last executing test programs: 3m54.544412994s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x10001000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) 3m53.518937438s ago: executing program 2 (id=6): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_open_dev$evdev(0x0, 0x2, 0x842) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 3m52.461087383s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) 3m49.143506399s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000200)={[{@data_writeback}, {@data_writeback}, {@usrquota}, {@localflocks}, {@atime_quantum={'atime_quantum', 0x3d, 0x6}}, {@heartbeat_none}, {@localalloc}, {@barrier={'barrier', 0x3d, 0x1}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x4}}, {@localalloc={'localalloc', 0x3d, 0x1608}}, {@intr}, {@nouser_xattr}]}, 0x8, 0x4472, &(0x7f0000008980)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") 3m48.961385672s ago: executing program 32 (id=14): prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000200)={[{@data_writeback}, {@data_writeback}, {@usrquota}, {@localflocks}, {@atime_quantum={'atime_quantum', 0x3d, 0x6}}, {@heartbeat_none}, {@localalloc}, {@barrier={'barrier', 0x3d, 0x1}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x4}}, {@localalloc={'localalloc', 0x3d, 0x1608}}, {@intr}, {@nouser_xattr}]}, 0x8, 0x4472, &(0x7f0000008980)="$eJzs27tvW28dB+DvOQk0KW3JrfdWsmAgAhQ5nQod6CWAKiFKwkWIoZFzaRtw4ihxUAckitgrITEgZpZW7Kid+i8w0JWxQ+nAgmAhyPZx6nMcU6uKk1+j55Hak/Oe816Uj338vnqdNFN/tLZdWtsuVTZKteUH29dKv6xVd9ZXIz0kR90//RlETrI/OvfufOeHP7kW8fhvE1/Y3d3djYax2Ndsx8//+uevljuPbWmhTqPd/Vs7KD+LiKmIGInieIYi4qd/iUgiYjwrm8iOoxFxKlrXfvvnZwsjBzSaoTfP55/Nzz198Xb99eid+6WeNyYRf6xe/PrD9X98eejG3796QN0DAMD/9d2Fez/+QXk2XiVx5uVw93z9fHbsNT/epS/fGnyUAAAA0NP79f9Ykibd6/+p7NhjSzAsbD9td79/b+7b5dls/zfpun69WTQc724NNfdQi/u+xf3f8UL9/fd/u/v5WNeTfL9jkaQzufM0nZmJmL3dOr+QnEyrte361x7UdjZWDmwYn6x8/q3d+1w62YZ+v/lPFNof/P7/ZNerqXFeOriX2LGWz3+o531/+k3SV/6ThXqHkT8fL5//cLPsS503lFoPgEb+vxv+cP5ThfYHlf+ZxrM9aYx1JPcEaMxhGuW95ivk5fP/XLMs9+jMfpG93v//KeR/ttD+UT3/p28PttfjIp//55tl+S+tpXtf6RtPP/z+P1do/yjyb4x/2ud/X/L5n2gV5h+ezd9kv8//84X2B5T/k2xbNeJMEpMd3zp9Odz6cGjvVzeXNI3LmwMYxTGQz797l7+9vnp3K+1r/nehUP+w1n/tftvrv/Y6ZDpprf/YXz7/0Z739fv+v1ioN/DnfzKSrQB2fz3Qfo6pfP4nW4X7TAD7zf9Sof1B5d984o+0838/4P+eaJWXzf/6ks8/iyr3MfCk+X9z/p905/7vQv6XC+135F/805AD0j3/a4x/ekC9HTf5/E/1vK+R/1/7+Py/Uqg3+Pl/RNlc/6Pl8z/d877m+3/kw/lfLdQbdP5fiRODbB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NibyI5jkaQzufM0nZmJmMzOL8TJZKmysrhUrS3/YjtiKisvxUTysFpbqlQX1zZqK6uLlWq1thxxNrs+FSPJdrVWX1yvbJ7ba2s0ebRa2aovrVbqEXE+K78Sp9ttLa3V1yubzXvb176Y1rY2H1U2FlfWtr5ZLpfLcXFvDOPJ6uP66ka91XvrasSlvbpjScfgmpcv743lVPLz2s7WRqXaLL/SUadaW65UO+pcza79PsaT+tbOxnKlvrpYrT1s93eUbmbHubsLP1r43mzX9VLSOk4c7rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ix5deMbf4iI4dZZGhE32z8k2b+coTfP55/Nzz198Xb99eid+6X97gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdilY5WGoSgMwOdeBQUXdfQJnEKyuSqKuBgRfAJfokNfs4/RoWOXUmhvICQNdGnp8H3LIfm59xy4BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDL8fnb/v3UTUSK281NxGzxeNfPn0qt3w6fvzrDjJzO13f7/lE35d3TKH8pv5aveZeuV/P/KPW6991pBnsy3Ke9cZ+hqX2bmq/rex8pVxHxUPLnlHNVHXcXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW3bn3gRAMAYC6BfBykKwcQ2dwlIR3MPS8VzCebQSLMSf/r0qEJI7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KYb+2lo2rRGyvaItGxVcd3X5zDf38fz+/IlPv9RFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKoAAAD//78yy/c=") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") 1m20.487817109s ago: executing program 3 (id=537): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x7) listen(0xffffffffffffffff, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$netlink(0x10, 0x3, 0x5) setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0) 1m18.493876367s ago: executing program 3 (id=543): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f77657865632c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c696f636861727365743d6d61637475726b6973682c756e695f786c6174653d302c756e695f786c6174653d312c726f6469722c636865636b3d7374726963742c756e695f786c6174653d312c757466383d302c696f636861727365743d6b6f69382d722c756e695f786c6174653d302c756e695f786c6174653d312c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c757466383d302c756e695f786c6174653d312c757466383d312c726f6469722c726f6469722c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6e6f6e756d7461696c3d312c757466383d312c726f6469722c756e695f786c6174653d302c696f6368617273e91c07bb65743d6370313235312c646566636f6e746578743d756e636f6e66696e65645f752c00d5d2f963ab4b6c1fc1d1e923570237449e968359475bb9aab7483445625f59c07308bdea38584644e12904dbcb3ddfad3caa116c7cb74a182cecffe0cb06cc3ec9a6744a5385e2"], 0x6, 0x2d7, &(0x7f0000000040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) 1m17.295310614s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000005c0)="cd8a325c7a", 0x5, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 1m11.843405439s ago: executing program 3 (id=564): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m10.726887975s ago: executing program 3 (id=566): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce, 0x0, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m10.430409519s ago: executing program 3 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m10.314993561s ago: executing program 33 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 58.384203177s ago: executing program 0 (id=618): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xed, 0x1, 0x4e, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8, 0x20, 0x7f, 0x534b}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x82, 