718][ T5480] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 130.210620][ T5480] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.231489][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'. [ 130.240504][ T5480] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.284: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.276987][ T5480] EXT4-fs (loop1): 1 orphan inode deleted [ 130.278752][ T5480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.845219][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 130.858300][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 130.866013][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 130.977160][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 131.075916][ T5501] binder: 5500:5501 tried to acquire reference to desc 0, got 1 instead [ 131.086851][ T5501] binder: 5500:5501 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 131.089101][ T5501] binder: 5500:5501 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 131.107936][ T5501] binder: 5501 RLIMIT_NICE not set [ 131.144475][ T5507] binder: cannot allocate buffer: no space left [ 131.144513][ T5507] binder: 5500:5507 transaction async to 5500:0 failed 53/29201/-28, size 5234-0 line 3239 [ 131.987722][ T5138] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.997418][ T5524] binder: BINDER_SET_CONTEXT_MGR already set [ 132.999326][ T5524] binder: 5523:5524 ioctl 4018620d 20000040 returned -16 [ 133.043188][ T5524] binder: 5523:5524 got transaction to invalid handle, 1 [ 133.045128][ T5524] binder: 5524:5523 cannot find target node [ 133.082258][ T5524] binder: 5523:5524 transaction async to 0:0 failed 56/29201/-22, size 88-24 line 3054 [ 133.126694][ T5533] loop2: detected capacity change from 0 to 512 [ 133.249982][ T5533] rdma_rxe: rxe_register_device failed with error -23 [ 133.252117][ T5524] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.270378][ T5533] rdma_rxe: failed to add syz_tun [ 134.600734][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 134.605891][ T5545] binder: 5544:5545 tried to acquire reference to desc 0, got 1 instead [ 134.630874][ T5545] binder: 5544:5545 got transaction with invalid data ptr [ 134.632890][ T5545] binder: 5544:5545 transaction async to 5544:0 failed 62/29201/-14, size 0-24 line 3342 [ 134.656274][ T5545] binder: 5544:5545 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 134.684042][ T5545] binder: 5545 RLIMIT_NICE not set [ 134.685524][ T5545] binder: 5545 RLIMIT_NICE not set [ 134.704582][ T5545] binder: 5545 RLIMIT_NICE not set [ 134.706225][ T5545] binder_alloc: 5544: binder_alloc_buf, no vma [ 134.708284][ T5545] binder: cannot allocate buffer: vma cleared, target dead or dying [ 134.708315][ T5545] binder: 5544:5545 transaction reply to 5544:5545 failed 63/29189/-3, size 0-0 line 3239 [ 134.709011][ T5547] netlink: 48 bytes leftover after parsing attributes in process `syz.3.302'. [ 134.710676][ T5545] binder: send failed reply for transaction 61 to 5544:5545 [ 134.738486][ T5138] binder: undelivered TRANSACTION_COMPLETE [ 134.740118][ T5138] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.741802][ T5138] binder: undelivered TRANSACTION_ERROR: 29189 [ 135.746908][ T5560] loop1: detected capacity change from 0 to 256 [ 135.975454][ T5560] FAT-fs (loop1): Directory bread(block 64) failed [ 135.977671][ T5560] FAT-fs (loop1): Directory bread(block 65) failed [ 135.980024][ T5560] FAT-fs (loop1): Directory bread(block 66) failed [ 135.981978][ T5560] FAT-fs (loop1): Directory bread(block 67) failed [ 135.984252][ T5560] FAT-fs (loop1): Directory bread(block 68) failed [ 135.986389][ T5560] FAT-fs (loop1): Directory bread(block 69) failed [ 135.988832][ T5560] FAT-fs (loop1): Directory bread(block 70) failed [ 135.990951][ T5560] FAT-fs (loop1): Directory bread(block 71) failed [ 135.993334][ T5560] FAT-fs (loop1): Directory bread(block 72) failed [ 135.995314][ T5560] FAT-fs (loop1): Directory bread(block 73) failed [ 140.363684][ T5603] loop1: detected capacity change from 0 to 256 [ 140.433020][ T5605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 140.435562][ T5605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 140.473471][ T5603] FAT-fs (loop1): Directory bread(block 64) failed [ 140.475318][ T5603] FAT-fs (loop1): Directory bread(block 65) failed [ 140.487516][ T5605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 140.490026][ T5605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 140.506895][ T5603] FAT-fs (loop1): Directory bread(block 66) failed [ 140.508706][ T5603] FAT-fs (loop1): Directory bread(block 67) failed [ 140.553989][ T5603] FAT-fs (loop1): Directory bread(block 68) failed [ 140.555759][ T5603] FAT-fs (loop1): Directory bread(block 69) failed [ 140.562325][ T5610] loop4: detected capacity change from 0 to 512 [ 140.564102][ T5603] FAT-fs (loop1): Directory bread(block 70) failed [ 140.578797][ T5603] FAT-fs (loop1): Directory bread(block 71) failed [ 140.579214][ T5610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.580654][ T5603] FAT-fs (loop1): Directory bread(block 72) failed [ 140.660063][ T5611] loop3: detected capacity change from 0 to 64 [ 140.932519][ T5611] syz.3.318: attempt to access beyond end of device [ 140.932519][ T5611] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 140.936671][ T5611] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 141.065043][ T5611] Trying to free block not in datazone [ 141.409594][ T5603] FAT-fs (loop1): Directory bread(block 73) failed [ 141.567709][ T5610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.849560][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 142.382654][ T5636] ptrace attach of "./syz-executor exec"[4300] was attempted by ""[5636] [ 143.543316][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 143.578566][ T5640] netlink: 'syz.0.328': attribute type 5 has an invalid length. [ 143.580748][ T5640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 143.618806][ T5640] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 143.621304][ T5640] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 143.867938][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 144.002763][ T5640] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 144.215432][ T5640] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 144.229144][ T5640] device geneve2 entered promiscuous mode [ 144.570079][ T5649] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 144.573005][ T5646] binder: 5643:5646 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 144.609679][ T5646] binder: 5643:5646 got transaction to invalid handle, 1 [ 144.616998][ T5646] binder_debug: 1 callbacks suppressed [ 144.617123][ T5646] binder: 5646:5643 cannot find target node [ 144.629531][ T5646] binder: 5643:5646 transaction call to 0:0 failed 66/29201/-22, size 0-0 line 3054 [ 144.661323][ T5646] binder: 5643:5646 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 144.664866][ T5646] binder: 5646 RLIMIT_NICE not set [ 144.666309][ T5646] binder: 5643:5646 ioctl c0306201 20000240 returned -11 [ 144.712294][ T5646] binder: 5643:5646 got reply transaction with no transaction stack [ 144.732589][ T5646] binder: 5643:5646 transaction reply to 0:0 failed 67/29201/-71, size 16384-0 line 2955 [ 144.796681][ T5138] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.798732][ T5138] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.825046][ T5649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.939115][ T5665] loop1: detected capacity change from 0 to 164 [ 145.011771][ T5665] rock: directory entry would overflow storage [ 145.022740][ T5665] rock: sig=0x5053, size=7, remaining=4 [ 145.031469][ T5665] isofs_fill_super: root inode is not a directory. Corrupted media? [ 146.429385][ T5679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.340'. [ 148.128669][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 148.205623][ T5705] binder: 5704:5705 tried to acquire reference to desc 0, got 1 instead [ 149.030212][ T5705] binder: 5704:5705 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 149.033901][ T5705] binder: 5705 RLIMIT_NICE not set [ 149.035333][ T5705] binder: 5705 RLIMIT_NICE not set [ 149.074452][ T5705] binder: 5705 RLIMIT_NICE not set [ 149.178411][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 149.180139][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 149.181697][ T4449] binder: undelivered transaction 73, process died. [ 149.223957][ T5718] loop0: detected capacity change from 0 to 512 [ 149.597071][ T5719] binder_user_error: 1 callbacks suppressed [ 149.597225][ T5719] binder: 5717:5719 tried to acquire reference to desc 0, got 1 instead [ 150.052150][ T5719] binder: 5717:5719 got transaction with invalid data ptr [ 150.056822][ T5719] binder: 5717:5719 transaction async to 5717:0 failed 79/29201/-14, size 0-24 line 3342 [ 150.060686][ T5718] rdma_rxe: already configured on syz_tun [ 150.065215][ T5719] binder: 5717:5719 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 150.073723][ T5719] binder: 5719 RLIMIT_NICE not set [ 150.075181][ T5719] binder: 5719 RLIMIT_NICE not set [ 150.078341][ T5719] binder: 5719 RLIMIT_NICE not set [ 150.079878][ T5719] binder_alloc: 5717: binder_alloc_buf, no vma [ 150.081537][ T5719] binder: cannot allocate buffer: vma cleared, target dead or dying [ 150.081569][ T5719] binder: 5717:5719 transaction reply to 5717:5719 failed 80/29189/-3, size 0-0 line 3239 [ 150.101946][ T5719] binder: send failed reply for transaction 78 to 5717:5719 [ 150.119677][ T4402] binder: undelivered TRANSACTION_COMPLETE [ 150.121240][ T4402] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.124802][ T4402] binder: undelivered TRANSACTION_ERROR: 29189 [ 150.136439][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 150.176898][ T5726] netlink: 48 bytes leftover after parsing attributes in process `syz.2.354'. [ 150.184921][ T4402] binder: undelivered TRANSACTION_ERROR: 29190 [ 150.345045][ T5734] loop3: detected capacity change from 0 to 4197 [ 150.355979][ T5734] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 150.391810][ T5734] syz.3.355: attempt to access beyond end of device [ 150.391810][ T5734] loop3: rw=12288, sector=8192, nr_sectors = 8 limit=4197 [ 152.070418][ T5734] syz.3.355: attempt to access beyond end of device [ 152.070418][ T5734] loop3: rw=12288, sector=12288, nr_sectors = 8 limit=4197 [ 152.074131][ T5734] syz.3.355: attempt to access beyond end of device [ 152.074131][ T5734] loop3: rw=12288, sector=12288, nr_sectors = 8 limit=4197 [ 152.106726][ T5734] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-5) [ 153.174057][ T5755] netlink: 'syz.4.361': attribute type 7 has an invalid length. [ 153.176363][ T5755] netlink: 'syz.4.361': attribute type 8 has an invalid length. [ 154.944221][ T5771] loop2: detected capacity change from 0 to 64 [ 155.205101][ T5771] syz.2.374: attempt to access beyond end of device [ 155.205101][ T5771] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 155.209091][ T5771] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 155.344955][ T5771] Trying to free block not in datazone [ 158.747577][ T5791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.822654][ T5788] lo speed is unknown, defaulting to 1000 [ 159.825210][ T5788] lo speed is unknown, defaulting to 1000 [ 160.001903][ T5788] lo speed is unknown, defaulting to 1000 [ 161.432219][ T5788] infiniband sz1: set down [ 161.433648][ T22] lo speed is unknown, defaulting to 1000 [ 161.435476][ T5788] infiniband sz1: added lo [ 161.459590][ T5788] RDS/IB: sz1: added [ 161.460829][ T5788] smc: adding ib device sz1 with port count 1 [ 161.516943][ T5788] smc: ib device sz1 port 1 has pnetid [ 162.900460][ T5828] loop4: detected capacity change from 0 to 64 [ 163.134205][ T5828] syz.4.380: attempt to access beyond end of device [ 163.134205][ T5828] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 163.138283][ T5828] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 163.265832][ T5828] Trying to free block not in datazone [ 163.918747][ T4367] lo speed is unknown, defaulting to 1000 [ 163.921742][ T5788] lo speed is unknown, defaulting to 1000 [ 163.975316][ T5788] lo speed is unknown, defaulting to 1000 [ 164.033852][ T5788] lo speed is unknown, defaulting to 1000 [ 164.204523][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 164.222520][ T5834] netlink: 'syz.4.392': attribute type 5 has an invalid length. [ 164.232836][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'. [ 164.240344][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 164.242819][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 164.245139][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 164.247584][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 164.256695][ T5834] device geneve2 entered promiscuous mode [ 165.202125][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 165.203872][ T4299] Bluetooth: hci1: command 0x0406 tx timeout [ 165.289705][ T5788] lo speed is unknown, defaulting to 1000 [ 165.373525][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 166.094302][ T5788] lo speed is unknown, defaulting to 1000 [ 168.008807][ T5852] loop4: detected capacity change from 0 to 4197 [ 168.015412][ T5852] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 168.124751][ T5865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.505824][ T5852] syz.4.386: attempt to access beyond end of device [ 169.505824][ T5852] loop4: rw=12288, sector=8192, nr_sectors = 8 limit=4197 [ 169.527193][ T5852] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 170.748702][ T4288] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.935717][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 171.938986][ T5885] netlink: 'syz.1.397': attribute type 5 has an invalid length. [ 171.941808][ T5885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 171.948058][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 171.950353][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 171.952664][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 171.954959][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 171.958104][ T5885] device geneve2 entered promiscuous mode [ 172.702313][ T5901] netlink: 96 bytes leftover after parsing attributes in process `syz.1.400'. [ 172.803744][ T5907] rdma_rxe: rxe_register_device failed with error -23 [ 172.805814][ T5907] rdma_rxe: failed to add lo [ 172.811218][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 172.900958][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.907069][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.925441][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.938342][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.726092][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.152895][ T5911] device batadv0 left promiscuous mode [ 176.257362][ T5911] bond0: (slave macvlan2): Releasing backup interface [ 176.337699][ T5929] loop0: detected capacity change from 0 to 4096 [ 176.343884][ T5929] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 176.503720][ T5929] ntfs3: loop0: Failed to load $Secure. [ 177.372680][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 178.526640][ T5958] capability: warning: `syz.0.415' uses deprecated v2 capabilities in a way that may be insecure [ 180.030421][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.033182][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.036326][ T5981] binder: 5975:5981 got transaction to invalid handle, 1 [ 182.038760][ T5981] binder: 5981:5975 cannot find target node [ 182.040479][ T5981] binder: 5975:5981 transaction call to 0:0 failed 84/29201/-22, size 0-0 line 3054 [ 182.074482][ T5979] binder: 5975:5979 tried to acquire reference to desc 0, got 1 instead [ 182.102156][ T5984] binder: 5975:5984 got reply transaction with no transaction stack [ 182.135361][ T5984] binder: 5975:5984 transaction reply to 0:0 failed 86/29201/-71, size 0-0 line 2955 [ 182.179221][ T4402] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.404873][ T5988] netlink: 'syz.4.426': attribute type 4 has an invalid length. [ 182.771287][ T5988] netlink: 'syz.4.426': attribute type 4 has an invalid length. [ 183.387252][ T5998] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 183.410083][ T5998] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 184.264199][ T6009] 9pnet_fd: Insufficient options for proto=fd [ 184.273330][ T6009] loop3: detected capacity change from 0 to 512 [ 184.276532][ T6009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.371395][ T6009] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 185.708415][ T6027] loop1: detected capacity change from 0 to 16 [ 185.710933][ T6027] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 186.130226][ T6025] binder: 6022:6025 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 186.171362][ T6025] binder: 6022:6025 got transaction to invalid handle, 1 [ 186.173254][ T6025] binder: 6025:6022 cannot find target node [ 186.174803][ T6025] binder: 6022:6025 transaction call to 0:0 failed 89/29201/-22, size 0-0 line 3054 [ 187.377712][ T6052] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 187.400453][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.402459][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.484636][ T6056] binder: 6055:6056 tried to acquire reference to desc 0, got 1 instead [ 187.524820][ T6056] binder: 6055:6056 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 187.537355][ T6045] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 187.543658][ T6056] binder: 6056 RLIMIT_NICE not set [ 187.545129][ T6056] binder: 6056 RLIMIT_NICE not set [ 187.552020][ T6056] binder: 6056 RLIMIT_NICE not set [ 187.553529][ T6056] binder_alloc: 6055: binder_alloc_buf, no vma [ 187.560133][ T6056] binder: cannot allocate buffer: vma cleared, target dead or dying [ 187.560165][ T6056] binder: 6055:6056 transaction reply to 6055:6056 failed 95/29189/-3, size 0-0 line 3239 [ 187.565178][ T6056] binder: send failed reply for transaction 94 to 6055:6056 [ 187.626820][ T6065] binder: 6055:6065 got reply transaction with no transaction stack [ 188.032755][ T6065] binder: 6055:6065 transaction reply to 0:0 failed 98/29201/-71, size 0-0 line 2955 [ 188.312287][ T4367] binder: undelivered TRANSACTION_COMPLETE [ 188.313994][ T4367] binder: undelivered TRANSACTION_ERROR: 29189 [ 188.334897][ T4367] binder: undelivered TRANSACTION_ERROR: 29190 [ 188.459927][ T6062] binder: 6061:6062 tried to acquire reference to desc 0, got 1 instead [ 188.468466][ T6062] binder: release 6061:6062 transaction 101 out, still active [ 188.479843][ T6062] binder: undelivered TRANSACTION_COMPLETE [ 188.488070][ T6062] binder: 6061:6062 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.491569][ T6062] binder: 6062 RLIMIT_NICE not set [ 188.549154][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.551849][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.554591][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.557368][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.559868][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.562459][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.565296][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.568011][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.570604][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.573105][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 188.600535][ T6062] binder: 6062 RLIMIT_NICE not set [ 189.969185][ T6086] Invalid ELF header magic: != ELF [ 190.855324][ T4449] binder: release 6061:6062 transaction 101 in, still active [ 192.743710][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.749484][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.730443][ T6115] netlink: 'syz.4.463': attribute type 5 has an invalid length. [ 193.772000][ T6120] loop0: detected capacity change from 0 to 512 [ 193.774381][ T6120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.774789][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.795946][ T6120] EXT4-fs: Mount option(s) incompatible with