last executing test programs: 46.317151861s ago: executing program 2 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00ffa1000005a1080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x2000000, 0x20044010}, 0x4040) 46.263344212s ago: executing program 2 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x6, 0x5, {{0x8, 0x4, 0x0, 0xb, 0x20, 0x64, 0x0, 0xff, 0x29, 0x0, @empty, @loopback, {[@end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@remote, @local, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @dev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_getroute={0x54, 0x1a, 0x100, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x0, 0x3, 0xff, 0x2, 0xff, 0xb, 0x2200}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x6, 0x9, r1}}, @RTA_PRIORITY={0x8, 0x6, 0x800}, @RTA_OIF={0x8, 0x4, r2}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_EXPIRES={0x8, 0x17, 0x95}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x21, 0x8, r3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 46.247825797s ago: executing program 2 (id=265): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) fcntl$notify(r3, 0x402, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r9) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x0, {0x538a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfff, 0x9, 0x0, 0xfffe, 0x0, 0x10001, 0x0, 0x20002, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r8}) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7}) (async) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, 0x0, 0x10005, 0xffffffff, 0xe, 0x3, 0xeada}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r9, 0xc02064a5, &(0x7f0000000580)={0x0, 0x6, &(0x7f00000003c0)=[0xc8, 0xb, 0x10, 0x80, 0x1, 0x3], &(0x7f0000000400)=[0x3, 0x3], &(0x7f0000000440)=[0x5, 0xb8, 0x5]}) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000080)={0x50, 0x0, r12, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r11, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r11, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xf0, 0x0, 0xfffffffffffffff9, [{{0x4, 0x1, 0x7, 0x1711, 0x8, 0x0, {0x3, 0xffffffffa37be7cb, 0x3000000000, 0x6f9c, 0x8, 0x6, 0x8, 0x2, 0x7, 0xa000, 0xfffffff7, r13, r14, 0x8, 0x10}}, {0x1, 0x10, 0x45, 0x4, '\x01\x00ndOt\xd0*\xf8\x1d\x1f\xca\b\x02\n\xab \x96\xd8\xca3so\xa4\x10lave[\x0f\xf4\xdd\xac\xec`\x9fy\xcf\x82\x95\xca\xdc:\xff\xadcB\xec:\xfd\xc5\xab\x12\x88E6\xf1U\xc9\xa0\t\xec\x80\xaaz0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="33330000000100000000000086dd6000000000072c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 45.915286365s ago: executing program 2 (id=270): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x9) fcntl$getown(r0, 0x9) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 45.33748867s ago: executing program 2 (id=273): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x48, 0x5c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000410000/0x4000)=nil, 0x4000}, 0x1}) 45.278021019s ago: executing program 32 (id=273): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x48, 0x5c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000410000/0x4000)=nil, 0x4000}, 0x1}) 40.941759027s ago: executing program 3 (id=329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}]}, 0x1c) 40.941083968s ago: executing program 3 (id=330): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r1, 0x1, 0x1, 0xc1, 0x0, 0x3) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, r11) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@getpolicy={0x50, 0x15, 0x10, 0x70bd25, 0x25dfdbfd, {{@in=@loopback, @in=@multicast1, 0x4e22, 0xf8b4, 0x4e21, 0xfffb, 0xa, 0x20, 0x0, 0x32, r9, r11}, 0x6e6bb5, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getqdisc={0x38, 0x26, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x5, 0xffe0}, {0xe, 0x4}, {0xfffd, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x1) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430008003f0000000a0010000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 40.896497189s ago: executing program 3 (id=331): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@quota}, {@nobarrier}, {@jqfmt_vfsv1}]}, 0x1, 0x4dd, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x70}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r9, r8, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x194, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x40008c0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002680)={0x400, 0xfff, 0x8009, 0x8e0000, 0xfffffff2, 0x10001, 0x400, 0x9, r3}, &(0x7f00000026c0)=0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r12, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) read$FUSE(r0, &(0x7f0000004740)={0x2020}, 0x2020) 40.719902998s ago: executing program 3 (id=332): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7f, 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x41) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r9, 0x3b65, 0x1) write(r8, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000", 0x2f) fchdir(r6) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x7f, 0x7}) setxattr$security_ima(&(0x7f0000000400)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)=ANY=[], 0x700, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 40.309365545s ago: executing program 3 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1a427c0a39e5baca, 0x0, 0xfffffffffffffffe}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="05003901"], 0x44}}, 0x0) 39.033611809s ago: executing program 3 (id=353): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @private0, @local, {[@hopopts={0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}]}]}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4212, r2, &(0x7f00000011c0), 0xfffffffffffffffb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "00010202020202020202020202020202"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}}}]}]}}]}, 0x98}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) mount$nfs(&(0x7f0000000480)='&\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x820040, &(0x7f0000000540)={[{}, {'\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffe0}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000700)="0000000000010000000000028100000a080045000020000000", 0x19, 0x10000000, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="000000000001"}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 38.958456498s ago: executing program 33 (id=353): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @private0, @local, {[@hopopts={0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}]}]}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4212, r2, &(0x7f00000011c0), 0xfffffffffffffffb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "00010202020202020202020202020202"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}}}]}]}}]}, 0x98}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) mount$nfs(&(0x7f0000000480)='&\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x820040, &(0x7f0000000540)={[{}, {'\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffe0}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000700)="0000000000010000000000028100000a080045000020000000", 0x19, 0x10000000, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="000000000001"}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.193900497s ago: executing program 6 (id=1199): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 1.113531113s ago: executing program 6 (id=1202): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0x4, 0x6}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r2}, &(0x7f00000000c0)=0x8) 1.049925669s ago: executing program 6 (id=1205): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 1.049721753s ago: executing program 6 (id=1206): close(0x3) socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x26, r0, 0x0}]) 953.406364ms ago: executing program 6 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x405c805}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 696.26015ms ago: executing program 1 (id=1222): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="adf2288d3aae07000000def180000000000000000010007e3506db2a80f07ffe08c2b63b4b9dda", 0x27) 629.734179ms ago: executing program 1 (id=1223): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 593.235582ms ago: executing program 1 (id=1224): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) 580.796268ms ago: executing program 0 (id=1226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0x4, 0x6}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r1}, &(0x7f00000000c0)=0x8) 548.043001ms ago: executing program 0 (id=1228): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 547.506692ms ago: executing program 1 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 533.427576ms ago: executing program 0 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081000", 0x28, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) 520.806405ms ago: executing program 1 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8450}, 0x4000090) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) 457.379575ms ago: executing program 1 (id=1236): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124", 0x6e}], 0x2}}], 0x1, 0x2090) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f99977c186c32df773c81e81f1543adbc2", 0x6a}, {&(0x7f0000000640)="37f00163ee64590eddc6", 0xa}], 0x4) write(r0, &(0x7f0000001e00)="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", 0x3d6) 431.112191ms ago: executing program 0 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010005000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 351.878726ms ago: executing program 0 (id=1244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x580, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x554, 0x2, [@TCA_BPF_ACT={0x550, 0x1, [@m_bpf={0x108, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xb1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x444, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x3, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x4, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x11, 0x6, "94cedea66d85e9b70c476ee3b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 326.448488ms ago: executing program 0 (id=1246): syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x1, 0x50, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x8, 0xf9}, {0x6, 0x24, 0x1a, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0x6, 0x9, [0x200, 0xb, 0xc000]}, @dmm={0x7, 0x24, 0x14, 0xcef1, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xf, 0x5, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x9, 0x95}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xfc, 0x2, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x6, 0x7}}}}}}}]}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_usb_connect$cdc_ncm(0x3, 0x91, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x6, 0xd0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "e45ad00219e7"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x80, 0x1000, 0xb}, {0x6, 0x24, 0x1a, 0xf, 0x35}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0x6, 0xa, 0x6, 0x8}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}, @dmm={0x7, 0x24, 0x14, 0x1000, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x3, 0xfa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3bf, 0xfe, 0x30, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x1, 0x4c}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x110, 0x8, 0x2, 0xc5, 0x40, 0x20}, 0x5c, &(0x7f00000008c0)={0x5, 0xf, 0x5c, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x2, 0xf00, 0x7, [0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "bb1b30976301b34b574f3569031ea664"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x6}, @generic={0x15, 0x10, 0x1, "95c5d8d00bb723990b27512ed381d2cd3269"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x0, 0xff0f, 0xfffd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x9, 0xc0, 0x0, 0xfb}]}, 0x9, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2401}}, {0x64, &(0x7f00000009c0)=@string={0x64, 0x3, "03fa9a8d3e4b0ea53b8b3e966cdd72ab99db467b722199815dc82afb91c2f4eb7074c2f6bff81cbf035ffbbc902adfa661eea936c5b9c589b78778a4585f1bdb71edcfb1b1769578913fb3c1159d670e558213e3c17d7e7adaa20c0d236185c413e2"}}, {0x40, &(0x7f0000000a40)=@string={0x40, 0x3, "e557836eaeb37c5ed644631353316b5d2568149d1883a60b6b8055e64a6536506860f852740c26831ccc2c5617dd07ca01691fcab74a1ad6f30f827f9610"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2409}}, {0x7d, &(0x7f0000000b00)=@string={0x7d, 0x3, "89212c6104674d778cdb599bb68ac4b498f2d83ad275d448040b602767af8633194194d6d143057cb8a75799a1356a63298c15e7d9259523a4b018e01b82be316f2ad446c1b9adc62d93baccc0a2453d0ee4e6c7ac5bdb6e34eff38ea47cac04f27a69d3b1b05a043c8edd6ce3dcf77ee7bdb951b401908d997519"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2c01}}, {0xe7, &(0x7f0000000bc0)=@string={0xe7, 0x3, "b06383b9638b6a802fac5ba098656deaf52be54db2650153e52d43bfa879361b1f21d800dbfb04cbd61a2f4b83f70da0688a09d7bdad2908a9de30047870d05b782e6c917c43da019aab4ec81523fe2a514edf8e97d50dc966c974c853baef7972da7837b62cab0a46e0376f35e05726f2e27a5e420f5a31b72984c4cd25239c66fce5089e8f32c815e4c7df140f21c0837d0fefdc0ce60ed9f91d9c117e9f6b594a00d311d138b3032013bde0f478bd8f9fb8f8640425ebcb303cfa98cd0b7231bd75d2849ab2e8b428e2c431887ef06e10c22319e5491c378bee2e9fe27b325817a06fba"}}]}) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @win={{0x401, 0xb6a, 0x10f, 0x34324152}, 0x1, 0x7fff, 0x0, 0x0, 0x0, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r2, &(0x7f0000000180)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xb, 0xd0e0011, 0x148, 0xc6, 0x220, 0x1d8, 0x190, 0x220, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xe0, 0x148, 0x2000000, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x8, 0x7, 0x3, {0x42}}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x6, 0xb67f, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x1e}}}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'xfrm0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) write(r3, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000240)='^$}+\'\\%\x00', 0x4) syz_usb_disconnect(0xffffffffffffffff) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="05000000080000"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x84) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) 282.239731ms ago: executing program 4 (id=1248): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4890) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 226.197274ms ago: executing program 4 (id=1251): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0xfff, 0x2, 0x1}, 0x4, [0x7fff, 0x8000, 0x7b, 0x3, 0x1, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0x86, 0x0, 0x3, 0x7ff, 0x8001, 0xf, 0x9, 0x503e47c1, 0xcde, 0x5, 0x3, 0x0, 0x5, 0x0, 0x6, 0x6, 0x498c, 0x2, 0x10, 0x4, 0x0, 0xe, 0x80000001, 0x6, 0x3, 0x2, 0x9e08, 0xc3, 0x8, 0xa, 0x10, 0x4430, 0xfffffffa, 0x5, 0x8, 0x109, 0x25, 0x7, 0x8, 0x1, 0x200, 0x9, 0x0, 0x1, 0x0, 0x8, 0x9, 0xd, 0x0, 0x9, 0x1, 0xc4b2, 0x5a, 0x9], [0x8, 0x5, 0xb54, 0x7, 0x6, 0x3, 0x8, 0xb9, 0x7, 0x1, 0x7fffffff, 0x2, 0x3, 0x7f, 0x2f0, 0x3, 0x0, 0x80000000, 0x6, 0x7fff, 0x0, 0x0, 0xff7, 0x8, 0xb1, 0x4, 0xfffffef9, 0x9, 0x8, 0x7, 0x6994412a, 0x3, 0x78, 0x8001, 