0x0, &(0x7f0000000480)) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "818f700db6a0f45ab60260dbca2754f59ab99cba2bae81a61e730bec8a0916e0", "2892d406cc52b53f98b142327ce3fc933ca0bd0fef46ae917e31a290b03ea5e4", "6a6d4d079bb5a071f3047e941bdf839b228c5339034dc4dbc9aac62885f89b13", "399a72fa7e8ea566ced158b1d0bb1db18a1ece40bb2a1dea7d7a3a20808a4ac8", "e110d3b1ba62dddea29b8b11dd000999266db7e300be42b2d05a4a912004b961", "a0149a2235537562b318fec0", 0x6, 0x0, 0xfffffffc, 0x4}}) 57.973460163s ago: executing program 0 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000050000000000000000db1491364e440000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x710, 0x1, 0xffffff15, 0x9dc5, {{0x27, 0x4, 0x0, 0x1, 0x9c, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x30, [@local]}, @generic={0x83, 0x7, "196749364c"}, @cipso={0x86, 0x56, 0x1, [{0x0, 0xe, "f4df731332ada7c6dbe0e33f"}, {0x6, 0x3, '9'}, {0x7, 0xd, "262e978e1b4087d6d95caa"}, {0x0, 0xe, "7144ef5e7a0b5ee1d4ae64f0"}, {0x2, 0x11, "e28ea2f5036d710c74114bc258915f"}, {0x7, 0x7, "7fbe664112"}, {0x2, 0x9, "b242630388640e"}, {0x7, 0x3, 'v'}]}, @ssrr={0x89, 0xb, 0x63, [@broadcast, @empty]}, @generic={0x7, 0x12, "7900000000ccaf000800000000000000"}]}}}}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @multicast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000540)='xprtrdma_frwr_maperr\x00', r1}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x98, 0x18030000, 0x0, 0x0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 56.823526669s ago: executing program 0 (id=623): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000d80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "2928dff22fcf046cc0fde15aedbb816a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x30}}, 0x8004) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000e7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ce11bc3008b071000900000000000000000000000000009444000000000000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 55.105971572s ago: executing program 0 (id=628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 54.174948625s ago: executing program 0 (id=633): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7be, &(0x7f0000001740)="$eJzs3ctrXNcZAPDvjh5jyW6lQqF1V4JCKzAeVa5qt9CFTRelUIOhXdceRmPhaqQxmpGxhMA2pdAuAknIIpBsvHYSZ5dtHtvkT8gui2DjJLKJQxZhwh3NSCNrRg9bM+PEvx9c3XPuY8755tzH0dzDTAAvrIn0TybieES8nESMNZYnETFUTw1GnN3Y7vH6WiGdkqjV/vFlUt/m0fpaIVr2SR1tZH4ZER/+N+JEZme5lZXV+XypVFxq5KeqC1enKiurJ68s5OeKc8XF09MzM6fO/OHM6cOL9etPVo/df+Wvv33n7Lf/+cXdlz5K4mwca6xrjeOwTMRE4z0ZSt/Cbf5y2IX1WdLvCvBU0lNzYOMsj+MxFgP1VAcjvawZANAtNyKiBgC8YJKnuP9/qs8AAD9gzc8BHq2vFZpTfz+R6K0H5yLiyEb8zeebG2sGG8/sjtSfg44+SrY9GUkiYvwQyp+IiDff+9db6RRdeg4J0M7NWxFxaXxi5/U/2TFm4aB+t9vKWrY+m3hisesf9M77af/nj+36f5nN/k+06f9k25y7T2Pv8z9z7xCK6Sjt//25ZWzb45b4G8YHGrmf1Pt8Q8nlK6Viem37aURMxlA2zU/XN20/Cmry4XcPO5Xf2v/76tV/30nLT+dbW2TuDWa37zObP5d/1ribHtyK+NVgu/iTzfZPOvR/L+yzjL/96X9vdFqXxp/G25x2xt9dtdsRv2nb/lttmew6PnGqfjhMNQ+KNt797PXRTuVvtX+2Pk/Lb/4v0Atp+4/uHv940jpes3LwMj6+PfZBp3Wtx3/7+Nsd/9X8cPLPenq4sex6vlpdmo4YTv6+c/mprX2b+eb2afyTv25//nc6/jONsbGXNnO7G7z/xduNl2obf93NTvF3Vxr/7IHaf5dErbHPE6vuPp4f6FT+/tp/pp6abCxJ23+vuPao6TMczQAAAAAAAAAAAAAAAAAAAAAAAABwcJmIOBZJJreZzmRyuY3f8P55jGZK5Ur1xOXy8uJs1H8rezyGMs2vuhxr+T7U6cb34Tfzp57I/z4ifhYRr2VH6vlcoVya7XfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBwdPvv/99IZ7ncxrrPs/2uHQDQNUf6XQEAoOcOdv+/8/+uVQQA6JmD3f9HulYPAKB3Dvz5fy3pTkUAgJ7Z9/3/UnfrAQD0jvF/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNmF8+fTqfbN+lohzc9eW1meL187OVuszOcWlgu5Qnnpam6uXJ4rFXOF8kLHF7q5MSuVy1dnYnH5+lS1WKlOVVZWLy6UlxerF68s5OeKF4tDPYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPavsrI6ny+ViksSuyZGno9q7JHIRkRvyhqM5yTkH3liuG+lt14lRvp3gQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4zn0fAAD//+vmI4U=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101142, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 49.487676421s ago: executing program 0 (id=644): socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 49.487374571s ago: executing program 34 (id=644): socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 22.602769335s ago: executing program 6 (id=742): clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r3, 0xfffffffffffffff5, 0x1) 21.498250931s ago: executing program 6 (id=746): r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 19.225556452s ago: executing program 6 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) io_submit(r2, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) 17.879883741s ago: executing program 6 (id=754): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x53, &(0x7f0000000240)="8aa1676415a81eab0bba95d0c834", &(0x7f0000000300)=""/83, 0x4, 0x0, 0x5, 0xb, &(0x7f0000000380)="dec2bf1e6a", &(0x7f00000003c0)="e18a9f6cd302b557741642", 0x2, 0x0, 0xd}, 0x4c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) 17.763075932s ago: executing program 6 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @void, @value}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x30) 12.278536829s ago: executing program 4 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 9.117557023s ago: executing program 4 (id=780): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000200)={[{@force}, {@type={'type', 0x3d, "30ac128e"}}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'macroman'}}, {@creator={'creator', 0x3d, "c04b789f"}}, {@nobarrier}, {@umask={'umask', 0x3d, 0x398}}, {@type={'type', 0x3d, "3562f949"}}], [{@appraise}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20040000", @ANYRES16, @ANYBLOB="000225bd7000fddbdf25640000000c"], 