ext3 [ 193.797030][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.811701][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.816901][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.833382][ T6123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.838203][ T6129] 9pnet_fd: Insufficient options for proto=fd [ 194.870461][ T6129] loop2: detected capacity change from 0 to 512 [ 194.877073][ T6129] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.916340][ T6129] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 195.861026][ T6145] binder: 6144:6145 tried to acquire reference to desc 0, got 1 instead [ 195.875308][ T6145] binder: 6144:6145 sending u0000000000000002 node 107, cookie mismatch 0000000002000000 != 0000000000000000 [ 195.919921][ T6145] binder_debug: 1 callbacks suppressed [ 195.919936][ T6145] binder: 6145:6144 translate binder failed [ 195.923724][ T6145] binder: 6144:6145 transaction call to 6144:0 failed 113/29201/-22, size 80-24 line 3383 [ 195.980096][ T4367] binder: undelivered TRANSACTION_COMPLETE [ 195.981825][ T4367] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.085409][ T6150] Invalid ELF header magic: != ELF [ 196.913518][ T6134] loop0: detected capacity change from 0 to 32768 [ 196.994412][ T6134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.480 (6134) [ 197.006790][ T24] binder: undelivered transaction 106, process died. [ 197.866017][ T6134] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.873893][ T6134] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 197.903284][ T6134] BTRFS info (device loop0): force clearing of disk cache [ 197.905479][ T6134] BTRFS info (device loop0): setting nodatacow, compression disabled [ 197.908196][ T6134] BTRFS info (device loop0): enabling auto defrag [ 197.910090][ T6134] BTRFS info (device loop0): max_inline at 0 [ 197.911934][ T6134] BTRFS info (device loop0): use no compression [ 197.913583][ T6134] BTRFS info (device loop0): using free space tree [ 197.980286][ T6157] loop4: detected capacity change from 0 to 512 [ 198.100434][ T6134] BTRFS error (device loop0): open_ctree failed: -12 [ 198.113580][ T6157] EXT2-fs (loop4): error: revision level too high, forcing read-only mode [ 198.121157][ T6157] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 199.422560][ T6193] netlink: 'syz.3.479': attribute type 5 has an invalid length. [ 199.441331][ T6194] loop2: detected capacity change from 0 to 8 [ 199.524328][ T6194] SQUASHFS error: zlib decompression failed, data probably corrupt [ 199.529585][ T4471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4471) [ 199.529971][ T6194] SQUASHFS error: Failed to read block 0x9b: -5 [ 199.555149][ T6194] SQUASHFS error: Unable to read metadata cache entry [99] [ 199.559749][ T6194] SQUASHFS error: Unable to read inode 0x127 [ 201.091646][ T6194] loop2: detected capacity change from 0 to 2048 [ 201.189707][ T6194] loop2: p2 p3 < > p4 < p5 > [ 201.191144][ T6194] loop2: partition table partially beyond EOD, truncated [ 201.193935][ T6194] loop2: p3 start 4284289 is beyond EOD, truncated [ 202.764484][ T6228] loop3: detected capacity change from 0 to 16 [ 202.810484][ T6228] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.850742][ T6228] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 202.853649][ T6228] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 202.877841][ T6228] syz.3.489: attempt to access beyond end of device [ 202.877841][ T6228] loop3: rw=524288, sector=1049264, nr_sectors = 32 limit=16 [ 202.919508][ T6228] syz.3.489: attempt to access beyond end of device [ 202.919508][ T6228] loop3: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 202.923513][ T6228] syz.3.489: attempt to access beyond end of device [ 202.923513][ T6228] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 202.927358][ T6228] syz.3.489: attempt to access beyond end of device [ 202.927358][ T6228] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 202.931132][ T6228] syz.3.489: attempt to access beyond end of device [ 202.931132][ T6228] loop3: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 203.962028][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 204.033245][ T6242] fuse: Unknown parameter 'fd18446744073709551615' [ 204.038550][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 204.068066][ T5173] udevd[5173]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 204.086187][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 204.092462][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 204.100931][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 205.517553][ T6252] binder: 6251:6252 tried to acquire reference to desc 0, got 1 instead [ 205.531580][ T6252] binder: 6251:6252 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 205.561444][ T6252] binder: 6252 RLIMIT_NICE not set [ 205.566390][ T6252] binder: 6252 RLIMIT_NICE not set [ 205.573372][ T6252] binder: 6252 RLIMIT_NICE not set [ 205.590783][ T6252] binder_alloc: 6251: binder_alloc_buf size 61696 failed, no address space [ 205.602275][ T6252] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 205.622828][ T6252] binder: cannot allocate buffer: no space left [ 205.622874][ T6252] binder: 6251:6252 transaction reply to 6251:6252 failed 119/29201/-28, size 61695-0 line 3239 [ 205.628538][ T6252] binder: send failed reply for transaction 118 to 6251:6252 [ 205.652999][ T4367] binder: undelivered TRANSACTION_ERROR: 29190 [ 205.655020][ T4367] binder: undelivered TRANSACTION_COMPLETE [ 205.658522][ T4367] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.364045][ T6278] loop4: detected capacity change from 0 to 8 [ 207.365706][ T6269] binder: 6267:6269 tried to acquire reference to desc 0, got 1 instead [ 207.377508][ T6278] SQUASHFS error: zlib decompression failed, data probably corrupt [ 207.379605][ T6278] SQUASHFS error: Failed to read block 0x9b: -5 [ 207.381268][ T6278] SQUASHFS error: Unable to read metadata cache entry [99] [ 207.383272][ T6278] SQUASHFS error: Unable to read inode 0x127 [ 207.385124][ T4449] binder: release 6267:6269 transaction 125 out, still active [ 207.387407][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 207.389123][ T4449] binder: undelivered TRANSACTION_COMPLETE [ 207.424443][ T6281] bridge0: port 4(erspan0) entered blocking state [ 207.426472][ T6281] bridge0: port 4(erspan0) entered disabled state [ 207.429318][ T6281] device erspan0 entered promiscuous mode [ 207.431249][ T6281] bridge0: port 4(erspan0) entered blocking state [ 207.432940][ T6281] bridge0: port 4(erspan0) entered forwarding state [ 207.438643][ T6183] binder: undelivered transaction 124, process died. [ 207.541594][ T6278] loop4: detected capacity change from 0 to 2048 [ 209.394549][ T6278] loop4: p2 p3 < > p4 < p5 > [ 209.395974][ T6278] loop4: partition table partially beyond EOD, truncated [ 209.427568][ T6278] loop4: p3 start 4284289 is beyond EOD, truncated [ 210.583626][ T6314] Dead loop on virtual device ip6_vti0, fix it urgently! [ 210.794298][ T6320] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 210.850409][ T6320] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 211.729599][ T6338] bridge0: port 3(erspan0) entered blocking state [ 211.731519][ T6338] bridge0: port 3(erspan0) entered disabled state [ 211.744678][ T6338] device erspan0 entered promiscuous mode [ 211.753262][ T6338] bridge0: port 3(erspan0) entered blocking state [ 211.755179][ T6338] bridge0: port 3(erspan0) entered forwarding state [ 211.833202][ T6337] loop1: detected capacity change from 0 to 4096 [ 211.938987][ T6343] __nla_validate_parse: 43 callbacks suppressed [ 211.939001][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 212.028514][ T6337] ntfs: volume version 3.1. [ 214.273881][ T6361] fuse: Unknown parameter 'fd18446744073709551615' [ 215.180633][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 217.376270][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 219.371133][ T6405] netlink: 'syz.4.539': attribute type 10 has an invalid length. [ 219.383929][ T6405] device wlan1 entered promiscuous mode [ 219.386057][ T6405] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.411242][ T6416] fuse: Unknown parameter 'fd18446744073709551615' [ 219.413317][ T6406] bridge0: port 4(syz_tun) entered blocking state [ 219.415427][ T6406] bridge0: port 4(syz_tun) entered disabled state [ 219.420061][ T6406] device syz_tun entered promiscuous mode [ 219.421917][ T6406] bridge0: port 4(syz_tun) entered blocking state [ 219.423749][ T6406] bridge0: port 4(syz_tun) entered forwarding state [ 219.498132][ T6408] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 223.045635][ T6432] bridge0: port 5(batadv0) entered blocking state [ 223.071354][ T6432] bridge0: port 5(batadv0) entered disabled state [ 223.079502][ T6451] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 225.254477][ T6479] device vlan3 entered promiscuous mode [ 225.457919][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 228.620524][ T6515] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 228.745535][ T6521] batman_adv: batadv0: Adding interface: ip6gretap1 [ 228.748211][ T6521] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.755234][ T6521] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 229.157593][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.321325][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.333781][ T6533] loop1: detected capacity change from 0 to 32768 [ 231.340322][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.342439][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.351660][ T6521] batman_adv: batadv0: Removing interface: ip6gretap1 [ 231.378362][ T6533] Dev loop1 SGI disklabel: csum bad, label corrupted [ 231.461474][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 231.477657][ T6540] xt_bpf: check failed: parse error [ 231.650150][ T6545] fuse: Bad value for 'fd' [ 231.661149][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'. [ 239.501147][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 240.460625][ T6615] netlink: 