0x5, 0x3, 0xe45e, 0x4000000, 0x8, 0x7f, 0x2, 0x80000001, 0x9, 0x80, 0x0, 0x200, 0x5, 0x81, 0x0, 0x97, 0x8, 0x80000000, 0x8a0a, 0x80000000, 0x9, 0xfffff170, 0x6, 0x101, 0x7761, 0x100, 0xfffffff8, 0x3, 0x6, 0x8000], [0x3eda, 0x6, 0x3, 0x20dc, 0x2, 0x200, 0x4, 0x8f4ab43, 0x1, 0x9e6, 0x9, 0x401, 0x31f7, 0x1, 0x5, 0x9, 0xd0, 0xb8b0, 0xb, 0x8000, 0x3, 0x8, 0xffff, 0xf85, 0x4f, 0x3, 0x0, 0x6, 0xfffffffc, 0x7, 0xff, 0x5, 0xd, 0x8, 0xb84, 0x7, 0x8, 0x8000, 0x4e501595, 0x3, 0x50000, 0x1, 0x10000, 0x9, 0x9, 0xfff, 0x3, 0x5, 0x4, 0x5, 0xfff, 0x2, 0x2, 0x400, 0x2, 0x2, 0xfffffff9, 0x631ab3bb, 0x5, 0x5c5b, 0x503, 0x6, 0x1, 0x2], [0x9, 0x0, 0x400, 0x5, 0xffffffff, 0x0, 0x1, 0xb1e, 0x0, 0x47, 0x2, 0x1, 0xfffffffb, 0x8, 0x81, 0x7, 0x0, 0x6, 0xff000000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x9, 0xf0d, 0x5, 0x2, 0x101, 0x5, 0x9, 0x7fff, 0x0, 0x8, 0xb, 0x3, 0x0, 0x9, 0x2, 0x4, 0x10001, 0x1ff, 0x3ff, 0x6, 0x80, 0x1, 0xb, 0x1ff, 0x0, 0x0, 0x4, 0x72, 0xdb35, 0x8, 0x5, 0x8001, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 141.619916ms ago: executing program 4 (id=1255): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) recvmmsg$unix(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x2, 0x0) 141.512706ms ago: executing program 4 (id=1256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8004, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r2}, &(0x7f00000000c0)=0x8) 141.206859ms ago: executing program 5 (id=1258): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x580, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x554, 0x2, [@TCA_BPF_ACT={0x550, 0x1, [@m_bpf={0x108, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xb1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x444, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x3, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x4, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x11, 0x6, "94cedea66d85e9b70c476ee3b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 136.609497ms ago: executing program 5 (id=1259): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r0, 0x40047438, &(0x7f0000000040)) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) 117.947401ms ago: executing program 5 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 92.592886ms ago: executing program 6 (id=1261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x20000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="016f0800ca"], 0x3a) 75.155871ms ago: executing program 4 (id=1262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x2001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) 74.471302ms ago: executing program 5 (id=1263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 44.131765ms ago: executing program 4 (id=1264): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4890) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 442.38µs ago: executing program 5 (id=1265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="adf2288d3aae07000000def180000000000000000010007e3506db2a80f07ffe08c2b63b4b9dda0000", 0x29) 0s ago: executing program 5 (id=1266): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0xb0090199) kernel console output (not intermixed with test programs): [ 31.875000][ T4726] Bluetooth: hci0: command tx timeout [ 31.905397][ T4900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.905441][ T4900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.909569][ T4900] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 31.909581][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.909660][ T4900] dummy0: entered promiscuous mode [ 31.911376][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.911390][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.913052][ T4901] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 31.913064][ T4901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.913108][ T4901] dummy0: entered promiscuous mode [ 31.940399][ T4910] loop2: detected capacity change from 0 to 512 [ 31.959647][ T4910] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 31.961822][ T4910] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.988029][ T4910] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 31.989989][ T4915] loop1: detected capacity change from 0 to 1024 [ 31.991527][ T4915] EXT4-fs: Ignoring removed bh option [ 31.993761][ T4915] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 32.006387][ T4915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.033861][ T4910] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 32.034573][ T4910] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 32.034639][ T4910] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.035612][ T4915] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 32.042783][ T4910] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6: couldn't read orphan inode 13 (err -117) [ 32.042844][ T4910] loop2: lost filesystem error report for type 5 error -117 [ 32.045146][ T4910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.054797][ T4915] Zero length message leads to an empty skb [ 32.060909][ T4915] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 32.294949][ T4922] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.6: inode #15: comm syz.2.6: iget: illegal inode # [ 32.404534][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.993093][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.616557][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 33.708145][ T4969] loop1: detected capacity change from 0 to 1024 [ 33.708957][ T4969] ======================================================= [ 33.708957][ T4969] WARNING: The mand mount option has been deprecated and [ 33.708957][ T4969] and is ignored by this kernel. Remove the mand [ 33.708957][ T4969] option from the mount to silence this warning. [ 33.708957][ T4969] ======================================================= [ 33.886327][ T50] Bluetooth: hci3: command tx timeout [ 33.886367][ T50] Bluetooth: hci4: command tx timeout [ 33.947444][ T4716] Bluetooth: hci2: command tx timeout [ 33.948673][ T50] Bluetooth: hci1: command tx timeout [ 33.948721][ T4726] Bluetooth: hci0: command tx timeout [ 34.083981][ T4979] loop2: detected capacity change from 0 to 1024 [ 34.114044][ T4979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.184341][ T4983] input: syz0 as /devices/virtual/input/input2 [ 34.319900][ T4985] loop4: detected capacity change from 0 to 512 [ 35.085979][ T4985] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.089372][ T4985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 35.089830][ T4985] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.227716][ T4985] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.24: bg 0: block 361: padding at end of block bitmap is not set [ 35.227876][ T4985] loop4: lost filesystem error report for type 5 error -117 [ 35.236950][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 35.236986][ C0] EXT4-fs (loop4): initial error at time 35: ext4_validate_block_bitmap:441 [ 35.237015][ C0] EXT4-fs (loop4): last error at time 35: ext4_validate_block_bitmap:441 [ 35.406153][ T4985] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 35.406187][ T4985] loop4: lost filesystem error report for type 5 error -117 [ 35.424140][ T4985] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.24: attempt to clear invalid blocks 33619980 len 1 [ 35.424190][ T4985] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.430999][ T4985] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.24: invalid indirect mapped block 1811939328 (level 0) [ 35.431033][ T4985] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.435263][ T4985] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.24: invalid indirect mapped block 2185560079 (level 1) [ 35.435292][ T4985] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.440180][ T4985] EXT4-fs (loop4): 1 truncate cleaned up [ 35.473159][ T4992] loop0: detected capacity change from 0 to 8 [ 35.485514][ T4985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.507236][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.523077][ T4977] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 35.552014][ T4997] Set syz1 is full, maxelem 2 reached [ 35.605526][ T5000] loop2: detected capacity change from 0 to 2048 [ 35.632683][ T5001] memory length for this resource is wrong [ 35.633255][ T5000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.636183][ T5001] isp1760 0000:00:01.0: probe with driver isp1760 failed with error -12 [ 35.641846][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 35.656231][ T5010] loop1: detected capacity change from 0 to 512 [ 35.702805][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.717978][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.720521][ T5010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.814427][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.899861][ T5027] loop1: detected capacity change from 0 to 256 [ 35.957786][ T50] Bluetooth: hci3: command tx timeout [ 35.957849][ T4726] Bluetooth: hci4: command tx timeout [ 36.152214][ T5038] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 36.156117][ T5038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 36.245098][ T4726] Bluetooth: hci0: command tx timeout [ 36.245304][ T4726] Bluetooth: hci1: command tx timeout [ 36.246350][ T4726] Bluetooth: hci2: command tx timeout [ 36.709099][ T5044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.39'. [ 36.724493][ T5047] Soft offlining pfn 0x136000 at process virtual address 0x20000000 [ 36.735535][ T5047] Soft offlining pfn 0x219070 at process virtual address 0x20001000 [ 36.766212][ T5047] Memory failure: 0x219070: unhandlable page. [ 36.839113][ T5052] loop1: detected capacity change from 0 to 2048 [ 36.897613][ T5052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.016240][ T5075] binder: 5074:5075 ERROR: BC_REGISTER_LOOPER called without request [ 37.016279][ T5075] binder: 5074:5075 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 37.016432][ T5075] binder: 5074:5075 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 37.056852][ T5077] loop2: detected capacity change from 0 to 1024 [ 37.093676][ T5077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.196229][ T5087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 37.199515][ T5087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 37.203113][ T5087] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 37.203566][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.206688][ T5087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 37.209621][ T5087] dummy0: entered promiscuous mode [ 37.281380][ T5096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.57'. [ 37.340690][ T5104] overlayfs: failed to resolve './file0': -2 [ 37.440562][ T5114] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 37.708104][ T5132] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 37.708133][ T5132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.68'. [ 37.779179][ T5135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 37.779236][ T5135] nbd: couldn't find device at index 134217728 [ 37.782026][ T5136] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 37.880774][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.930265][ T5154] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 38.002225][ T5158] loop3: detected capacity change from 0 to 512 [ 38.003883][ T5158] EXT4-fs: inline encryption not supported [ 38.006801][ T5158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.011054][ T5158] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.027190][ T50] Bluetooth: hci4: command tx timeout [ 38.027202][ T4726] Bluetooth: hci3: command tx timeout [ 38.030647][ T5158] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 38.035403][ T5158] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 38.040375][ T5158] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.76: Failed to acquire dquot type 1 [ 38.042589][ T5158] loop3: lost filesystem error report for type 5 error -5 [ 38.042835][ T5158] EXT4-fs (loop3): Remounting filesystem read-only [ 38.045509][ T5158] EXT4-fs (loop3): 1 truncate cleaned up [ 38.046919][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 38.046943][ C1] EXT4-fs (loop3): initial error at time 38: ext4_acquire_dquot:7041 [ 38.046976][ C1] EXT4-fs (loop3): last error at time 38: ext4_acquire_dquot:7041 [ 38.054732][ T5170] loop2: detected capacity change from 0 to 512 [ 38.055340][ T5170] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.055348][ T5170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.061284][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.063078][ T5170] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.81: invalid indirect mapped block 4294967295 (level 0) [ 38.063096][ T5170] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 38.063746][ T5170] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.81: invalid indirect mapped block 4294967295 (level 1) [ 38.063765][ T5170] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 38.065314][ T5170] EXT4-fs (loop2): 1 orphan inode deleted [ 38.065325][ T5170] EXT4-fs (loop2): 1 truncate cleaned up [ 38.067434][ T5170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.107335][ T5173] netlink: 'syz.4.80': attribute type 10 has an invalid length. [ 38.107364][ T5173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.80'. [ 38.122724][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.131281][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.166405][ T5180] loop2: detected capacity change from 0 to 512 [ 38.166698][ T5180] ext4: Unknown parameter 'audit' [ 38.183273][ T5180] xt_bpf: check failed: parse error [ 38.197111][ T5184] xt_bpf: check failed: parse error [ 38.266987][ T50] Bluetooth: hci1: command tx timeout [ 38.267123][ T4726] Bluetooth: hci0: command tx timeout [ 38.291896][ T5207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.90'. [ 38.356038][ T5223] loop1: detected capacity change from 0 to 1024 [ 38.356377][ T5223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.369094][ T5223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.381630][ T5226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'. [ 38.381656][ T5226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'. [ 38.384650][ T5226] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 38.384702][ T5226] dummy0: entered promiscuous mode [ 38.463666][ T5232] loop3: detected capacity change from 0 to 512 [ 38.476366][ T5232] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 38.483334][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.527532][ T5241] cgroup: noprefix used incorrectly [ 38.585754][ T5246] syzkaller0: entered promiscuous mode [ 38.585799][ T5246] syzkaller0: entered allmulticast mode [ 38.589056][ T5247] tipc: Started in network mode [ 38.589094][ T5247] tipc: Node identity 7e92f4043fc9, cluster identity 4711 [ 38.589714][ T5247] tipc: Enabled bearer , priority 0 [ 38.607344][ T5246] tipc: Resetting bearer [ 38.623571][ T5246] tipc: Disabling bearer [ 38.636591][ T5260] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 38.735970][ T5266] loop1: detected capacity change from 0 to 512 [ 38.738981][ T5266] ext2: Unknown parameter 'fsmagic' [ 39.007612][ T5271] loop1: detected capacity