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x44044) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 7.937958869s ago: executing program 7 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open$dir(0x0, 0x149800, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0xe4ff, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 7.268523118s ago: executing program 5 (id=784): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x2, &(0x7f0000000000)=@assoc_value, &(0x7f0000001380)=0x8) 7.267631958s ago: executing program 7 (id=785): bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="e73c6f6c8e328337ef755f7943fb49c6ef6a4f598d0fd0c54679669ba684c099a3f25eab17b879e29f6812849cd37e967219a933a1e34c5290635c71f8953d5d598b8fb2a027ac6d3057d91aa31ce7baaf9ba409771d029cdd85209007f3b290583d0752d0f4", 0x66}], 0x1}}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 6.516858359s ago: executing program 6 (id=786): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x43c6}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 6.43149478s ago: executing program 5 (id=787): r0 = getpid() setreuid(0xee00, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x35}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000006c0)=0xf26c96, 0x1f7, 0xd) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000f80)={0x1208, 0x13, 0x0, 0x70bd29, 0x25dfdbfe, {0xa, 0x9, 0xc1, 0x80, {0x4e24, 0x4e21, [0x3, 0x5, 0x6, 0x6], [0xfffffff8, 0x400, 0x101, 0x2], 0x0, [0x9, 0x400]}, 0x2, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "d2e83188f0704c73838516bc87f57eb51a367ba86ad1d12789e69d89f1da01170034c198a5c85734f04796e5dbd73315578c41d372abb224e95046f61231e02369ee047db991d1c4db9a3d1f0be6d8ff0b6c6b6f3c435ba7bb30477ff987ee105d3b91ec2d925d25fce833ef33d40139720227564be61c0a4720e1da71b08af9d2a50d9f3debe659"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "0b70375280a67274feeaf004c032077add5f1dacf96590bbdc1b473f3dde5dddaadfb91b091c"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "794f490aa02d8008b0f5fc3ce0f76a2a7e05126300455e81f69d3a1c4775b7102cb05820c1da85973ad6ef93f46857f018ff9cf38d084641a2ad1ce9644827f377e2c544d709e655ba9f68dd5361b38fbe73d43a2e22e43aac2e64eef4fb810370e9a027b8b4a459415188166050f351743af087463aa37b8aba7b4e0ee2615ef92928febdfde29acd11535ca92506cd1cb2965035ad95ef565b76e85d20b72770b97487136b4b07bf0408c4f4033e6945488043b719aa81e063a01c3f6ca4b44c0e0d00f65fcafabf9fbe666dd0f96f912d9af5676a7de4b70d6c1edf43c84926d6cb541fdee51d8f5030796546eb6346db2ceecf018519b0"}]}, 0x1208}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) 6.295738722s ago: executing program 5 (id=789): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 6.214947743s ago: executing program 7 (id=790): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0xb1, &(0x7f00000026c0)=ANY=[@ANYBLOB="4ac9626e806c7cd1eaa713bc001100dc4dec4796e88564a15e644d46692312a9a7516947ea39655e06a2456a1384d00a7e15bf9610584369778ee810e03593719624ee06ed5657d343b6ea28e66e4c0ad149e5f781578d6a6dcf68742932d4a8e2427be23a01d22b2a5870110423c1953a94d9df93f3f1c2ae2458b991ed9265a5dbf6c1bcb3"], &(0x7f00000003c0)={0x1, 0x1, [0x518, 0xf69, 0xdc2, 0xc47]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.166985724s ago: executing program 1 (id=791): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 5.975537907s ago: executing program 4 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x60d4, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r3, 0x1808, 0x0, 0x0, 0x0, 0x0) 5.975051447s ago: executing program 1 (id=793): r0 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 5.121847739s ago: executing program 1 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 5.116267028s ago: executing program 5 (id=795): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s\'\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xc6l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp=r3}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 5.066784489s ago: executing program 7 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "30b00afe4e70"}}}}}}}, 0x0) 5.03585146s ago: executing program 4 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 3.066812657s ago: executing program 7 (id=798): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000100)='net/ptype\x00') preadv(r3, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/178, 0xb2}], 0x1, 0xffff, 0x0) 3.064926417s ago: executing program 1 (id=799): dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCXONC(r0, 0x540a, 0x2) 2.12553821s ago: executing program 5 (id=800): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000100)=""/226, 0xe2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.050511941s ago: executing program 1 (id=801): r0 = io_uring_setup(0x3e46, &(0x7f0000000440)={0x0, 0x236f, 0x40, 0x0, 0x1}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0xfffffffe, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.030235512s ago: executing program 4 (id=802): syz_open_dev$dri(0x0, 0x2, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a8000800104004080032a0901461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e216d25b4084121d9d322fe7c9f8775730d16a4683f5a360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15952503fdee7a129d8d9e604196", 0xd8}], 0x1}, 0x24002040) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) 1.815587775s ago: executing program 7 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_clone3(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) 1.815035795s ago: executing program 5 (id=804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) gettid() connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "23f75ecab000", "ad609b3f6c0783ace0cb016f7b50dbacc0a4eed94bfe42633b7b41b37d8d7fbe", "00ecff00", "5ee7d38054000a70"}, 