'syz.1.606': attribute type 4 has an invalid length. [ 241.500320][ T6634] binder: 6633:6634 tried to acquire reference to desc 0, got 1 instead [ 241.504693][ T6634] binder: 6633:6634 got transaction with invalid data ptr [ 241.511987][ T6634] binder_debug: 1 callbacks suppressed [ 241.511998][ T6634] binder: 6633:6634 transaction async to 6633:0 failed 130/29201/-14, size 0-24 line 3342 [ 242.539337][ T4449] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.579586][ T6634] syz.1.615 (6634): drop_caches: 2 [ 242.762226][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 243.749503][ T6677] loop1: detected capacity change from 0 to 512 [ 244.639214][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 246.999095][ T4296] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 247.065706][ T4296] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 248.987281][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.989763][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.273723][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 250.485314][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.501369][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.534054][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.537193][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.539648][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.541862][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.555786][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 252.550184][ T6749] lo speed is unknown, defaulting to 1000 [ 252.666765][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 252.747621][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 252.880353][ T6788] loop3: detected capacity change from 0 to 256 [ 253.058712][ T6788] FAT-fs (loop3): Directory bread(block 64) failed [ 253.060822][ T6788] FAT-fs (loop3): Directory bread(block 65) failed [ 253.063280][ T6788] FAT-fs (loop3): Directory bread(block 66) failed [ 253.065417][ T6788] FAT-fs (loop3): Directory bread(block 67) failed [ 253.067930][ T6788] FAT-fs (loop3): Directory bread(block 68) failed [ 253.069927][ T6788] FAT-fs (loop3): Directory bread(block 69) failed [ 253.072313][ T6788] FAT-fs (loop3): Directory bread(block 70) failed [ 253.074191][ T6788] FAT-fs (loop3): Directory bread(block 71) failed [ 253.076596][ T6788] FAT-fs (loop3): Directory bread(block 72) failed [ 253.078609][ T6788] FAT-fs (loop3): Directory bread(block 73) failed [ 253.791898][ T6749] chnl_net:caif_netlink_parms(): no params data found [ 253.852111][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.856463][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.876633][ T6749] device bridge_slave_0 entered promiscuous mode [ 253.906766][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.659123][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.661807][ T6749] device bridge_slave_1 entered promiscuous mode [ 254.756733][ T4299] Bluetooth: hci0: command 0x041b tx timeout [ 254.830587][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.849464][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.112722][ T6749] team0: Port device team_slave_0 added [ 255.142580][ T6749] team0: Port device team_slave_1 added [ 255.220043][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.397770][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.426240][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.440575][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.449099][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.522306][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.957152][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 258.608365][ T6749] device hsr_slave_0 entered promiscuous mode [ 258.657519][ T6749] device hsr_slave_1 entered promiscuous mode [ 258.706728][ T6749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.708825][ T6749] Cannot create hsr debugfs directory [ 258.955746][ T6749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.988001][ T4299] Bluetooth: hci0: command 0x0419 tx timeout [ 259.008390][ T6749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.015862][ T6836] loop3: detected capacity change from 0 to 40427 [ 259.033195][ T6836] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 259.035404][ T6836] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 259.048957][ T6749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.070072][ T6836] F2FS-fs (loop3): invalid crc value [ 259.079252][ T6749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.244799][ T6836] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.273606][ T6858] xt_nat: multiple ranges no longer supported [ 261.438698][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.516731][ T6875] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 261.563296][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 261.569404][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.587025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.589712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.608433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.620910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.635340][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.637431][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.667862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.685897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.692199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.700958][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.702936][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.705313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.715111][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.898677][ T6875] bond1 (unregistering): Released all slaves [ 261.911103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.915819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.919125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.922062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.924939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.928122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.931794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.935935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.944744][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.264085][ T6749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.164332][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.166455][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.171450][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.650076][ T6925] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 266.758464][ T6925] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 266.842202][ T6925] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 266.915048][ T6925] bond1 (unregistering): Released all slaves [ 267.758567][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.761384][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.819709][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.822520][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.852826][ T6749] device veth0_vlan entered promiscuous mode [ 267.859019][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.862287][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.880411][ T6749] device veth1_vlan entered promiscuous mode [ 267.931974][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.935091][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.945283][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.955661][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.965343][ T6749] device veth0_macvtap entered promiscuous mode [ 267.980495][ T6749] device veth1_macvtap entered promiscuous mode [ 268.054465][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.099907][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.104037][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.878072][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.288700][ T6946] bond0: (slave rose0): Enslaving as an active interface with an up link [ 269.307771][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.310520][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.313376][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.318115][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.351258][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 269.368753][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.371724][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.389810][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.392716][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.422673][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.440412][ T6953] bond0: (slave rose0): Releasing backup interface [ 269.635083][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.215510][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.606256][ T6749] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.612747][ T6749] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.615205][ T6749] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.646719][ T6749] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.774213][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.779777][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.784543][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.000208][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.742669][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.907104][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.984703][ T6982] loop3: detected capacity change from 0 to 2048 [ 272.090210][ T6991] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 272.255750][ T6994] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.356232][ T6991] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 272.369491][ T7000] loop5: detected capacity change from 0 to 256 [ 272.371959][ T7000] exfat: Bad value for 'uid' [ 272.374248][ T6982] syz.3.712 sent an empty control message without MSG_MORE. [ 272.390851][ T6991] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 272.557639][ T6991] bond1 (unregistering): Released all slaves [ 276.405996][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 276.764850][ T7072] netlink: 'syz.2.730': attribute type 2 has an invalid length. [ 276.783476][ T7068] loop3: detected capacity change from 0 to 4096 [ 276.850421][ T7068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.879945][ T7068] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 276.952357][ T7068] EXT4-fs (loop3): unmounting filesystem. [ 279.679427][ T7105] netlink: 136 bytes leftover after parsing attributes in process `syz.3.740'. [ 282.161315][ T7155] loop5: detected capacity change from 0 to 512 [ 282.177505][ T7155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.179336][ T7155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.337339][ T7155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 283.631241][ T7176] trusted_key: encrypted_key: insufficient parameters specified [ 283.647720][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 285.504359][ T7199] loop5: detected capacity change from 0 to 4096 [ 286.063991][ T7199] ntfs: volume version 3.1. [ 288.640400][ T7225] loop5: detected capacity change from 0 to 1024 [ 288.642785][ T7225] EXT4-fs: Ignoring removed orlov option [ 289.816441][ T7225] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 289.881125][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 289.883844][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 290.846456][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 291.834711][ T7264] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 292.228763][ T7258] loop5: detected capacity change from 0 to 32768 [ 295.113492][ T7298] netlink: 'syz.4.795': attribute type 2 has an invalid length. [ 299.785283][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.807'. [ 299.792157][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.807'. [ 301.075972][ T7415] 9pnet_fd: Insufficient options for proto=fd [ 302.594051][ T7431] device gtp0 entered promiscuous mode [ 304.926266][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.826'. [ 305.620255][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.826'. [ 305.708374][ T7462] loop5: detected capacity change from 0 to 2048 [ 305.774358][ T7462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.617099][ T7470] xt_bpf: check failed: parse error [ 309.915937][ T7511] loop5: detected capacity change from 0 to 128 [ 311.241371][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.243315][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.841891][ T5062] kworker/u4:23: attempt to access beyond end of device [ 311.841891][ T5062] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 313.259796][ T7523] batman_adv: batadv0: Adding interface: dummy0 [ 313.261762][ T7523] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.320464][ T7523] batman_adv: batadv0: Interface activated: dummy0 [ 313.361984][ T7523] batadv0: mtu less than device minimum [ 313.373090][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.379426][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.385546][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.391508][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.397412][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.403464][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.409398][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.415161][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.420992][ T7523] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 317.188537][ T7571] loop5: detected capacity change from 0 to 512 [ 317.686713][ T7571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 317.900653][ T7571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.859: inode #64: comm syz.5.859: iget: illegal inode # [ 317.905636][ T7571] EXT4-fs (loop5): Remounting filesystem read-only [ 317.907591][ T7571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.859: error while reading EA inode 64 err=-117 [ 317.924099][ T7571] EXT4-fs (loop5): Remounting filesystem read-only [ 317.925934][ T7571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.859: inode #64: comm syz.5.859: iget: illegal inode # [ 317.930413][ T7571] EXT4-fs (loop5): Remounting filesystem read-only [ 317.932239][ T7571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.859: error while reading EA inode 64 err=-117 [ 317.936298][ T7571] EXT4-fs (loop5): Remounting filesystem read-only [ 318.162071][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 319.242700][ T7592] netlink: 'syz.4.867': attribute type 8 has an invalid length. [ 322.271007][ T7618] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 325.911942][ T7654] tipc: Started in network mode [ 325.913571][ T7654] tipc: Node identity ac1414aa, cluster identity 4711 [ 325.917532][ T7654] tipc: Enabled bearer , priority 10 [ 325.923133][ T7654] tipc: Enabled bearer , priority 0 [ 327.977196][ T6182] tipc: Node number set to 2886997162 [ 328.075493][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 330.286756][ T4297] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 330.289540][ T4297] Bluetooth: hci2: Injecting HCI hardware error event [ 330.293085][ T4299] Bluetooth: hci2: hardware error 0x00 [ 330.310508][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.5.898'. [ 330.371689][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.5.898'. [ 330.383653][ T7696] net_ratelimit: 10 callbacks suppressed [ 330.383667][ T7696] dccp_close: ABORT with 32 bytes unread [ 332.324631][ T7715] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 332.596825][ T4299] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 334.272728][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.911'. [ 334.275273][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.911'. [ 334.323431][ T7731] netlink: 'syz.5.911': attribute type 10 has an invalid length. [ 334.342706][ T7731] bridge0: port 3(team0) entered blocking state [ 334.352851][ T7731] bridge0: port 3(team0) entered disabled state [ 334.368598][ T7731] device team0 entered promiscuous mode [ 334.370267][ T7731] device team_slave_0 entered promiscuous mode [ 334.387980][ T7731] device team_slave_1 entered promiscuous mode [ 334.402757][ T7731] bridge0: port 3(team0) entered blocking state [ 334.404854][ T7731] bridge0: port 3(team0) entered forwarding state [ 341.834290][ T27] audit: type=1326 audit(341.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.850054][ T27] audit: type=1326 audit(341.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.859375][ T27] audit: type=1326 audit(341.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.865403][ T27] audit: type=1326 audit(341.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.872162][ T27] audit: type=1326 audit(341.790:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.879317][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.884116][ T7805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.888844][ T27] audit: type=1326 audit(341.800:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4758ed4 code=0x7ffc0000 [ 341.892771][ T7805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.894671][ T27] audit: type=1326 audit(341.800:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.903308][ T27] audit: type=1326 audit(341.800:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.909471][ T27] audit: type=1326 audit(341.800:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.910617][ T7805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.915138][ T27] audit: type=1326 audit(341.800:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x7ffc0000 [ 341.980433][ T7802] tipc: Started in network mode [ 341.981896][ T7802] tipc: Node identity ac1414aa, cluster identity 4711 [ 341.985194][ T7802] tipc: Enabled bearer , priority 10 [ 341.991328][ T7809] tipc: Enabled bearer , priority 0 [ 342.699128][ T7832] loop5: detected capacity change from 0 to 128 [ 343.148551][ T6183] tipc: Node number set to 2886997162 [ 343.179281][ T7843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.075379][ T7891] binder: 7890:7891 tried to acquire reference to desc 0, got 1 instead [ 348.093512][ T7891] binder: 7890:7891 got new transaction with bad transaction stack, transaction 135 has target 7890:0 [ 348.129892][ T7891] binder: 7890:7891 transaction call to 7890:0 failed 136/29201/-71, size 0-0 line 3114 [ 348.142475][ T6182] binder: release 7890:7891 transaction 135 out, still active [ 348.264266][ T6182] binder: send failed reply for transaction 135, target dead [ 349.381893][ T7910] loop5: detected capacity change from 0 to 512 [ 349.460526][ T7910] EXT2-fs (loop5): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 349.463202][ T7910] EXT2-fs (loop5): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 350.189591][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 350.189605][ T27] audit: type=1326 audit(350.150:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.207295][ T27] audit: type=1326 audit(350.170:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.259198][ T27] audit: type=1326 audit(350.220:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.278793][ T27] audit: type=1326 audit(350.230:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.295442][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 350.301306][ T7926] tmpfs: Unknown parameter 'nolazytime˙˙' [ 350.305811][ T27] audit: type=1326 audit(350.230:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.312157][ T27] audit: type=1326 audit(350.230:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff89b58ed4 code=0x7ffc0000 [ 350.457732][ T27] audit: type=1326 audit(350.230:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.617133][ T27] audit: type=1326 audit(350.230:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.753318][ T27] audit: type=1326 audit(350.230:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 350.894111][ T27] audit: type=1326 audit(350.230:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b5a9a8 