change from 0 to 512 [ 39.184314][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.214633][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.216179][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.217781][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.219387][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.219414][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.219428][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.219441][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.219454][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.219466][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: unknown main item tag 0x0 [ 39.233648][ T4813] hid-generic 684B:0002:FFFFFFFF.0001: hidraw0: HID v0.08 Device [syz0] on syz1 [ 39.256750][ T5280] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 39.258485][ T5280] dummy0: entered promiscuous mode [ 39.276583][ T5281] fido_id[5281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.299007][ T5287] loop2: detected capacity change from 0 to 128 [ 39.320155][ T5287] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.339727][ T5287] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 39.359425][ T5291] loop4: detected capacity change from 0 to 8 [ 39.362154][ T5291] squashfs: Unknown parameter 'xœìU' [ 39.377382][ T5291] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 39.385111][ T4711] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.419041][ T5297] binder: 5296:5297 tried to acquire reference to desc 0, got 1 instead [ 39.419253][ T5297] binder: 5296:5297 got transaction with invalid parent offset [ 39.419287][ T5297] binder: 5297:5296 failed to fixup parent [ 39.419344][ T5297] binder: 5296:5297 transaction call to 5296:0 failed 5/29201/-22, code 0 size 104-4224 line 3717 [ 39.428568][ T867] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.608672][ T5324] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 39.698520][ T5321] Injecting memory failure for pfn 0x1350a7 at process virtual address 0x20945000 [ 39.707467][ T5321] Memory failure: 0x1350a7: recovery action for clean LRU page: Recovered [ 39.707503][ T5321] Injecting memory failure for pfn 0x1350a8 at process virtual address 0x20946000 [ 39.707594][ T5321] Memory failure: 0x1350a8: recovery action for clean LRU page: Recovered [ 39.707606][ T5321] Injecting memory failure for pfn 0x1350a9 at process virtual address 0x20947000 [ 39.707644][ T5321] Memory failure: 0x1350a9: recovery action for clean LRU page: Recovered [ 39.707653][ T5321] Injecting memory failure for pfn 0x1350aa at process virtual address 0x20948000 [ 39.707685][ T5321] Memory failure: 0x1350aa: recovery action for clean LRU page: Recovered [ 39.715654][ T5321] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.769815][ T5339] vlan0: entered promiscuous mode [ 40.678078][ T5387] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.134: ea_inode with extended attributes [ 40.683287][ T5387] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.686936][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 40.686965][ C1] EXT4-fs (loop3): initial error at time 40: ext4_xattr_inode_iget:441: inode 11 [ 40.687003][ C1] EXT4-fs (loop3): last error at time 40: ext4_xattr_inode_iget:441: inode 11 [ 40.709112][ T5387] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.134: error while reading EA inode 11 err=-117 [ 40.709148][ T5387] loop3: lost filesystem error report for type 5 error -117 [ 40.788112][ T5387] EXT4-fs (loop3): 1 orphan inode deleted [ 40.789077][ T5387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.855214][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.858974][ T5448] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.901691][ T5448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.004697][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.055921][ T5481] bond0: Unable to set down delay as MII monitoring is disabled [ 41.077358][ T5484] netlink: 'syz.1.152': attribute type 83 has an invalid length. [ 41.115073][ T5493] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 41.129906][ T5499] 9p: Bad value for 'rfdno' [ 41.182038][ T5504] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 41.226600][ T5504] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 41.230214][ T5504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.285352][ T5520] vfat: Unknown parameter 'devlink' [ 41.299872][ T5504] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.324171][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.406396][ T5422] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x61 [ 41.418415][ T5536] EXT4-fs: Ignoring removed bh option [ 41.431804][ T5536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.432151][ T5536] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.432419][ T5536] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 41.780372][ T5571] dlm: plock device version mismatch: kernel (1.2.0), user (536871040.0.16) [ 41.894076][ T5596] vfat: Deprecated parameter 'posix' [ 41.895344][ T5596] FAT-fs: "posix" option is obsolete, not supported now [ 41.938984][ T5598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 41.947209][ T5598] bond3: (slave gretap1): making interface the new active one [ 41.949038][ T5598] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 42.014380][ T5612] capability: warning: `syz.1.190' uses 32-bit capabilities (legacy support in use) [ 42.065441][ T5617] set_capacity_and_notify: 7 callbacks suppressed [ 42.065480][ T5617] loop3: detected capacity change from 0 to 512 [ 42.077850][ T5615] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.079269][ T5615] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.095408][ T5617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.102259][ T5617] EXT4-fs error (device loop3): ext4_get_first_dir_block:3537: inode #12: comm syz.3.192: Directory hole found for htree leaf block 0 [ 42.125374][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.520950][ T5649] __nla_validate_parse: 21 callbacks suppressed [ 42.520992][ T5649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.201'. [ 42.563587][ T5652] syz_tun: entered allmulticast mode [ 42.564165][ T5651] syz_tun: left allmulticast mode [ 42.704859][ T5670] block nbd2: NBD_DISCONNECT [ 42.730482][ T5677] loop3: detected capacity change from 0 to 1024 [ 42.746288][ T5677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.749807][ T5677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.209: bg 0: block 112: padding at end of block bitmap is not set [ 42.750638][ T5677] EXT4-fs (loop3): Remounting filesystem read-only [ 42.750714][ T5677] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.798417][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.903778][ T5695] tap0: tun_chr_ioctl cmd 1074025677 [ 42.903888][ T5695] tap0: linktype set to 774 [ 42.910354][ T5691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.213'. [ 43.021253][ T5705] loop4: detected capacity change from 0 to 128 [ 43.033457][ T5705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.060332][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.303742][ T5736] Soft offlining pfn 0x11f82a at process virtual address 0x20ffe000 [ 43.305976][ T5736] Soft offlining pfn 0x136368 at process virtual address 0x20fff000 [ 43.497830][ T5734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.225'. [ 43.522230][ T5743] loop1: detected capacity change from 0 to 512 [ 43.536647][ T5743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.588804][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.645058][ T5755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.231'. [ 43.649491][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 43.651450][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 43.759051][ T5761] bridge0: port 3(macvlan2) entered blocking state [ 43.759129][ T5761] bridge0: port 3(macvlan2) entered disabled state [ 43.759202][ T5761] macvlan2: entered allmulticast mode [ 43.759210][ T5761] ip6gretap0: entered allmulticast mode [ 43.759722][ T5761] macvlan2: entered promiscuous mode [ 43.760050][ T5761] bridge0: port 3(macvlan2) entered blocking state [ 43.760077][ T5761] bridge0: port 3(macvlan2) entered forwarding state [ 44.078315][ T5773] loop2: detected capacity change from 0 to 512 [ 44.079367][ T5417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.083265][ T5773] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 44.094138][ T5775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.238'. [ 44.155114][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.157337][ T10] IPVS: starting estimator thread 0... [ 44.159094][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.160592][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.165488][ T5785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.242'. [ 44.165809][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.166132][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.166608][ T5417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.240047][ T5417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.247893][ T5787] IPVS: using max 60 ests per chain, 144000 per kthread [ 44.261464][ T5802] loop3: detected capacity change from 0 to 2048 [ 44.271320][ T5802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.285002][ T5417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.289360][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.297398][ T4724] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 44.425747][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.425927][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.426382][ T5782] bridge_slave_0: entered allmulticast mode [ 44.427167][ T5782] bridge_slave_0: entered promiscuous mode [ 44.429049][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.429100][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.429164][ T5782] bridge_slave_1: entered allmulticast mode [ 44.436441][ T5782] bridge_slave_1: entered promiscuous mode [ 44.451344][ T5417] bridge_slave_1: left allmulticast mode [ 44.451381][ T5417] bridge_slave_1: left promiscuous mode [ 44.451961][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.458212][ T4724] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 44.460266][ T4724] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 44.460301][ T4724] usb 1-1: config 0 has no interface number 0 [ 44.460333][ T4724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.464174][ T5417] bridge_slave_0: left allmulticast mode [ 44.464189][ T5417] bridge_slave_0: left promiscuous mode [ 44.464261][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.471165][ T4724] usb 1-1: config 0 descriptor?? [ 44.496699][ T5827] loop3: detected capacity change from 0 to 1024 [ 44.503272][ T5827] Smack: duplicate mount options [ 44.579823][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.598802][ T4724] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002 [ 44.605875][ T4724] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 44.606979][ T4724] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 44.611085][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.618883][ T5417] bond0 (unregistering): Released all slaves [ 44.634946][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.637452][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.646816][ T5782] team0: Port device team_slave_0 added [ 44.649034][ T5782] team0: Port device team_slave_1 added [ 44.656777][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.657873][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.657897][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.658505][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.658512][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.658528][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.685078][ T5782] hsr_slave_0: entered promiscuous mode [ 44.685417][ T5782] hsr_slave_1: entered promiscuous mode [ 44.687870][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 44.687899][ T5782] Cannot create hsr debugfs directory [ 44.696461][ T5417] tipc: Left network mode [ 44.953619][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 45.225662][ T5865] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 45.228806][ T5865] bond1 (unregistering): Released all slaves [ 45.264630][ T5874] netlink: 168 bytes leftover after parsing attributes in process `syz.4.261'. [ 45.335930][ T5417] hsr_slave_0: left promiscuous mode [ 45.338121][ T5417] hsr_slave_1: left promiscuous mode [ 45.338472][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.338502][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.341929][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.341946][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.360295][ T5417] veth1_macvtap: left promiscuous mode [ 45.360353][ T5417] veth0_macvtap: left promiscuous mode [ 45.360408][ T5417] veth1_vlan: left promiscuous mode [ 45.360455][ T5417] veth0_vlan: left promiscuous mode [ 45.514113][ T5417] team0 (unregistering): Port device team_slave_1 removed [ 45.531115][ T5417] team0 (unregistering): Port device team_slave_0 removed [ 45.548495][ T5904] loop2: detected capacity change from 0 to 1024 [ 45.550372][ T5904] EXT4-fs: Ignoring removed oldalloc option [ 45.552095][ T5904] EXT4-fs: Ignoring removed bh option [ 45.553796][ T5904] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 45.562114][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.578653][ T5904] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.266: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 45.590433][ T5904] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.266: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 45.605037][ T5904] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.612698][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.722287][ T5918] netlink: 248 bytes leftover after parsing attributes in process `syz.4.268'. [ 45.735753][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 45.747799][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 45.752759][ T4711] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 45.758667][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.760375][ T5921] binder: 5920:5921 ioctl 80087601 200003c0 returned -22 [ 45.762401][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 45.769212][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 45.770486][ T4711] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 45.770778][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.770912][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 45.771293][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 45.771948][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.772666][ T5921] tmpfs: Bad value for 'mpol' [ 45.774230][ T5921] binder: 5920:5921 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 45.774242][ T5921] binder: 5920:5921 ioctl c0306201 200001c0 returned -22 [ 45.784502][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.785262][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.785779][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.786352][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.786845][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.787629][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.788160][ T4711] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 45.823960][ T5926] loop3: detected capacity change from 0 to 8 [ 45.928026][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.933578][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.935734][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.943583][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.951532][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.955710][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.958855][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.961731][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.991574][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.996651][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.000078][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.000120][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.006738][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.006787][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.139494][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.159838][ T5782] veth0_vlan: entered promiscuous mode [ 46.162764][ T5782] veth1_vlan: entered promiscuous mode [ 46.169031][ T5782] veth0_macvtap: entered promiscuous mode [ 46.170057][ T5782] veth1_macvtap: entered promiscuous mode [ 46.175473][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.176513][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.188135][ T50] Bluetooth: hci3: command tx timeout [ 46.221654][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.221686][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.238070][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.238095][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.248339][ T5422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.248798][ T5422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.248818][ T5422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.248833][ T5422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.274479][ T5417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.300768][ T5282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.345996][ T5417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.411150][ T4726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.411752][ T4726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.412116][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.412480][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.412698][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.430800][ T5417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.495703][ T5417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.661148][ T5417] macvlan2: left allmulticast mode [ 46.661176][ T5417] ip6gretap0: left allmulticast mode [ 46.665049][ T5417] macvlan2: left promiscuous mode [ 46.666238][ T5417] bridge0: port 3(macvlan2) entered disabled state [ 46.670339][ T5417] bridge_slave_1: left allmulticast mode [ 46.670363][ T5417] bridge_slave_1: left promiscuous mode [ 46.670467][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.676782][ T5417] bridge_slave_0: left allmulticast mode [ 46.676807][ T5417] bridge_slave_0: left promiscuous mode [ 46.676877][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.697930][ T5994] loop4: detected capacity change from 0 to 4096 [ 46.776868][ T5417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.789947][ T5417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.828635][ T5417] bond0 (unregistering): Released all slaves [ 46.846229][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.846311][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.846408][ T5970] bridge_slave_0: entered allmulticast mode [ 46.846881][ T5970] bridge_slave_0: entered promiscuous mode [ 46.848114][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.848136][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.848194][ T5970] bridge_slave_1: entered allmulticast mode [ 46.848682][ T5970] bridge_slave_1: entered promiscuous mode [ 46.863755][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.868045][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.893056][ T5970] team0: Port device team_slave_0 added [ 46.894018][ T5970] team0: Port device team_slave_1 added [ 46.929064][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.937570][ T5849] overlayfs: failed to resolve './file0/file0': -4 [ 46.964891][ T867] usb 1-1: USB disconnect, device number 2 [ 46.971693][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.971723][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.971754][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.974013][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.974021][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.974032][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.006302][ T5970] hsr_slave_0: entered promiscuous mode [ 47.009919][ T5970] hsr_slave_1: entered promiscuous mode [ 47.010600][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 47.010627][ T5970] Cannot create hsr debugfs directory [ 47.072840][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.155831][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 47.236863][ T5417] hsr_slave_0: left promiscuous mode [ 47.239431][ T5417] hsr_slave_1: left promiscuous mode [ 47.241337][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.242781][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.244573][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.244596][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.257696][ T5417] veth1_macvtap: left promiscuous mode [ 47.257744][ T5417] veth0_macvtap: left promiscuous mode [ 47.257809][ T5417] veth1_vlan: left promiscuous mode [ 47.257868][ T5417] veth0_vlan: left promiscuous mode [ 47.270487][ T6049] set_capacity_and_notify: 1 callbacks suppressed [ 47.271273][ T6049] loop1: detected capacity change from 0 to 8192 [ 47.275051][ T6049] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.277611][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.277645][ T6049] FAT-fs (loop1): Filesystem has been set read-only [ 47.278118][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278136][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278149][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278160][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278171][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278181][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278192][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.278202][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.280363][ T6049] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 47.292295][ T6051] syz.3.284 uses obsolete (PF_INET,SOCK_PACKET) [ 47.611454][ T5417] team0 (unregistering): Port device team_slave_1 removed [ 47.618068][ T5417] team0 (unregistering): Port device team_slave_0 removed [ 47.756412][ T6064] loop3: detected capacity change from 0 to 1024 [ 47.758406][ T6064] EXT4-fs: Ignoring removed bh option [ 47.763976][ T6064] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 47.801870][ T6064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.811559][ T5970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.820669][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.821032][ T5970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.825580][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.826051][ T5970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.840433][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.842077][ T5970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.846241][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.847179][ T6064] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.286: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 47.856470][ T6064] EXT4-fs (loop3): Remounting filesystem read-only [ 47.915109][ T6080] openvswitch: netlink: Actions may not be safe on all matching packets [ 47.926791][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.947654][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.965166][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.025497][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.025547][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.034184][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.034219][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.105398][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 48.143885][ T6095] loop3: detected capacity change from 0 to 512 [ 48.145792][ T6095] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 48.221460][ T6103] 9p: Bad value for 'rfdno' [ 48.263206][ T6111] loop3: detected capacity change from 0 to 256 [ 48.269648][ T50] Bluetooth: hci3: command tx timeout [ 48.324660][ T6118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.326692][ T6118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.331506][ T4805] gretap1: entered promiscuous mode [ 48.430417][ T50] Bluetooth: hci0: command tx timeout [ 48.588764][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.056408][ T6160] __nla_validate_parse: 5 callbacks suppressed [ 49.058016][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 49.130431][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 49.513303][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.560278][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.561704][ T6192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.568323][ T6192] overlayfs: failed to set xattr on upper [ 49.569426][ T6192] overlayfs: ...falling back to redirect_dir=nofollow. [ 49.570711][ T6192] overlayfs: ...falling back to uuid=null. [ 49.628544][ T6200] pimreg: entered allmulticast mode [ 49.699129][ T5970] veth0_vlan: entered promiscuous mode [ 49.704037][ T5970] veth1_vlan: entered promiscuous mode [ 49.722936][ T5970] veth0_macvtap: entered promiscuous mode [ 49.724547][ T5970] veth1_macvtap: entered promiscuous mode [ 49.734394][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.742739][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.759206][ T5427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.760740][ T5427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.760760][ T5427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.780332][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.780362][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.795351][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.795379][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.797690][ T1431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.948662][ T6233] loop5: detected capacity change from 0 to 512 [ 49.978869][ T6230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.312'. [ 50.016816][ T6233] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.274: iget: bad extended attribute block 1 [ 50.016851][ T6233] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.020109][ T6233] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.274: couldn't read orphan inode 15 (err -117) [ 50.020135][ T6233] loop5: lost filesystem error report for type 5 error -117 [ 50.020821][ T6233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.023858][ T6233] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 13: comm syz.5.274: lblock 0 mapped to illegal pblock 13 (length 1) [ 50.024058][ T6233] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.5.274: error -EUCLEAN reading directory block [ 50.059940][ T5970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.151460][ T30] audit: type=1326 audit(50.120:2): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=_ pid=6253 comm="syz.0.315" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f779228 code=0x0 [ 50.160543][ T6257] loop4: detected capacity change from 0 to 8 [ 50.188869][ T6262] loop5: detected capacity change from 0 to 1024 [ 50.192667][ T6262] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 50.273518][ T6276] syz.4.320 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.347921][ T50] Bluetooth: hci3: command tx timeout [ 50.462928][ T6296] loop3: detected capacity change from 0 to 512 [ 50.464505][ T6296] EXT4-fs: Ignoring removed orlov option [ 50.465850][ T6296] EXT4-fs: Ignoring removed i_version option [ 50.467376][ T6296] ext4: Unknown parameter 'fsuuid' [ 50.504051][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.326'. [ 50.506723][ T6300] loop3: detected capacity change from 0 to 512 [ 50.507064][ T50] Bluetooth: hci0: command tx timeout [ 50.509095][ T6300] ext4: Unknown parameter 'subj_type' [ 50.649170][ T6307] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 50.761486][ T6318] loop3: detected capacity change from 0 to 512 [ 50.764912][ T6318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.778640][ T6318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.782619][ T6318] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.331: corrupted xattr block 33: invalid header [ 50.785194][ T6318] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.331: corrupted xattr block 33: invalid header [ 50.785552][ T6318] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.331: corrupted xattr block 33: invalid header [ 50.827874][ T6318] netlink: 52 bytes leftover after parsing attributes in process `syz.3.331'. [ 50.831327][ T6318] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.832755][ T6318] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 50.832775][ T6318] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.832775][ T6318] [ 50.832783][ T6318] EXT4-fs (loop3): Total free blocks count 0 [ 50.832791][ T6318] EXT4-fs (loop3): Free/Dirty block details [ 50.832808][ T6318] EXT4-fs (loop3): free_blocks=65280 [ 50.832824][ T6318] EXT4-fs (loop3): dirty_blocks=31 [ 50.832831][ T6318] EXT4-fs (loop3): Block reservation details [ 50.832837][ T6318] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 50.925733][ T4717] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 50.929826][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.965813][ T6323] EXT4-fs: Ignoring removed orlov option [ 51.043487][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.349676][ T4717] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz-executor: bit already cleared for inode 13 [ 51.355858][ T4717] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 51.367428][ T4717] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 51.368907][ T4717] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 51.369264][ T4717] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 51.370677][ T4717] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 16 [ 51.372525][ T4717] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 16 [ 51.415007][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 51.415040][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 51.418000][ T6340] validate_nla: 4 callbacks suppressed [ 51.418010][ T6340] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 51.418020][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'. [ 51.418070][ T6340] dummy0: entered promiscuous mode [ 51.456014][ T5133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.290054][ T6359] set_capacity_and_notify: 2 callbacks suppressed [ 52.290089][ T6359] loop1: detected capacity