0x38) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 94.124949ms ago: executing program 1 (id=805): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 0s ago: executing program 4 (id=806): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) kernel console output (not intermixed with test programs): the performance. Setting the MTU to 1560 would solve the problem. [ 54.893858][ T4232] binder: 4231:4232 tried to acquire reference to desc 0, got 1 instead [ 54.915789][ T4232] binder: 4231:4232 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.944903][ T4153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.974183][ T4232] binder: undelivered transaction 8, put_user failed [ 54.976144][ T4232] binder: 4231:4232 ioctl c0306201 20001d40 returned -14 [ 54.986618][ T13] binder: undelivered TRANSACTION_COMPLETE [ 54.988172][ T4234] loop3: detected capacity change from 0 to 1024 [ 54.999031][ T4153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.006937][ T4153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.508600][ T4153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.732027][ T4239] loop4: detected capacity change from 0 to 8 [ 55.839256][ T4244] loop0: detected capacity change from 0 to 1024 [ 55.851026][ T4247] loop1: detected capacity change from 0 to 128 [ 55.856670][ T4239] SQUASHFS error: Failed to read block 0x6e6: -5 [ 55.864064][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.880319][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.883885][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.885859][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.920500][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.933712][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.935580][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.940438][ T4244] EXT4-fs (loop0): Ignoring removed bh option [ 55.946878][ T4244] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 55.950088][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.951980][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.954033][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.956346][ T4247] omfs: sysblock size (-58445445) is out of range [ 55.960556][ T4153] device hsr_slave_0 entered promiscuous mode [ 55.962929][ T4244] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 55.966243][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.976244][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.981956][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.983942][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.985829][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.992196][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.994099][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 55.996143][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 55.998557][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.000510][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.002376][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.004332][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.006133][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.007534][ T4153] device hsr_slave_1 entered promiscuous mode [ 56.032044][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.034160][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.036164][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.036300][ T4153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.040660][ T4153] Cannot create hsr debugfs directory [ 56.050397][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.052424][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.054221][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.055286][ T4244] EXT4-fs (loop0): failed to open journal device unknown-block(0,5) -6 [ 56.056157][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.082447][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.084580][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.086487][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.116825][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.124440][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.124517][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.146636][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.155086][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.168234][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.170261][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.197746][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.199713][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.201531][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.203471][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.205273][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.250766][ T4256] binder: 4255:4256 tried to acquire reference to desc 0, got 1 instead [ 56.258304][ T4256] binder: 4255:4256 got transaction with invalid data ptr [ 56.260360][ T4256] binder: 4255:4256 transaction failed 29201/-14, size 0-24 line 3186 [ 56.265608][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.284851][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.286846][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.322167][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.324186][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.327813][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.330002][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.332015][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.333926][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.335795][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.343587][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.345579][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.355739][ T4257] device bond0 entered promiscuous mode [ 56.357435][ T4257] device bond_slave_0 entered promiscuous mode [ 56.360094][ T4257] device bond_slave_1 entered promiscuous mode [ 56.393437][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.407209][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.414306][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.430565][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.432577][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.434628][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.464335][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.466310][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.478448][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.496609][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.498830][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.500672][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.502556][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.504340][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.506194][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.506218][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.516034][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.526687][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.536328][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.564338][ T4249] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.615795][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.623748][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.625729][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.648522][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.650622][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.652764][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.725343][ T4249] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.757932][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.760016][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.761903][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.763791][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 56.765612][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 56.769688][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 56.986413][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 57.428093][ T4239] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 57.430072][ T4239] SQUASHFS error: read_indexes: reading block [6e4:0] [ 57.464502][ T4153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.574523][ T4153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.618613][ T4124] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.698840][ T4256] syz.1.32 (4256): drop_caches: 2 [ 58.638500][ T4153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.670065][ T4153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.766767][ T4294] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 58.853702][ T136] device hsr_slave_0 left promiscuous mode [ 58.984366][ T136] device hsr_slave_1 left promiscuous mode [ 58.993945][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 59.418087][ T4313] loop4: detected capacity change from 0 to 2048 [ 59.815313][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.817817][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.834971][ T4313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.836985][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.839628][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.886106][ T136] device bridge_slave_1 left promiscuous mode [ 59.893090][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.963874][ T136] device bridge_slave_0 left promiscuous mode [ 59.965964][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.218510][ T136] device veth1_macvtap left promiscuous mode [ 60.220582][ T136] device veth0_macvtap left promiscuous mode [ 60.222180][ T136] device veth1_vlan left promiscuous mode [ 60.223853][ T136] device veth0_vlan left promiscuous mode [ 61.242074][ T136] team0 (unregistering): Port device team_slave_1 removed [ 61.252317][ T136] team0 (unregistering): Port device team_slave_0 removed [ 61.262041][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.304676][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.443595][ T136] bond0 (unregistering): Released all slaves [ 61.544827][ T4299] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.547628][ T4299] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.550072][ T4299] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.552531][ T4299] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.555174][ T4299] device vxlan0 entered promiscuous mode [ 61.557462][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 61.573730][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 61.609906][ T4348] loop1: detected capacity change from 0 to 256 [ 61.624574][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.655709][ T4341] bond0: (slave rose0): Enslaving as an active interface with an up link [ 61.685729][ T4343] device syzkaller0 entered promiscuous mode [ 61.720487][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 61.847904][ T4153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.855660][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.859554][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.864558][ T4153] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.888366][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.901197][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.903759][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.905719][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.967017][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.969885][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.972818][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.995648][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.997598][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.003757][ T4359] netlink: 'syz.1.54': attribute type 3 has an invalid length. [ 62.005812][ T4359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.54'. [ 62.023924][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.030928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.046714][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.056376][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.066757][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.077810][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.088818][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.097015][ T4367] loop1: detected capacity change from 0 to 64 [ 62.112951][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.139225][ T4153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.152296][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.162251][ T4369] loop3: detected capacity change from 0 to 512 [ 62.167249][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.206698][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.212045][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.076266][ T4369] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 63.123043][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.125265][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.137214][ T4153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.195655][ T4367] hfs: request for non-existent node 131072 in B*Tree [ 63.198922][ T4367] hfs: request for non-existent node 131072 in B*Tree [ 63.300363][ T4393] loop4: detected capacity change from 0 to 64 [ 63.486859][ T4402] loop0: detected capacity change from 0 to 256 [ 63.588778][ T4402] FAT-fs (loop0): Directory bread(block 64) failed [ 63.590651][ T4402] FAT-fs (loop0): Directory bread(block 65) failed [ 63.592279][ T4398] loop1: detected capacity change from 0 to 8192 [ 63.592501][ T4402] FAT-fs (loop0): Directory bread(block 66) failed [ 63.657389][ T4402] FAT-fs (loop0): Directory bread(block 67) failed [ 63.659231][ T4402] FAT-fs (loop0): Directory bread(block 68) failed [ 63.669344][ T4402] FAT-fs (loop0): Directory bread(block 69) failed [ 63.671130][ T4402] FAT-fs (loop0): Directory bread(block 70) failed [ 63.672872][ T4402] FAT-fs (loop0): Directory bread(block 71) failed [ 63.674638][ T4402] FAT-fs (loop0): Directory bread(block 72) failed [ 63.676376][ T4402] FAT-fs (loop0): Directory bread(block 73) failed [ 63.704247][ T4398] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.732740][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.735406][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.060128][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.069713][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.629169][ T4153] device veth0_vlan entered promiscuous mode [ 64.636033][ T4153] device veth1_vlan entered promiscuous mode [ 64.705519][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.708262][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.764183][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.769028][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.784597][ T4153] device veth0_macvtap entered promiscuous mode [ 64.828825][ T4153] device veth1_macvtap entered promiscuous mode [ 64.896897][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.905746][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.932230][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.943010][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.947312][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.950193][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.952698][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.955437][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.984157][ T4153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.989763][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.992431][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.995067][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.015588][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.025900][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.029244][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.031788][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.034518][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.054712][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.069377][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.084011][ T4153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.086862][ T4153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.095698][ T4153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.138491][ T4419] device syzkaller0 entered promiscuous mode [ 65.145667][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.149371][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.154687][ T4153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.156931][ T4153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.167373][ T4153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.177278][ T4153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386769][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.389819][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.393247][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.446755][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.453010][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.461658][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.741893][ T4455] xt_hashlimit: max too large, truncated to 1048576 [ 66.748551][ T4455] xt_nfacct: accounting object `syz0' does not exists [ 69.326624][ T4488] loop4: detected capacity change from 0 to 512 [ 69.443342][ T4491] input: syz0 as /devices/virtual/input/input2 [ 69.455962][ T4488] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.81: casefold flag without casefold feature [ 69.613659][ T4488] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.81: couldn't read orphan inode 15 (err -117) [ 69.616995][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.649543][ T4491] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 69.661182][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.663048][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.443461][ T4501] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 70.616264][ T4513] device syzkaller0 entered promiscuous mode [ 70.796817][ T4521] mmap: syz.4.81 (4521) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 71.849337][ T4494] loop1: detected capacity change from 0 to 32768 [ 72.696568][ T26] audit: type=1326 audit(72.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.706034][ T26] audit: type=1326 audit(72.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.726692][ T26] audit: type=1326 audit(72.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.760837][ T26] audit: type=1326 audit(72.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.825474][ T26] audit: type=1326 audit(72.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.855108][ T26] audit: type=1326 audit(72.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.889693][ T26] audit: type=1326 audit(72.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.903180][ T26] audit: type=1326 audit(72.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=424 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.958596][ T26] audit: type=1326 audit(72.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 72.964220][ T26] audit: type=1326 audit(72.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 73.720501][ T4552] loop0: detected capacity change from 0 to 64 [ 73.817969][ T4556] Zero length message leads to an empty skb [ 73.857497][ T4552] ======================================================= [ 73.857497][ T4552] WARNING: The mand mount option has been deprecated and [ 73.857497][ T4552] and is ignored by this kernel. Remove the mand [ 73.857497][ T4552] option from the mount to silence this warning. [ 73.857497][ T4552] ======================================================= [ 74.012568][ T4552] hfs: request for non-existent node 237 in B*Tree [ 74.030059][ T4552] hfs: request for non-existent node 237 in B*Tree [ 74.032448][ T4552] hfs: request for non-existent node 237 in B*Tree [ 74.034266][ T4552] hfs: request for non-existent node 237 in B*Tree [ 74.051345][ T4552] hfs: request for non-existent node 237 in B*Tree [ 74.057417][ T4552] hfs: request for non-existent node 237 in B*Tree [ 74.818661][ T21] cfg80211: failed to load regulatory.db [ 74.886326][ T4107] hfs: request for non-existent node 237 in B*Tree [ 74.888482][ T4107] hfs: request for non-existent node 237 in B*Tree [ 76.764855][ T4601] binder: 4600:4601 tried to acquire reference to desc 0, got 1 instead [ 76.813695][ T4601] binder: 4600:4601 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.857749][ T4601] binder: 4601 RLIMIT_NICE not set [ 77.005234][ T4072] binder: undelivered TRANSACTION_COMPLETE [ 77.014141][ T4614] loop5: detected capacity change from 0 to 512 [ 77.069729][ T4624] loop4: detected capacity change from 0 to 16 [ 77.093186][ T4614] EXT4-fs (loop5): inline encryption not supported [ 77.107736][ T4614] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 77.109721][ T4614] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.113248][ T4614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.117629][ T4624] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 77.145230][ T4614] EXT4-fs (loop5): 1 truncate cleaned up [ 77.147944][ T4614] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,nomblk_io_submit,,errors=continue. Quota mode: none. [ 77.157511][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.172273][ T4632] loop1: detected capacity change from 0 to 512 [ 77.325582][ T4632] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 77.407284][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 77.670488][ T21] usb 1-1: config 0 has no interfaces? [ 77.683644][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 77.688522][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.702983][ T21] usb 1-1: config 0 descriptor?? [ 79.063009][ T4072] usb 1-1: USB disconnect, device number 2 [ 80.849434][ T4684] binder: 4682:4684 tried to acquire reference to desc 0, got 1 instead [ 80.869095][ T4684] binder: 4682:4684 ioctl c0306201 20001d40 returned -14 [ 80.952061][ T21] binder: undelivered transaction 23, process died. [ 80.967501][ T21] binder: undelivered TRANSACTION_COMPLETE [ 81.040614][ T4701] loop5: detected capacity change from 0 