code=0x7ffc0000 [ 351.104851][ T7932] loop5: detected capacity change from 0 to 1024 [ 351.124390][ T7932] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 352.378816][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 355.831169][ T7982] netlink: 'syz.4.985': attribute type 4 has an invalid length. [ 357.737317][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 357.919736][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.064961][ T8024] Injecting memory failure for pfn 0x1242d9 at process virtual address 0x20000000 [ 358.069724][ T8024] Memory failure: 0x1242d9: recovery action for dirty LRU page: Recovered [ 358.072544][ T8024] Injecting memory failure for pfn 0x135fc2 at process virtual address 0x20001000 [ 358.077710][ T4299] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 358.080927][ T8024] Memory failure: 0x135fc2: recovery action for dirty LRU page: Recovered [ 358.083449][ T8024] Injecting memory failure for pfn 0x135fc3 at process virtual address 0x20002000 [ 358.086344][ T8024] Memory failure: 0x135fc3: recovery action for dirty LRU page: Recovered [ 358.089390][ T8024] Injecting memory failure for pfn 0x137640 at process virtual address 0x20003000 [ 358.092246][ T8024] Memory failure: 0x137640: recovery action for dirty LRU page: Recovered [ 358.094816][ T8024] Injecting memory failure for pfn 0x137641 at process virtual address 0x20004000 [ 358.098184][ T8024] Memory failure: 0x137641: recovery action for dirty LRU page: Recovered [ 358.100765][ T8024] Injecting memory failure for pfn 0x13518c at process virtual address 0x20005000 [ 358.103581][ T8024] Memory failure: 0x13518c: recovery action for dirty LRU page: Recovered [ 358.106173][ T8024] Injecting memory failure for pfn 0x13518d at process virtual address 0x20006000 [ 358.109531][ T8024] Memory failure: 0x13518d: recovery action for dirty LRU page: Recovered [ 358.112138][ T8024] Injecting memory failure for pfn 0x1212fc at process virtual address 0x20007000 [ 358.896768][ T8024] Memory failure: 0x1212fc: recovery action for dirty LRU page: Recovered [ 358.899178][ T8024] Injecting memory failure for pfn 0x1212fd at process virtual address 0x20008000 [ 358.912569][ T8024] Memory failure: 0x1212fd: recovery action for dirty LRU page: Recovered [ 358.914929][ T8024] Injecting memory failure for pfn 0x136ede at process virtual address 0x20009000 [ 358.941129][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 358.947640][ T8024] Memory failure: 0x136ede: recovery action for dirty LRU page: Recovered [ 358.950203][ T8024] Injecting memory failure for pfn 0x136edf at process virtual address 0x2000a000 [ 358.967297][ T8024] Memory failure: 0x136edf: recovery action for dirty LRU page: Recovered [ 358.969737][ T8024] Injecting memory failure for pfn 0x135eea at process virtual address 0x2000b000 [ 358.987570][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.999291][ T8024] Memory failure: 0x135eea: recovery action for dirty LRU page: Recovered [ 359.001690][ T8024] Injecting memory failure for pfn 0x135eeb at process virtual address 0x2000c000 [ 359.004915][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 359.007958][ T8024] Memory failure: 0x135eeb: recovery action for dirty LRU page: Recovered [ 359.010304][ T8024] Injecting memory failure for pfn 0x136ef2 at process virtual address 0x2000d000 [ 359.034567][ T8024] Memory failure: 0x136ef2: recovery action for dirty LRU page: Recovered [ 359.053410][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 359.053424][ T27] audit: type=1326 audit(359.010:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.4.1001" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a9a8 code=0x0 [ 359.061599][ T8024] Injecting memory failure for pfn 0x136ef3 at process virtual address 0x2000e000 [ 359.064257][ T8024] Memory failure: 0x136ef3: recovery action for dirty LRU page: Recovered [ 359.076620][ T8024] Injecting memory failure for pfn 0x139fb2 at process virtual address 0x2000f000 [ 359.079455][ T8024] Memory failure: 0x139fb2: recovery action for dirty LRU page: Recovered [ 360.230788][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.267137][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.365845][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 360.382344][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 360.484236][ T8061] loop5: detected capacity change from 0 to 1024 [ 360.492051][ T8061] EXT4-fs: Ignoring removed nobh option [ 360.503276][ T8061] EXT4-fs: Ignoring removed bh option [ 360.512563][ T8061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.564790][ T8061] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 361.826247][ T6183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.015940][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 362.229495][ T4299] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 362.233131][ T4299] Bluetooth: hci0: Injecting HCI hardware error event [ 362.236961][ T47] Bluetooth: hci0: hardware error 0x00 [ 362.326282][ T8089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.329222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.332322][ T8089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.309871][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.317637][ T8082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.321843][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.426810][ T47] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 364.472657][ T8102] loop5: detected capacity change from 0 to 128 [ 364.506526][ T8102] EXT4-fs (loop5): Test dummy encryption mode enabled [ 364.647756][ T8102] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 364.674906][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.699762][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1018'. [ 364.729509][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1018'. [ 365.568506][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 365.707203][ T6183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.304625][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.441307][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.545767][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.587346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.590177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.881551][ T8149] xt_bpf: check failed: parse error [ 369.900822][ T6183] net_ratelimit: 108 callbacks suppressed [ 369.900836][ T6183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.925896][ T8160] loop5: detected capacity change from 0 to 1024 [ 370.813447][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.838992][ T8088] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.907009][ T6183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.818661][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.820406][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.991184][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 372.006870][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.031923][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 373.139602][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.147701][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 374.967164][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.970467][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.833615][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.236345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.440754][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'. [ 377.754793][ T8246] xt_HMARK: proto mask must be zero with L3 mode [ 378.702203][ T8251] syz.4.1060 uses obsolete (PF_INET,SOCK_PACKET) [ 378.755422][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.760946][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.067755][ T8269] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1067'. [ 379.940246][ T6181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.128653][ T6181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.909475][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.912315][ T6181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.977425][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.009471][ T6181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.189304][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.217087][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.220951][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.226024][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.229496][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.232599][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.227429][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.675658][ T8361] loop5: detected capacity change from 0 to 512 [ 387.692746][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 388.122518][ T8361] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1097: casefold flag without casefold feature [ 388.317288][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.335898][ T8361] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1097: couldn't read orphan inode 15 (err -117) [ 388.356757][ T8361] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 389.036085][ T8372] tipc: Enabling of bearer rejected, already enabled [ 389.389649][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.855405][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.981130][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 391.078695][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 392.531414][ T8407] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 393.216574][ T4339] net_ratelimit: 1 callbacks suppressed [ 393.216586][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.680273][ T8407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.811870][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.879586][ T8418] bond1: (slave veth0_to_bond): making interface the new active one [ 393.892101][ T8418] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 394.574289][ T8414] bond1: (slave