change from 0 to 8 [ 52.290884][ T6359] squashfs: Unknown parameter '' [ 52.322515][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.346'. [ 52.355313][ T6362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.347'. [ 52.412818][ T6364] loop1: detected capacity change from 0 to 1024 [ 52.415075][ T6364] EXT4-fs: inline encryption not supported [ 52.474243][ T50] Bluetooth: hci3: command tx timeout [ 52.501742][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.549365][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.597107][ T50] Bluetooth: hci0: command tx timeout [ 52.675248][ T3417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.724185][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.725713][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.727768][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.729855][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.731971][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.775825][ T3417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.832076][ T6397] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 52.893297][ T3417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.922373][ T6411] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 52.965247][ T3417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.020560][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.022149][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.023972][ T6385] bridge_slave_0: entered allmulticast mode [ 53.025482][ T6385] bridge_slave_0: entered promiscuous mode [ 53.026348][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.026371][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.026423][ T6385] bridge_slave_1: entered allmulticast mode [ 53.027104][ T6385] bridge_slave_1: entered promiscuous mode [ 53.034493][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.036038][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.044811][ T6385] team0: Port device team_slave_0 added [ 53.045685][ T6385] team0: Port device team_slave_1 added [ 53.052506][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.052534][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.052559][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.053072][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.053078][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.053090][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.063374][ T6385] hsr_slave_0: entered promiscuous mode [ 53.063673][ T6385] hsr_slave_1: entered promiscuous mode [ 53.200492][ T3417] bridge_slave_1: left allmulticast mode [ 53.202063][ T3417] bridge_slave_1: left promiscuous mode [ 53.203613][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.209551][ T3417] bridge_slave_0: left allmulticast mode [ 53.209586][ T3417] bridge_slave_0: left promiscuous mode [ 53.209669][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.283822][ T3417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.318724][ T3417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.357786][ T3417] bond0 (unregistering): Released all slaves [ 53.394198][ T6385] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.404362][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.404692][ T6385] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.412374][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.412900][ T6385] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.419505][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.419823][ T6385] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.426692][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.526542][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.534405][ T6385] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.538115][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.538179][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.542900][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.542954][ T5417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.616777][ T4403] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.652356][ T3417] hsr_slave_0: left promiscuous mode [ 53.653849][ T3417] hsr_slave_1: left promiscuous mode [ 53.655287][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.657852][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.659743][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.661320][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.665985][ T3417] veth1_macvtap: left promiscuous mode [ 53.667368][ T3417] veth0_macvtap: left promiscuous mode [ 53.668631][ T3417] veth1_vlan: left promiscuous mode [ 53.669887][ T3417] veth0_vlan: left promiscuous mode [ 53.814615][ T3417] team0 (unregistering): Port device team_slave_1 removed [ 53.820411][ T3417] team0 (unregistering): Port device team_slave_0 removed [ 53.898066][ T4403] 8021q: adding VLAN 0 to HW filter on device eth5 [ 54.243665][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.342150][ T6517] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 54.595473][ T6523] sctp: [Deprecated]: syz.1.374 (pid 6523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.595473][ T6523] Use struct sctp_sack_info instead [ 54.671534][ T4726] Bluetooth: hci0: command tx timeout [ 54.733599][ T6385] veth0_vlan: entered promiscuous mode [ 54.738972][ T4403] 8021q: adding VLAN 0 to HW filter on device eth6 [ 54.742094][ T6385] veth1_vlan: entered promiscuous mode [ 54.747241][ T4726] Bluetooth: hci2: command tx timeout [ 54.749303][ T6537] __nla_validate_parse: 5 callbacks suppressed [ 54.749338][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 54.762114][ T6385] veth0_macvtap: entered promiscuous mode [ 54.768942][ T6385] veth1_macvtap: entered promiscuous mode [ 54.773687][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.785438][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.843457][ T5427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.864377][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.864410][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.868432][ T3417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.883625][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.883658][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.897660][ T5422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.897708][ T5422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.912536][ T6561] loop5: detected capacity change from 0 to 1024 [ 54.933432][ T6561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.942892][ T6566] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 54.952585][ T6561] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.5.382: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 54.964352][ T6566] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 54.969275][ T6561] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem [ 54.973116][ T6561] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.382: Deleting old file: nlink 1, error=-117 [ 55.028211][ T5970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.055526][ T6578] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 55.156186][ T4403] 8021q: adding VLAN 0 to HW filter on device eth7 [ 55.165772][ T6593] loop1: detected capacity change from 0 to 512 [ 55.175640][ T6593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.176874][ T6582] ima: policy update failed [ 55.178176][ T30] audit: type=1802 audit(55.140:3): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.386" res=0 errno=0 [ 55.182164][ T6593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 55.182217][ T6593] System zones: 1-12 [ 55.185263][ T6593] EXT4-fs (loop1): 1 truncate cleaned up [ 55.189606][ T6593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.226122][ T6603] process 'syz.5.389' launched './file2' with NULL argv: empty string added [ 55.249948][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.265900][ T6600] loop4: detected capacity change from 0 to 4096 [ 55.271017][ T6600] EXT4-fs: inline encryption not supported [ 55.272414][ T6600] EXT4-fs (loop4): Test dummy encryption mode enabled [ 55.276680][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.356778][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.391'. [ 55.562738][ T6622] loop5: detected capacity change from 0 to 512 [ 55.564227][ T6622] EXT4-fs (loop5): filesystem is read-only [ 55.564238][ T6622] EXT4-fs (loop5): #blocks per group too big: 2113961984 [ 55.827250][ T6637] loop5: detected capacity change from 0 to 512 [ 55.829057][ T6637] EXT4-fs: Ignoring removed nobh option [ 55.847962][ T6637] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.397: corrupted inode contents [ 55.851494][ T6637] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 55.854794][ T6637] EXT4-fs (loop5): Remounting filesystem read-only [ 55.857930][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 55.857947][ C0] EXT4-fs (loop5): initial error at time 55: ext4_do_update_inode:5742: inode 3 [ 55.857966][ C0] EXT4-fs (loop5): last error at time 55: ext4_do_update_inode:5742: inode 3 [ 55.870760][ T6637] Quota error (device loop5): write_blk: dquota write failed [ 55.872688][ T6637] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 55.878505][ T6637] EXT4-fs (loop5): 1 truncate cleaned up [ 55.880406][ T6637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.887345][ T6642] loop6: detected capacity change from 0 to 512 [ 55.890567][ T6642] EXT4-fs: Ignoring removed bh option [ 55.904030][ T6642] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.906736][ T6642] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 55.910337][ T6642] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.398: Corrupt directory, running e2fsck is recommended [ 55.915003][ T6642] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 55.917518][ T6642] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.398: corrupted in-inode xattr: e_name out of bounds [ 55.921101][ T6642] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.921325][ T6642] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.398: couldn't read orphan inode 15 (err -117) [ 55.926185][ T6642] loop6: lost filesystem error report for type 5 error -117 [ 55.926945][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 55.926980][ C0] EXT4-fs (loop6): initial error at time 55: ext4_iget_extra_inode:5180: inode 15 [ 55.927015][ C0] EXT4-fs (loop6): last error at time 55: ext4_orphan_get:1404 [ 55.934580][ T6642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.940056][ T5970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.947598][ T6642] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.947627][ T6642] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 55.947643][ T6642] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.398: Corrupt directory, running e2fsck is recommended [ 55.948339][ T6642] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.948352][ T6642] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 55.948361][ T6642] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.398: Corrupt directory, running e2fsck is recommended [ 55.952695][ T6642] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.952712][ T6642] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 55.952723][ T6642] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.398: Corrupt directory, running e2fsck is recommended [ 55.957514][ T6642] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.967921][ T6642] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.398: path /1/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 55.977351][ T6642] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.398: path /1/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 55.998735][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.024453][ T6645] syzkaller0: entered promiscuous mode [ 56.024487][ T6645] syzkaller0: entered allmulticast mode [ 56.031485][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.400'. [ 56.034136][ T6647] tc_dump_action: action bad kind [ 56.036352][ T6645] tipc: Started in network mode [ 56.036398][ T6645] tipc: Node identity 9acdb9f17697, cluster identity 4711 [ 56.038544][ T6645] tipc: Enabled bearer , priority 0 [ 56.059774][ T6649] netlink: 'syz.6.401': attribute type 11 has an invalid length. [ 56.061017][ T6645] tipc: Resetting bearer [ 56.070298][ T6644] tipc: Resetting bearer [ 56.083530][ T6644] tipc: Disabling bearer [ 56.089101][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.145376][ T6651] loop6: detected capacity change from 0 to 512 [ 56.148256][ T6651] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 56.165946][ T6651] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.404: bg 0: block 255: padding at end of block bitmap is not set [ 56.165992][ T6651] loop6: lost filesystem error report for type 5 error -117 [ 56.169077][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 56.169094][ C0] EXT4-fs (loop6): initial error at time 56: ext4_validate_block_bitmap:441 [ 56.169107][ C0] EXT4-fs (loop6): last error at time 56: ext4_validate_block_bitmap:441 [ 56.179591][ T6651] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 56.181663][ T6651] loop6: lost filesystem error report for type 5 error -117 [ 56.184652][ T6651] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.404: invalid indirect mapped block 1 (level 1) [ 56.184696][ T6651] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.189802][ T6651] EXT4-fs (loop6): 1 truncate cleaned up [ 56.195954][ T6651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.340675][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 56.869248][ T4726] Bluetooth: hci2: command tx timeout [ 57.067464][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.223229][ T6686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.411'. [ 57.223264][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 57.541053][ T6691] loop6: detected capacity change from 0 to 1024 [ 57.552494][ T6691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.557121][ T6691] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.413: corrupted xattr block 84: invalid header [ 57.557936][ T6691] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.413: corrupted xattr block 84: invalid header [ 57.558178][ T6691] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.413: corrupted xattr block 84: invalid header [ 57.558530][ T6691] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.413: corrupted xattr block 84: invalid header [ 57.562196][ T6691] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.413: Freeing blocks not in datazone - block = 0, count = 16 [ 57.582032][ T5422] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 57.587262][ T5422] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.587294][ T5422] EXT4-fs (loop6): This should not happen!! Data will be lost [ 57.587294][ T5422] [ 57.587303][ T5422] EXT4-fs (loop6): Total free blocks count 0 [ 57.587312][ T5422] EXT4-fs (loop6): Free/Dirty block details [ 57.587329][ T5422] EXT4-fs (loop6): free_blocks=16 [ 57.587343][ T5422] EXT4-fs (loop6): dirty_blocks=16 [ 57.587349][ T5422] EXT4-fs (loop6): Block reservation details [ 57.587355][ T5422] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 57.589577][ T6385] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 57.592487][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.612966][ T6698] syzkaller0: entered promiscuous mode [ 57.613000][ T6698] syzkaller0: entered allmulticast mode [ 57.616944][ T6698] tipc: Started in network mode [ 57.616977][ T6698] tipc: Node identity aaf94e32b3ff, cluster identity 4711 [ 57.617070][ T6698] tipc: Enabled bearer , priority 0 [ 57.620701][ T6698] tipc: Resetting bearer [ 57.629141][ T6697] tipc: Resetting bearer [ 57.645455][ T6697] tipc: Disabling bearer [ 57.658628][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 58.006775][ T6712] netlink: 'syz.4.419': attribute type 21 has an invalid length. [ 58.006834][ T6712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.419'. [ 58.015952][ T6712] netlink: 'syz.4.419': attribute type 21 has an invalid length. [ 58.015986][ T6712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.419'. [ 58.084131][ T6719] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 58.121949][ T6719] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 58.143516][ T6726] loop1: detected capacity change from 0 to 4096 [ 58.176109][ T6728] autofs: Unknown parameter 'user.incfs.metadata' [ 58.215846][ T6735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.425'. [ 58.233619][ T6737] loop4: detected capacity change from 0 to 512 [ 58.236995][ T6737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.241603][ T6737] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.426: invalid indirect mapped block 4294967295 (level 0) [ 58.244826][ T6737] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 58.245598][ T6737] EXT4-fs (loop4): Remounting filesystem read-only [ 58.247493][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 58.247508][ C0] EXT4-fs (loop4): initial error at time 58: ext4_free_branches:1023: inode 16 [ 58.247525][ C0] EXT4-fs (loop4): last error at time 58: ext4_free_branches:1023: inode 16 [ 58.254863][ T6737] EXT4-fs (loop4): 1 orphan inode deleted [ 58.254875][ T6737] EXT4-fs (loop4): 1 truncate cleaned up [ 58.304280][ T6743] syzkaller0: entered promiscuous mode [ 58.305463][ T6743] syzkaller0: entered allmulticast mode [ 58.309951][ T6743] tipc: Started in network mode [ 58.311473][ T6743] tipc: Node identity 06531eee42e5, cluster identity 4711 [ 58.313471][ T6743] tipc: Enabled bearer , priority 0 [ 58.317362][ T6743] tipc: Resetting bearer [ 58.319628][ T6742] tipc: Resetting bearer [ 58.324799][ T6742] tipc: Disabling bearer [ 58.388154][ T6749] loop4: detected capacity change from 0 to 512 [ 58.390651][ T6749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.398176][ T6749] EXT4-fs (loop4): 1 truncate cleaned up [ 58.469377][ T6755] sctp: [Deprecated]: syz.4.432 (pid 6755) Use of int in max_burst socket option deprecated. [ 58.469377][ T6755] Use struct sctp_assoc_value instead [ 58.477084][ T6757] sctp: [Deprecated]: syz.4.432 (pid 6757) Use of int in max_burst socket option deprecated. [ 58.477084][ T6757] Use struct sctp_assoc_value instead [ 58.491408][ T6759] loop1: detected capacity change from 0 to 512 [ 58.499841][ T6759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.499876][ T6759] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 58.561713][ T6770] loop6: detected capacity change from 0 to 512 [ 58.567268][ T6770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.578419][ T6770] EXT4-fs (loop6): 1 truncate cleaned up [ 58.628505][ T6781] loop1: detected capacity change from 0 to 256 [ 58.730945][ T6786] loop6: detected capacity change from 0 to 256 [ 58.731601][ T6786] vfat: Unknown parameter 'F' [ 58.766788][ T6789] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 58.906932][ T4726] Bluetooth: hci2: command tx timeout [ 59.812975][ T6801] loop6: detected capacity change from 0 to 512 [ 59.818588][ T6801] EXT4-fs: quotafile must be on filesystem root [ 59.843704][ T6808] team0: entered promiscuous mode [ 59.843735][ T6808] team_slave_0: entered promiscuous mode [ 59.843809][ T6808] team_slave_1: entered promiscuous mode [ 59.844520][ T6808] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 59.897838][ T6815] __nla_validate_parse: 5 callbacks suppressed [ 59.897894][ T6815] netlink: 96 bytes leftover after parsing attributes in process `syz.0.451'. [ 59.905685][ T6815] vlan3: entered allmulticast mode [ 59.905717][ T6815] erspan0: entered allmulticast mode [ 60.238492][ T6838] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.238534][ T6838] vhci_hcd vhci_hcd.2: invalid port number 96 [ 60.238544][ T6838] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 60.249410][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 60.352706][ T6845] loop5: detected capacity change from 0 to 256 [ 61.096403][ T4726] Bluetooth: hci2: command tx timeout [ 61.295298][ T6854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.295341][ T6854] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 61.499010][ T6873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.541182][ T6854] bridge2: entered promiscuous mode [ 61.579037][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.468'. [ 61.668507][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.6.473'. [ 61.668635][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.473'. [ 61.794374][ T6924] netlink: 44 bytes leftover after parsing attributes in process `syz.6.479'. [ 61.796726][ T6924] netlink: 35 bytes leftover after parsing attributes in process `syz.6.479'. [ 61.798529][ T6924] netlink: 'syz.6.479': attribute type 5 has an invalid length. [ 61.800447][ T6924] netlink: 'syz.6.479': attribute type 6 has an invalid length. [ 61.804170][ T6924] netlink: 35 bytes leftover after parsing attributes in process `syz.6.479'. [ 62.824071][ T6951] set_capacity_and_notify: 2 callbacks suppressed [ 62.839954][ T6957] Injecting memory failure for pfn 0x11f5c2 at process virtual address 0x20a07000 [ 62.843351][ T6951] loop5: detected capacity change from 0 to 512 [ 62.843972][ T6951] EXT4-fs: Ignoring removed nobh option [ 62.843990][ T6951] ext4: Unknown parameter 'uid>00000000000000000000' [ 62.878070][ T6951] loop5: detected capacity change from 0 to 512 [ 62.887514][ T6957] Memory failure: 0x11f5c2: recovery action for clean LRU page: Recovered [ 62.894375][ T6951] EXT4-fs: Ignoring removed nobh option [ 62.894412][ T6951] ext4: Unknown parameter 'uid>00000000000000000000' [ 62.945038][ T6964] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20002 [ 62.945283][ T6964] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20004 [ 62.973803][ T6959] loop1: detected capacity change from 0 to 4096 [ 62.974138][ T6959] ext4: Unknown parameter 'rootcontext' [ 62.995200][ T6974] loop5: detected capacity change from 0 to 512 [ 63.021934][ T6976] loop6: detected capacity change from 0 to 1024 [ 63.029322][ T6959] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 63.029361][ T6959] syzkaller0: group set to 0 [ 63.030050][ T6959] binfmt_misc: register: failed to install interpreter file ./file2 [ 63.030284][ T6959] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 63.030414][ T6959] syzkaller0: linktype set to 0 [ 63.049572][ T6976] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.491: lblock 3 mapped to illegal pblock 3 (length 3) [ 63.054141][ T6976] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 63.054532][ T6974] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 63.055517][ T6974] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 63.055535][ T6974] EXT4-fs (loop5): This should not happen!! Data will be lost [ 63.055535][ T6974] [ 63.055544][ T6974] EXT4-fs (loop5): Total free blocks count 0 [ 63.055553][ T6974] EXT4-fs (loop5): Free/Dirty block details [ 63.055561][ T6974] EXT4-fs (loop5): free_blocks=65280 [ 63.055580][ T6974] EXT4-fs (loop5): dirty_blocks=33 [ 63.055587][ T6974] EXT4-fs (loop5): Block reservation details [ 63.055593][ T6974] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 63.072044][ T6976] EXT4-fs (loop6): This should not happen!! Data will be lost [ 63.072044][ T6976] [ 63.114408][ T13] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 63.115476][ T13] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 63.115508][ T13] EXT4-fs (loop6): This should not happen!! Data will be lost [ 63.115508][ T13] [ 63.118415][ T6385] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 63.124921][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'. [ 63.487232][ T5970] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 63.531602][ T7008] loop5: detected capacity change from 0 to 256 [ 64.537491][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 64.642535][ T7034] netlink: 'syz.1.499': attribute type 16 has an invalid length. [ 64.656298][ T7030] loop4: detected capacity change from 0 to 8192 [ 64.679278][ T7037] loop5: detected capacity change from 0 to 256 [ 64.712679][ T1598] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.714087][ T1598] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.717723][ T1096] cfg80211: failed to load regulatory.db [ 64.740988][ T7039] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 64.747124][ T7039] 0ªî{X¹¦: entered allmulticast mode [ 64.747375][ T7039] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 64.878421][ T7057] loop1: detected capacity change from 0 to 128 [ 64.881820][ T7057] FAT-fs (loop1): bogus logical sector size 0 [ 64.883328][ T7057] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 64.885241][ T7057] FAT-fs (loop1): Can't find a valid FAT filesystem [ 64.905308][ T7065] loop4: detected capacity change from 0 to 512 [ 64.905598][ T7065] EXT4-fs: Ignoring removed nobh option [ 64.936758][ T7065] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.936878][ T7065] EXT4-fs (loop4): mount failed [ 64.965362][ T7065] EXT4-fs: Ignoring removed nobh option [ 64.986153][ T7065] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.986213][ T7065] EXT4-fs (loop4): mount failed [ 65.013271][ T7076] FAT-fs (loop5): bogus number of FAT sectors [ 65.013291][ T7076] FAT-fs (loop5): Can't find a valid FAT filesystem [ 65.077571][ T7085] fuse: Unexpected value for 'default_permissions' [ 65.117605][ T7080] netlink: 'syz.5.516': attribute type 13 has an invalid length. [ 65.147599][ T7093] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 65.150090][ T7093] __nla_validate_parse: 2 callbacks suppressed [ 65.150122][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 65.220019][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 65.226213][ T7104] 9p: Bad value for 'rfdno' [ 65.237213][ T7101] SQUASHFS error: Failed to read block 0x4de: -5 [ 65.238839][ T7101] SQUASHFS error: Failed to read block 0x4de: -5 [ 65.240153][ T7101] SQUASHFS error: Failed to read block 0x4de: -5 [ 65.241329][ T7101] SQUASHFS error: Failed to read block 0x4de: -5 [ 65.245648][ T7101] SQUASHFS error: Failed to read block 0x4de: -5 [ 65.254987][ T7105] EXT4-fs: Ignoring removed orlov option [ 65.255045][ T7105] ext2: Unknown parameter 'hash' [ 65.260794][ T7105] CUSE: DEVNAME unspecified [ 65.389247][ T7112] EXT4-fs (loop5): Test dummy encryption mode enabled [ 65.400592][ T7112] EXT4-fs mount: 10 callbacks suppressed [ 65.400624][ T7112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.448783][ T5970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.453618][ T7132] IPv6: addrconf: prefix option has invalid lifetime [ 65.989402][ T7153] vfat: Unknown parameter 'ÿÿÿÿ1844674407370955161518446744073709551615' [ 66.041068][ T7165] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 66.059319][ T7162] netlink: 'syz.5.539': attribute type 10 has an invalid length. [ 66.073678][ T7162] team0: Port device dummy0 added [ 66.164375][ T7170] EXT4-fs (loop6): Invalid log block size: 2147483649 [ 66.239443][ T7169] mmap: syz.6.542 (7169): VmData 25870336 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 66.247598][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 66.251029][ T7176] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 66.251489][ T7176] unable to read xattr id index table [ 66.254685][ T7176] SQUASHFS error: zlib decompression failed, data probably corrupt [ 66.254717][ T7176] SQUASHFS error: Failed to read block 0x9b: -5 [ 66.254726][ T7176] SQUASHFS error: Unable to read metadata cache entry [99] [ 66.254735][ T7176] SQUASHFS error: Unable to read inode 0x127 [ 66.320262][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 66.332298][ T7179] bridge0: port 3(batadv1) entered blocking state [ 66.335710][ T7179] bridge0: port 3(batadv1) entered disabled state [ 66.335810][ T7179] batadv1: entered allmulticast mode [ 66.336347][ T7179] batadv1: entered promiscuous mode [ 66.499690][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.499932][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.863507][ T3417] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 66.863545][ T3417] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 67.366077][ T7207] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96 [ 67.460849][ T4724] atkbd serio0: keyboard reset failed on [ 67.548373][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.550927][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.641266][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 67.686402][ T7249] netlink: 160 bytes leftover after parsing attributes in process `syz.1.576'. [ 68.319423][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.319609][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.412218][ T7295] syzkaller0: entered promiscuous mode [ 68.412249][ T7295] syzkaller0: entered allmulticast mode [ 68.418677][ T7295] tipc: Enabled bearer , priority 0 [ 68.422860][ T7295] tipc: Resetting bearer [ 68.433268][ T7295] tipc: Disabling bearer [ 68.500291][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.600'. [ 68.523942][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.525658][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.541773][ T7314] kernel profiling enabled (shift: 5) [ 68.551318][ T7314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 68.553523][ T7314] lo: entered promiscuous mode [ 68.559201][ T30] audit: type=1326 audit(68.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.559239][ T30] audit: type=1326 audit(68.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.559269][ T30] audit: type=1326 audit(68.