veth7): Enslaving as an active interface with a down link [ 394.594125][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 394.604349][ T8407] device veth1 entered promiscuous mode [ 394.620758][ T8407] device veth1 left promiscuous mode [ 394.646868][ T8407] bond1: (slave vlan5): Enslaving as an active interface with an up link [ 394.889410][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.936468][ T8436] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 395.344224][ T8438] loop5: detected capacity change from 0 to 1024 [ 395.405675][ T8434] lo speed is unknown, defaulting to 1000 [ 395.410032][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.414133][ T8438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.809012][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 396.296730][ T8458] loop5: detected capacity change from 0 to 1024 [ 397.005267][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.042501][ T8458] hfsplus: bad catalog entry used to create inode [ 397.044597][ T8458] hfsplus: failed to load root directory [ 397.064859][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.330306][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 398.227030][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.343807][ T6181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.361763][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.405339][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.407897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.418324][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.431617][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.434302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.629045][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1133'. [ 400.638819][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.651843][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.084976][ T8526] loop5: detected capacity change from 0 to 128 [ 402.096529][ T8526] EXT4-fs (loop5): Test dummy encryption mode enabled [ 403.506886][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 403.522936][ T24] net_ratelimit: 7 callbacks suppressed [ 403.522949][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.567607][ T8526] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 403.583190][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.212856][ T8541] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 404.988321][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.991779][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.043489][ T6749] EXT4-fs (loop5): unmounting filesystem. [ 406.069394][ T6183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.512284][ T8557] loop5: detected capacity change from 0 to 512 [ 407.966319][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.257007][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.363792][ T8557] EXT4-fs: failed to create workqueue [ 408.365349][ T8557] EXT4-fs (loop5): mount failed [ 412.436781][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.439185][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.673419][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.101775][ T8619] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 413.883326][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.680921][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.700707][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1169'. [ 415.786978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.118007][ T8665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.120412][ T8665] IPv6: NLM_F_CREATE should be set when creating new route [ 422.848531][ T8709] Bluetooth: MGMT ver 1.22 [ 422.885625][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 423.049470][ T8715] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1193'. [ 425.278823][ T8743] set match dimension is over the limit! [ 428.737914][ T27] audit: type=1326 audit(428.700:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.5.1209" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x0 [ 429.626758][ T8779] netlink: set zone limit has 8 unknown bytes [ 431.337124][ T8786] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 431.357983][ T8786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.374068][ T8786] device macvtap1 entered promiscuous mode [ 431.376989][ T8786] device bond2 entered promiscuous mode [ 431.595447][ T8786] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 433.072282][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 433.120356][ T8786] bond2: (slave gretap1): making interface the new active one [ 433.122474][ T8786] device gretap1 entered promiscuous mode [ 433.161238][ T8786] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 433.349365][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.351233][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.356383][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 433.364678][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 435.581800][ T8826] loop5: detected capacity change from 0 to 1024 [ 435.867559][ T7383] hfsplus: b-tree write err: -5, ino 4 [ 435.955589][ T8825] Illegal XDP return value 2127354584 on prog (id 132) dev syz_tun, expect packet loss! [ 437.416807][ T27] audit: type=1326 audit(437.360:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.422702][ T27] audit: type=1326 audit(437.370:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.460781][ T27] audit: type=1326 audit(437.370:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.469810][ T27] audit: type=1326 audit(437.370:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.481229][ T27] audit: type=1326 audit(437.370:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.487932][ T27] audit: type=1326 audit(437.370:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.494094][ T27] audit: type=1326 audit(437.370:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.501137][ T27] audit: type=1326 audit(437.390:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.510440][ T27] audit: type=1326 audit(437.390:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 437.521041][ T27] audit: type=1326 audit(437.390:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.5.1232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655a9a8 code=0x7ffc0000 [ 439.649669][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.822184][ T8873] netlink: 'syz.5.1236': attribute type 11 has an invalid length. [ 444.104993][ T8921] set match dimension is over the limit! [ 446.175608][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 446.175621][ T27] audit: type=1326 audit(446.130:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.183176][ T27] audit: type=1326 audit(446.140:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.228071][ T27] audit: type=1326 audit(446.140:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.234113][ T27] audit: type=1326 audit(446.140:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.257537][ T27] audit: type=1326 audit(446.140:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.439311][ T27] audit: type=1326 audit(446.140:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.445360][ T27] audit: type=1326 audit(446.140:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.452813][ T27] audit: type=1326 audit(446.140:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.459678][ T27] audit: type=1326 audit(446.140:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 446.465537][ T27] audit: type=1326 audit(446.140:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b35a9a8 code=0x7ffc0000 [ 447.967409][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.976758][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.981855][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.984503][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.987384][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 447.989621][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.612302][ T1608] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.366907][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 451.396011][ T1608] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.109383][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 452.195983][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 452.195996][ T27] audit: type=1326 audit(452.150:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.1277" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb475a9a8 code=0x0 [ 452.255503][ T1608] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.270198][ T8965] lo speed is unknown, defaulting to 1000 [ 452.743962][ T1608] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.441239][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 453.482125][ T9021] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 454.443755][ T9021] device veth5 entered promiscuous mode [ 454.451477][ T9021] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 455.735340][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 455.974138][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 457.305439][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.321917][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.331398][ T8965] device bridge_slave_0 entered promiscuous mode [ 457.370098][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.377812][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.390259][ T8965] device bridge_slave_1 entered promiscuous mode [ 460.664873][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 461.843143][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.850974][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.892878][ T8965] team0: Port device team_slave_0 added [ 461.896230][ T8965] team0: Port device team_slave_1 added [ 463.312996][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.315082][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.322608][ T8965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.352968][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.354979][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.372020][ T8965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.589408][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.771012][ T8965] device hsr_slave_0 entered promiscuous mode [ 468.298905][ T8965] device hsr_slave_1 entered promiscuous mode [ 468.301255][ T9148] netlink: 'syz.3.1305': attribute type 11 has an invalid length. [ 468.337514][ T8965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.344024][ T8965] Cannot create hsr debugfs directory [ 468.395155][ T9133] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 468.422080][ T9133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.698012][ T9140] device macvtap1 entered promiscuous mode [ 468.699625][ T9140] device bond1 entered promiscuous mode [ 468.715311][ T9140] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 468.724508][ T9147] bond1: (slave gretap1): making interface the new active one [ 468.726734][ T9147] device gretap1 entered promiscuous mode [ 468.731101][ T9147] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 468.767310][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 468.773960][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 470.823819][ T27] audit: type=1326 audit(470.780:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1316" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b35a9a8 code=0x0 [ 472.971424][ T8965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.008245][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 473.008453][ T8965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.554049][ T27] audit: type=1326 audit(477.510:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.4.1331" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a9a8 code=0x7fc00000 [ 477.780560][ T8965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.828416][ T8965] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.767869][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.784855][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.789096][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.801093][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.806273][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.810086][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.829099][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.831185][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.637114][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.639712][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.642463][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.645000][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.647087][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.184246][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.205397][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.213370][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.224151][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.231996][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.239114][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.408740][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 486.155145][ T8965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.160723][ T8965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.189759][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.199568][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.227740][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.237518][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.240229][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.338365][ T1608] device hsr_slave_0 left promiscuous mode [ 487.158263][ T1608] device hsr_slave_1 left promiscuous mode [ 488.119182][ T1608] device team0 left promiscuous mode [ 488.120688][ T1608] device team_slave_0 left promiscuous mode [ 488.124610][ T1608] device team_slave_1 left promiscuous mode [ 488.126516][ T1608] bridge0: port 3(team0) entered disabled state [ 488.298560][ T1608] device bridge_slave_1 left promiscuous mode [ 488.300386][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.631598][ T1608] device bridge_slave_0 left promiscuous mode [ 488.708636][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.227674][ T1608] device veth1_macvtap left promiscuous mode [ 489.229843][ T1608] device veth0_macvtap left promiscuous mode [ 489.231846][ T1608] device veth1_vlan left promiscuous mode [ 489.233690][ T1608] device veth0_vlan left promiscuous mode [ 494.597297][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.599180][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.372588][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 496.567546][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 496.748532][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.997775][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.773273][ T1608] bond0 (unregistering): Released all slaves [ 501.254421][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.897652][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.899937][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.490411][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.177941][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 510.185795][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 510.240285][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 511.085849][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 511.088554][ T4297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 511.090797][ T4297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 512.998790][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 513.147115][ T4297] Bluetooth: hci5: command 0x0409 tx timeout [ 513.261317][ T27] audit: type=1326 audit(769.215:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a9a8 code=0x7ffc0000 [ 513.273297][ T27] audit: type=1326 audit(769.215:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a9a8 code=0x7ffc0000 [ 513.395631][ T27] audit: type=1326 audit(769.225:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbab5a9a8 code=0x7ffc0000 [ 513.456654][ T27] audit: type=1326 audit(769.225:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a9a8 code=0x7ffc0000 [ 513.462747][ T27] audit: type=1326 audit(769.225:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a9a8 code=0x7ffc0000 [ 515.239364][ T4297] Bluetooth: hci5: command 0x041b tx timeout [ 516.896017][ T9532] lo speed is unknown, defaulting to 1000 [ 518.022363][ T4297] Bluetooth: hci5: command 0x040f tx timeout [ 519.493709][ T9532] chnl_net:caif_netlink_parms(): no params data found [ 520.097006][ T4297] Bluetooth: hci5: command 0x0419 tx timeout [ 521.660662][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.662685][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.665551][ T9532] device bridge_slave_0 entered promiscuous mode [ 521.683627][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.696965][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.699660][ T9532] device bridge_slave_1 entered promiscuous mode [ 521.702132][ T9674] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 521.705357][ T9674] Mem abort info: [ 521.706319][ T9674] ESR = 0x0000000086000006 [ 521.707639][ T9674] EC = 0x21: IABT (current EL), IL = 32 bits [ 521.709392][ T9674] SET = 0, FnV = 0 [ 521.710568][ T9674] EA = 0, S1PTW = 0 [ 521.711761][ T9674] FSC = 0x06: level 2 translation fault [ 521.713384][ T9674] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010c6fe000 [ 521.715335][ T9674] [0000000000000000] pgd=0800000125e4a003, p4d=0800000125e4a003, pud=080000013e8bd003, pmd=0000000000000000 [ 521.718752][ T9674] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 521.720769][ T9674] Modules linked in: [ 521.721795][ T9674] CPU: 1 PID: 9674 Comm: syz.0.1419 Not tainted 6.1.142-syzkaller #0 [ 521.724048][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.726826][ T9674] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 521.729019][ T9674] pc : 0x0 [ 521.729848][ T9674] lr : bond_xdp_xmit+0x27c/0x45c [ 521.731246][ T9674] sp : ffff800021927220 [ 521.732387][ T9674] x29: ffff8000219272e0 x28: 000000000000000f x27: ffff800021927248 [ 521.734579][ T9674] x26: dfff800000000000 x25: ffff800013a7f158 x24: ffff0000deb80000 [ 521.736823][ T9674] x23: fffffbffeffb38d0 x22: ffff0000deb84000 x21: fffffbffeffb38d0 [ 521.738984][ T9674] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 521.741322][ T9674] x17: 0000000000000000 x16: ffff8000082d0f50 x15: 0000000000000002 [ 521.743601][ T9674] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 521.745806][ T9674] x11: 0000000000004ca4 x10: ffff8000212da000 x9 : ffff800021927280 [ 521.748129][ T9674] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 521.750375][ T9674] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 521.752724][ T9674] x2 : ffff8000219272a0 x1 : 0000000000000001 x0 : ffff0000deb80000 [ 521.754863][ T9674] Call trace: [ 521.755776][ T9674] 0x0 [ 521.756536][ T9674] bq_xmit_all+0xab0/0xf10 [ 521.757711][ T9674] __dev_flush+0xc4/0x18c [ 521.758864][ T9674] xdp_do_flush+0x14/0x28 [ 521.760064][ T9674] bpf_test_run_xdp_live+0x10e0/0x1544 [ 521.761554][ T9674] bpf_prog_test_run_xdp+0x560/0xb88 [ 521.763066][ T9674] bpf_prog_test_run+0x2dc/0x364 [ 521.764480][ T9674] __sys_bpf+0x4ec/0x634 [ 521.765700][ T9674] __arm64_sys_bpf+0x80/0x98 [ 521.766961][ T9674] invoke_syscall+0x98/0x2bc [ 521.768213][ T9674] el0_svc_common+0x138/0x258 [ 521.769524][ T9674] do_el0_svc+0x58/0x13c [ 521.770666][ T9674] el0_svc+0x58/0x138 [ 521.771773][ T9674] el0t_64_sync_handler+0x84/0xf0 [ 521.773170][ T9674] el0t_64_sync+0x18c/0x190 [ 521.774376][ T9674] Code: bad PC value [ 521.775386][ T9674] ---[ end trace 0000000000000000 ]--- [ 522.395181][ T9674] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 522.397324][ T9674] SMP: stopping secondary CPUs [ 522.398668][ T9674] Kernel Offset: disabled [ 522.399905][ T9674] CPU features: 0x080000,02070084,26017203 [ 522.401419][ T9674] Memory Limit: none [ 522.985105][ T9674] Rebooting in 86400 seconds..