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.559290][ T30] audit: type=1326 audit(68.062:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.561515][ T30] audit: type=1326 audit(68.062:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.561533][ T30] audit: type=1326 audit(68.062:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.561549][ T30] audit: type=1326 audit(68.062:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.561563][ T30] audit: type=1326 audit(68.062:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.561577][ T30] audit: type=1326 audit(68.062:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.561594][ T30] audit: type=1326 audit(68.062:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.6.604" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 68.756859][ T7333] bridge_slave_0: default FDB implementation only supports local addresses [ 68.788789][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.788995][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.902844][ T7354] netlink: 56 bytes leftover after parsing attributes in process `syz.0.613'. [ 68.912386][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.614'. [ 68.986293][ T7362] input: syz0 as /devices/virtual/input/input7 [ 69.168259][ T10] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 69.192780][ T7380] fido_id[7380]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.328100][ T4724] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 69.488904][ T4724] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.491380][ T4724] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.491404][ T4724] usb 1-1: config 0 has no interface number 0 [ 69.491433][ T4724] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 69.491450][ T4724] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 69.491471][ T4724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.496119][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.496290][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.503711][ T4724] usb 1-1: config 0 descriptor?? [ 69.505274][ T7364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.510410][ T4724] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 69.704785][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.707697][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.729433][ T4724] usb 1-1: USB disconnect, device number 3 [ 70.413228][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.417190][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.434184][ T7500] syzkaller0: entered promiscuous mode [ 70.434218][ T7500] syzkaller0: entered allmulticast mode [ 70.439265][ T7500] tipc: Enabled bearer , priority 0 [ 70.444277][ T7500] tipc: Resetting bearer [ 70.455930][ T7500] tipc: Disabling bearer [ 70.504952][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.506985][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.616191][ T26] IPVS: starting estimator thread 0... [ 70.711982][ T7512] IPVS: using max 64 ests per chain, 153600 per kthread [ 70.720767][ T7520] tipc: New replicast peer: 172.20.20.187 [ 70.724910][ T7520] tipc: Enabled bearer , priority 10 [ 70.850580][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.855499][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.026394][ T7545] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 71.028001][ T7545] __nla_validate_parse: 2 callbacks suppressed [ 71.029475][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'. [ 71.197291][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.203155][ T7561] set_capacity_and_notify: 11 callbacks suppressed [ 71.205924][ T7561] loop6: detected capacity change from 0 to 1024 [ 71.210786][ T7561] EXT4-fs: Ignoring removed bh option [ 71.214961][ T7561] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 71.228439][ T7561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.244535][ T7561] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 71.260550][ T7561] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 71.293085][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.402926][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 71.405295][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 71.406082][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 71.408435][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 71.408446][ T10] usb 1-1: Product: syz [ 71.408453][ T10] usb 1-1: Manufacturer: syz [ 71.408459][ T10] usb 1-1: SerialNumber: syz [ 71.410565][ T10] usb 1-1: config 0 descriptor?? [ 71.411432][ T7539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.411933][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 71.411949][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 71.792635][ T7577] loop5: detected capacity change from 0 to 512 [ 71.794813][ T7577] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 71.794904][ T7577] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.795891][ T7577] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 71.796299][ T7577] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 71.796430][ T7577] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.688: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 71.796451][ T7577] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.796625][ T7577] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.688: couldn't read orphan inode 13 (err -117) [ 71.796639][ T7577] loop5: lost filesystem error report for type 5 error -117 [ 71.797189][ T7577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.921874][ T4813] tipc: Node number set to 419843634 [ 72.008995][ T7580] EXT4-fs error (device loop5): ext4_lookup:1785: comm syz.5.688: inode #15: comm syz.5.688: iget: illegal inode # [ 72.646505][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.646714][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.737243][ T5970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.758706][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.758901][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.731123][ T7624] syzkaller0: entered promiscuous mode [ 73.731160][ T7624] syzkaller0: entered allmulticast mode [ 73.734192][ T7624] tipc: Enabled bearer , priority 0 [ 73.735652][ T7622] tipc: Resetting bearer [ 73.749484][ T7622] tipc: Disabling bearer [ 74.213008][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.716'. [ 74.280422][ T7658] syzkaller0: entered promiscuous mode [ 74.280452][ T7658] syzkaller0: entered allmulticast mode [ 74.283289][ T7658] tipc: Started in network mode [ 74.283664][ T7658] tipc: Node identity 624c2cc1bfb1, cluster identity 4711 [ 74.283886][ T7658] tipc: Enabled bearer , priority 0 [ 74.285842][ T7657] tipc: Resetting bearer [ 74.293586][ T7657] tipc: Disabling bearer [ 74.447869][ T7662] loop6: detected capacity change from 0 to 512 [ 74.466154][ T7662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.528058][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.614603][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.614835][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.695583][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'. [ 75.736372][ T7689] syzkaller0: entered promiscuous mode [ 75.737525][ T7689] syzkaller0: entered allmulticast mode [ 75.742159][ T7689] tipc: Enabled bearer , priority 0 [ 75.744273][ T7688] tipc: Resetting bearer [ 75.753985][ T7688] tipc: Disabling bearer [ 75.833467][ T7699] binder: 7697:7699 tried to acquire reference to desc 0, got 1 instead [ 75.833772][ T7699] binder: 7697:7699 got transaction with invalid offset (0, min 0 max 15) or object. [ 75.833805][ T7699] binder: 7697:7699 transaction call to 7697:0 failed 14/29201/-22, code 0 size 15-24 line 3524 [ 75.833988][ T4724] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.946470][ T7715] syzkaller0: entered promiscuous mode [ 75.946505][ T7715] syzkaller0: entered allmulticast mode [ 75.962973][ T7717] tipc: Cannot configure node identity twice [ 75.967320][ T5427] tipc: Subscription rejected, illegal request [ 76.241251][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.241489][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.245952][ T7748] syzkaller0: entered promiscuous mode [ 76.245981][ T7748] syzkaller0: entered allmulticast mode [ 76.458715][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.764'. [ 76.529025][ T7766] syz_tun: entered allmulticast mode [ 76.532605][ T7766] dvmrp6: entered allmulticast mode [ 76.534706][ T7765] syz_tun: left allmulticast mode [ 76.840328][ T7772] syzkaller0: entered promiscuous mode [ 76.841481][ T7772] syzkaller0: entered allmulticast mode [ 76.865487][ T26] usb 1-1: USB disconnect, device number 4 [ 77.232389][ T26] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 77.395358][ T26] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 77.396123][ T26] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.396136][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.396147][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 77.397611][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.397625][ T26] usb 1-1: Product: syz [ 77.397634][ T26] usb 1-1: Manufacturer: syz [ 77.397641][ T26] usb 1-1: SerialNumber: syz [ 77.408718][ T26] usb 1-1: config 0 descriptor?? [ 77.409661][ T7779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.412606][ T26] Registered IR keymap rc-streamzap [ 77.442181][ T7812] syzkaller0: entered promiscuous mode [ 77.444975][ T7812] syzkaller0: entered allmulticast mode [ 77.448357][ T26] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5-sz still not available [ 77.449237][ T26] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 77.449717][ T26] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 77.621994][ T7825] input: syz0 as /devices/virtual/input/input9 [ 77.947289][ T7840] loop6: detected capacity change from 0 to 256 [ 78.006272][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.006528][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.035015][ T7847] syzkaller0: entered promiscuous mode [ 78.036352][ T7847] syzkaller0: entered allmulticast mode [ 78.174325][ T7850] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 78.177350][ T7850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 78.734075][ T7875] syzkaller0: entered promiscuous mode [ 78.735593][ T7875] syzkaller0: entered allmulticast mode [ 78.824747][ T5427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.824777][ T5427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.957855][ T7885] syzkaller0: entered promiscuous mode [ 78.959210][ T7885] syzkaller0: entered allmulticast mode [ 79.144816][ T7902] syzkaller0: entered promiscuous mode [ 79.144848][ T7902] syzkaller0: entered allmulticast mode [ 79.425508][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 79.425570][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 79.434388][ T7915] geneve2: entered promiscuous mode [ 79.612552][ T7930] syzkaller0: entered promiscuous mode [ 79.612579][ T7930] syzkaller0: entered allmulticast mode [ 80.001956][ T7955] syzkaller0: entered promiscuous mode [ 80.001990][ T7955] syzkaller0: entered allmulticast mode [ 80.030134][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000001d57b59: rx timeout, send abort [ 80.176912][ T26] usb 1-1: USB disconnect, device number 5 [ 80.278444][ T7980] tipc: Enabled bearer , priority 0 [ 80.281656][ T7980] tipc: Disabling bearer [ 80.522114][ T8008] tipc: Enabled bearer , priority 0 [ 80.527967][ T8008] tipc: Disabling bearer [ 80.572037][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000001d57b59: abort rx timeout. Force session deactivation [ 80.734521][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.734725][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.761803][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.763858][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.766619][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.768491][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.844428][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.844698][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.847735][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.887'. [ 81.132617][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.133262][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.142823][ T8058] dummy0: left promiscuous mode [ 81.190133][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.196002][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.211096][ T8058] vlan0: left promiscuous mode [ 81.431061][ T8058] bridge2: left promiscuous mode [ 81.434158][ T8058] geneve2: left promiscuous mode [ 81.454985][ T1307] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.455110][ T3417] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.455151][ T3417] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.455185][ T3417] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.707862][ T8098] syzkaller1: entered promiscuous mode [ 81.707899][ T8098] syzkaller1: entered allmulticast mode [ 81.971421][ T8136] syzkaller0: entered promiscuous mode [ 81.971463][ T8136] syzkaller0: entered allmulticast mode [ 82.007306][ T8144] binder: 8142:8144 tried to acquire reference to desc 0, got 1 instead [ 82.009335][ T8144] binder: 8142:8144 got transaction with invalid offset (0, min 0 max 15) or object. [ 82.011316][ T8144] binder: 8142:8144 transaction call to 8142:0 failed 19/29201/-22, code 0 size 15-24 line 3524 [ 82.013973][ T6004] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.101130][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.924'. [ 82.114573][ T8158] syzkaller0: entered promiscuous mode [ 82.114603][ T8158] syzkaller0: entered allmulticast mode [ 82.119650][ T8158] tipc: Started in network mode [ 82.120647][ T8158] tipc: Node identity 968e8b1aeeae, cluster identity 4711 [ 82.121701][ T8158] tipc: Enabled bearer , priority 0 [ 82.125057][ T8158] tipc: Resetting bearer [ 82.130934][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.131113][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.132538][ T8160] netlink: 'syz.5.926': attribute type 1 has an invalid length. [ 82.133568][ T8160] input: syz0 as /devices/virtual/input/input10 [ 82.143357][ T8158] tipc: Disabling bearer [ 82.403621][ T8187] netlink: 104 bytes leftover after parsing attributes in process `syz.0.938'. [ 82.431434][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 82.457264][ T8193] tipc: Enabled bearer , priority 0 [ 82.460986][ T8193] tipc: Disabling bearer [ 82.528453][ T8203] binder: tried to use weak ref as strong ref [ 82.528478][ T8203] binder: 8202:8203 Acquire 1 refcount change on invalid ref 0 ret -22 [ 82.529035][ T8203] binder: 8202:8203 got transaction to invalid handle, 1 [ 82.529216][ T8203] binder: 8202:8203 cannot find target node [ 82.529241][ T8203] binder: 8202:8203 transaction call to 0:0 failed 22/29201/-22, code 0 size 15-24 line 3252 [ 82.529683][ T8062] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.552493][ T8207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.804409][ T8234] tipc: Enabled bearer , priority 0 [ 82.815735][ T8234] tipc: Disabling bearer [ 82.835837][ T8236] binder: tried to use weak ref as strong ref [ 82.837033][ T8236] binder: 8235:8236 Acquire 1 refcount change on invalid ref 0 ret -22 [ 82.838767][ T8236] binder: 8235:8236 got transaction to invalid handle, 1 [ 82.840021][ T8236] binder: 8235:8236 cannot find target node [ 82.841339][ T8236] binder: 8235:8236 transaction call to 0:0 failed 25/29201/-22, code 0 size 15-24 line 3252 [ 82.843576][ T6004] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.044793][ T8268] binder: 8267:8268 got transaction to invalid handle, 1 [ 83.046177][ T8268] binder: 8267:8268 cannot find target node [ 83.054204][ T8268] binder: 8267:8268 transaction call to 0:0 failed 29/29201/-22, code 0 size 15-24 line 3252 [ 83.076282][ T8271] tipc: Enabled bearer , priority 0 [ 83.079671][ T8271] tipc: Disabling bearer [ 83.150611][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.150832][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.179517][ T8284] syzkaller0: entered promiscuous mode [ 83.179549][ T8284] syzkaller0: entered allmulticast mode [ 83.335075][ T8302] binder: 8301:8302 got transaction to invalid handle, 1 [ 83.359463][ T8304] tipc: Enabled bearer , priority 0 [ 83.368457][ T8304] tipc: Disabling bearer [ 83.437533][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.440694][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.445442][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.996'. [ 83.475842][ T8320] syzkaller0: entered promiscuous mode [ 83.476939][ T8320] syzkaller0: entered allmulticast mode [ 83.591874][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.592434][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.091441][ T8323] syzkaller1: entered promiscuous mode [ 84.091476][ T8323] syzkaller1: entered allmulticast mode [ 84.451073][ T8359] syz.0.1012 (8359): drop_caches: 1 [ 84.481990][ T8359] syz.0.1012 (8359): drop_caches: 1 [ 84.589646][ T8398] tipc: Enabling of bearer rejected, already enabled [ 84.933935][ T8452] syzkaller0: entered promiscuous mode [ 84.933969][ T8452] syzkaller0: entered allmulticast mode [ 84.945298][ T6004] hid_parser_main: 210 callbacks suppressed [ 84.945330][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.948713][ T6004] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.043497][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.043686][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.613438][ T8062] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 85.775896][ T8062] usb 1-1: Using ep0 maxpacket: 8 [ 85.778337][ T8062] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 85.780968][ T8062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.780999][ T8062] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 85.781022][ T8062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.791951][ T8062] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 85.791975][ T8062] usb 1-1: Product: syz [ 85.791995][ T8062] usb 1-1: Manufacturer: syz [ 85.792007][ T8062] usb 1-1: SerialNumber: syz [ 85.797404][ T8062] usb 1-1: config 0 descriptor?? [ 85.806872][ T8062] Registered IR keymap rc-imon-rsc [ 85.852074][ T8062] rc_core: Loaded IR protocol module ir-nec-decoder, but protocol nec still not available [ 85.854536][ T8062] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 85.856951][ T8062] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 85.882092][ T8525] tipc: Enabled bearer , priority 0 [ 85.890110][ T8525] tipc: Disabling bearer [ 85.990109][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 85.990149][ T30] audit: type=1326 audit(84.175:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 85.996913][ T30] audit: type=1326 audit(84.175:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 85.999025][ T30] audit: type=1326 audit(84.184:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 85.999120][ T30] audit: type=1326 audit(84.184:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 85.999202][ T30] audit: type=1326 audit(84.184:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 86.005512][ T30] audit: type=1326 audit(84.184:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 86.005534][ T30] audit: type=1326 audit(84.184:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 86.005552][ T30] audit: type=1326 audit(84.184:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 86.005567][ T30] audit: type=1326 audit(84.184:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=24 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 86.005584][ T30] audit: type=1326 audit(84.184:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.6.1082" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa379228 code=0x7ffc0000 [ 86.044698][ T6004] usb 1-1: USB disconnect, device number 6 [ 86.193262][ T8550] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 86.211517][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 86.213746][ T8550] gretap0: entered promiscuous mode [ 86.213883][ T8550] macvlan2: entered allmulticast mode [ 86.213892][ T8550] gretap0: entered allmulticast mode [ 86.430563][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.431821][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.434887][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.435491][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.619119][ T8562] syzkaller0: entered promiscuous mode [ 86.619146][ T8562] syzkaller0: entered allmulticast mode [ 86.621456][ T8562] tipc: Enabled bearer , priority 0 [ 86.623431][ T8562] tipc: Resetting bearer [ 86.628861][ T8562] tipc: Disabling bearer [ 86.705474][ T8557] socket: no more sockets [ 86.709854][ T8557] socket: no more sockets [ 86.715391][ T8557] socket: no more sockets [ 86.719854][ T8557] socket: no more sockets [ 86.923015][ T8572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1097'. [ 87.119011][ T8062] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.281404][ T8062] usb 1-1: Using ep0 maxpacket: 32 [ 87.282895][ T8062] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.329767][ T8062] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.329809][ T8062] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.329827][ T8062] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.329839][ T8062] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.338821][ T8062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.338849][ T8062] usb 1-1: Product: syz [ 87.338870][ T8062] usb 1-1: Manufacturer: syz [ 87.338878][ T8062] usb 1-1: SerialNumber: syz [ 87.345904][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.354634][ T8062] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input12 [ 87.389374][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.392075][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.398071][ T8598] netlink: 'syz.6.1108': attribute type 1 has an invalid length. [ 87.406761][ T8598] input: syz0 as /devices/virtual/input/input14 [ 87.949278][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.949491][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.241636][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.243843][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.430801][ T8630] syzkaller0: entered promiscuous mode [ 88.430828][ T8630] syzkaller0: entered allmulticast mode [ 88.434093][ T8630] tipc: Enabled bearer , priority 0 [ 88.436274][ T8630] tipc: Resetting bearer [ 88.447144][ T8630] tipc: Disabling bearer [ 88.519083][ T8632] syzkaller0: entered promiscuous mode [ 88.519111][ T8632] syzkaller0: entered allmulticast mode [ 88.687819][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.688007][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.817138][ T8668] syzkaller0: entered promiscuous mode [ 88.818418][ T8668] syzkaller0: entered allmulticast mode [ 89.291282][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.293689][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.322186][ T8696] syzkaller0: entered promiscuous mode [ 89.322217][ T8696] syzkaller0: entered allmulticast mode [ 89.325358][ T8696] tipc: Enabled bearer , priority 0 [ 89.327397][ T8696] tipc: Resetting bearer [ 89.333984][ T8696] tipc: Disabling bearer [ 89.397749][ T8698] syzkaller0: entered promiscuous mode [ 89.397777][ T8698] syzkaller0: entered allmulticast mode [ 89.488721][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.490707][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.516131][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.516334][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.930056][ T8726] input: syz0 as /devices/virtual/input/input16 [ 90.013259][ T8062] imon:send_packet: packet tx failed (-71) [ 90.035379][ T8062] imon 1-1:155.0: panel buttons/knobs setup failed [ 90.035516][ T8062] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 90.035524][ T8062] (id 0x00) [ 90.035558][ T8062] Registered IR keymap rc-imon-pad [ 90.035901][ T8062] imon:send_packet: packet tx failed (-71) [ 90.038230][ T8734] syzkaller0: entered promiscuous mode [ 90.038243][ T8734] syzkaller0: entered allmulticast mode [ 90.054623][ T8062] imon 1-1:155.0: remote input dev register failed [ 90.054679][ T8062] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 90.155941][ T8062] imon 1-1:155.0: unable to initialize intf0, err 0 [ 90.155977][ T8062] imon:imon_probe: failed to initialize context! [ 90.157644][ T8062] imon 1-1:155.0: unable to register, err -19 [ 90.160312][ T8062] usb 1-1: USB disconnect, device number 7 [ 90.205699][ T8760] input: syz0 as /devices/virtual/input/input17 [ 90.242537][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.242724][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.274320][ T8771] syzkaller0: entered promiscuous mode [ 90.274353][ T8771] syzkaller0: entered allmulticast mode [ 90.395814][ T8787] fuse: Bad value for 'max_read' [ 90.419524][ T8789] syzkaller0: entered promiscuous mode [ 90.419557][ T8789] syzkaller0: entered allmulticast mode [ 90.420808][ T8789] tipc: Enabled bearer , priority 0 [ 90.425942][ T8789] tipc: Resetting bearer [ 90.437483][ T8789] tipc: Disabling bearer [ 90.457758][ T8797] input: syz0 as /devices/virtual/input/input18 [ 90.464779][ T8062] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.467966][ T8062] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.580023][ T8810] syzkaller0: entered promiscuous mode [ 90.580061][ T8810] syzkaller0: entered allmulticast mode [ 90.695305][ T8820] tipc: Enabled bearer , priority 0 [ 90.697324][ T8820] syzkaller0: entered promiscuous mode [ 90.698344][ T8820] syzkaller0: entered allmulticast mode [ 90.702114][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.705690][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.707234][ T8822] binder_user_error: 6 callbacks suppressed [ 90.707465][ T8822] binder: 8821:8822 tried to acquire reference to desc 0, got 1 instead [ 90.708027][ T8822] binder: 8821:8822 got transaction with invalid offset (0, min 0 max 15) or object. [ 90.708057][ T8822] binder_debug: 10 callbacks suppressed [ 90.708063][ T8822] binder: 8821:8822 transaction call to 8821:0 failed 46/29201/-22, code 0 size 15-24 line 3524 [ 90.708486][ T8062] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.931494][ T8820] tipc: Resetting bearer [ 90.934444][ T8819] tipc: Resetting bearer [ 90.940819][ T8819] tipc: Disabling bearer [ 91.237493][ T8883] loop5: detected capacity change from 0 to 7 [ 91.239760][ T8883] Dev loop5: unable to read RDB block 7 [ 91.240366][ T8883] loop5: AHDI p1 p2 p3 [ 91.240393][ T8883] loop5: partition table partially beyond EOD, truncated [ 91.240704][ T8883] loop5: p1 start 1818582900 is beyond EOD, truncated [ 91.240730][ T8883] loop5: p3 start 335544320 is beyond EOD, truncated [ 91.402398][ T8907] binder: tried to use weak ref as strong ref [ 91.402429][ T8907] binder: 8906:8907 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.402641][ T8907] binder: 8906:8907 got transaction to invalid handle, 1 [ 91.402721][ T8907] binder: 8906:8907 cannot find target node [ 91.402737][ T8907] binder: 8906:8907 transaction call to 0:0 failed 49/29201/-22, code 0 size 15-24 line 3252 [ 91.402935][ T8060] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.429663][ T8911] input: syz0 as /devices/virtual/input/input19 [ 91.576779][ T8929] binder: tried to use weak ref as strong ref [ 91.578201][ T8929] binder: 8928:8929 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.582354][ T8064] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.583512][ T8929] binder: 8928:8929 got transaction to invalid handle, 1 [ 91.583525][ T8929] binder: 8928:8929 cannot find target node [ 91.583539][ T8929] binder: 8928:8929 transaction call to 0:0 failed 52/29201/-22, code 0 size 15-24 line 3252 [ 91.586856][ T8062] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.642692][ T8938] ------------[ cut here ]------------ [ 91.642714][ T8938] do not call blocking ops when !TASK_RUNNING; state=2 set at [<000000002d397198>] prepare_to_wait_event+0x2e4/0x3ac [ 91.642789][ T8938] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#0: syz.5.1266/8938 [ 91.647678][ T8938] Modules linked in: [ 91.648374][ T8938] CPU: 0 UID: 0 PID: 8938 Comm: syz.5.1266 Tainted: G L syzkaller #0 PREEMPT [ 91.650194][ T8938] Tainted: [L]=SOFTLOCKUP [ 91.650976][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 91.652791][ T8938] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 91.654183][ T8938] pc : __might_sleep+0xc0/0xdc [ 91.655051][ T8938] lr : __might_sleep+0xc0/0xdc [ 91.655869][ T8938] sp : ffff800095287930 [ 91.656573][ T8938] x29: ffff800095287930 x28: ffff8000805a793c x27: ffff800095287a00 [ 91.657966][ T8938] x26: 0000000000000000 x25: ffff800095287a08 x24: 0000000000000000 [ 91.659374][ T8938] x23: ffff700012a50f3c x22: ffff0000d3ef5150 x21: 0000000000000002 [ 91.660864][ T8938] x20: ffff8000869ca160 x19: 000000000000026f x18: 0000000000000000 [ 91.662361][ T8938] x17: ffff8000801672c8 x16: ffff80008016750c x15: ffff800080348f2c [ 91.663848][ T8938] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 91.665335][ T8938] x11: 0000000000000000 x10: 0000000000080000 x9 : f5586cb50743dd00 [ 91.666794][ T8938] x8 : f5586cb50743dd00 x7 : ffff80008048c60c x6 : 0000000000000000 [ 91.668159][ T8938] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 91.669520][ T8938] x2 : 0000000100000000 x1 : ffff0000d3ef3a80 x0 : 0000000000000001 [ 91.670911][ T8938] Call trace: [ 91.671490][ T8938] __might_sleep+0xc0/0xdc (P) [ 91.672334][ T8938] __mutex_lock+0xf8/0xf14 [ 91.673068][ T8938] mutex_lock_nested+0x24/0x30 [ 91.673884][ T8938] futex_pivot_pending+0x30/0xa4 [ 91.674748][ T8938] futex_hash_allocate+0x73c/0xc20 [ 91.675600][ T8938] futex_hash_prctl+0xd0/0x324 [ 91.676409][ T8938] __arm64_sys_prctl+0x8d0/0x13d0 [ 91.677230][ T8938] invoke_syscall+0x98/0x244 [ 91.678024][ T8938] el0_svc_common+0xec/0x23c [ 91.678816][ T8938] do_el0_svc+0x4c/0x5c [ 91.679521][ T8938] el0_svc+0x64/0x260 [ 91.680216][ T8938] el0t_64_sync_handler+0x44/0x104 [ 91.681117][ T8938] el0t_64_sync+0x198/0x19c [ 91.681911][ T8938] irq event stamp: 82 [ 91.682607][ T8938] hardirqs last enabled at (81): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 91.684378][ T8938] hardirqs last disabled at (82): [] el1_brk64+0x20/0x54 [ 91.685910][ T8938] softirqs last enabled at (30): [] do_sve_acc+0x32c/0x4b8 [ 91.687525][ T8938] softirqs last disabled at (28): [] do_sve_acc+0x10c/0x4b8 [ 91.689052][ T8938] ---[ end trace 0000000000000000 ]--- [ 91.744031][ T8064] usb 1-1: Using ep0 maxpacket: 32 [ 91.744828][ T8064] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.745613][ T8064] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 91.745626][ T8064] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 91.747329][ T8064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.747341][ T8064] usb 1-1: Product: syz [ 91.747349][ T8064] usb 1-1: Manufacturer: syz [ 91.747355][ T8064] usb 1-1: SerialNumber: syz [ 91.974722][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.974958][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.241591][ T8901] socket: no more sockets [ 92.248328][ T8901] socket: no more sockets [ 92.257283][ T8901] socket: no more sockets [ 92.267392][ T8901] socket: no more sockets [ 92.283465][ T8064] cdc_ncm 1-1:1.0: bind() failure [ 92.286428][ T8064] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 92.286453][ T8064] cdc_ncm 1-1:1.1: bind() failure [ 92.289668][ T8064] usb 1-1: USB disconnect, device number 8