to 22 [ 81.479504][ T4710] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.482865][ T4710] F2FS-fs (loop3): Unable to read 1th superblock [ 81.484862][ T4710] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.487779][ T4710] F2FS-fs (loop3): Unable to read 2th superblock [ 82.299847][ T4713] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 82.335442][ T4701] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 82.374372][ T4718] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 82.420590][ T4701] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 82.431409][ T4718] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 82.434647][ T4718] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 82.456821][ T4720] syz.4.126 uses obsolete (PF_INET,SOCK_PACKET) [ 82.582009][ T4713] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 82.592980][ T4713] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 82.663630][ T4726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.666320][ T4727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 83.549285][ T4746] infiniband syz2: set down [ 83.550967][ T4746] infiniband syz2: added ipvlan1 [ 83.710527][ T4746] infiniband syz2: Couldn't open port 1 [ 83.741024][ T4746] RDS/IB: syz2: added [ 83.742507][ T4746] smc: adding ib device syz2 with port count 1 [ 83.744232][ T4746] smc: ib device syz2 port 1 has pnetid [ 84.693156][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.136'. [ 84.910122][ T4757] device hsr_slave_1 left promiscuous mode [ 84.936920][ T4767] loop0: detected capacity change from 0 to 2048 [ 84.944243][ T4765] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 84.946668][ T4764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 85.017467][ T4767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.095484][ T4775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 85.118259][ T4774] loop3: detected capacity change from 0 to 64 [ 86.008198][ T4774] hfs: request for non-existent node 237 in B*Tree [ 86.009987][ T4774] hfs: request for non-existent node 237 in B*Tree [ 86.012300][ T4774] hfs: request for non-existent node 237 in B*Tree [ 86.014036][ T4774] hfs: request for non-existent node 237 in B*Tree [ 86.016583][ T4774] hfs: request for non-existent node 237 in B*Tree [ 86.018927][ T4774] hfs: request for non-existent node 237 in B*Tree [ 86.328441][ T4798] loop4: detected capacity change from 0 to 1024 [ 86.343268][ T4798] EXT4-fs (loop4): inline encryption not supported [ 86.347465][ T4798] EXT4-fs (loop4): Ignoring removed bh option [ 86.408234][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 87.517938][ T4794] loop0: detected capacity change from 0 to 32768 [ 88.269984][ T4821] loop1: detected capacity change from 0 to 2048 [ 89.514223][ T4845] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.517433][ T4845] lbmIODone: I/O error in JFS log [ 89.519059][ T4845] *** Log Format Error ! *** [ 89.520583][ T4845] lmLogInit: exit(-22) [ 89.521709][ T4845] lmLogOpen: exit(-22) [ 89.584438][ T4821] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none. [ 89.951910][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.156'. [ 90.570970][ T4852] loop3: detected capacity change from 0 to 2048 [ 90.803038][ T4852] loop3: p1 < > p3 [ 90.828677][ T4852] loop3: p3 size 134217728 extends beyond EOD, truncated [ 91.967477][ T3643] loop3: p1 < > p3 [ 91.970255][ T3643] loop3: p3 size 134217728 extends beyond EOD, truncated [ 92.093601][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 92.096292][ T4880] tipc: Started in network mode [ 92.173446][ T4880] tipc: Node identity 1, cluster identity 4711 [ 92.175262][ T4880] tipc: Node number set to 1 [ 92.200761][ T4884] loop5: detected capacity change from 0 to 512 [ 92.222437][ T4888] udc-core: couldn't find an available UDC or it's busy [ 92.224436][ T4888] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.285766][ T4884] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.162: casefold flag without casefold feature [ 92.307445][ T4884] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.162: couldn't read orphan inode 15 (err -117) [ 92.357167][ T4884] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.397273][ T4893] netlink: 'syz.4.164': attribute type 1 has an invalid length. [ 92.669721][ T4893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.702891][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 92.745550][ T4893] device bond1 entered promiscuous mode [ 93.387932][ T4897] device ip6erspan0 entered promiscuous mode [ 93.498470][ T4897] bond1: (slave ip6erspan0): making interface the new active one [ 93.518843][ T4897] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 93.677373][ T4910] loop4: detected capacity change from 0 to 256 [ 95.144630][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.250651][ T4134] udevd[4134]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 96.017248][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 96.017262][ T26] audit: type=1326 audit(95.930:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.147582][ T26] audit: type=1326 audit(96.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.158253][ T26] audit: type=1326 audit(96.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.164615][ T26] audit: type=1326 audit(96.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.167984][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 96.179693][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 96.184205][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 96.225853][ T26] audit: type=1326 audit(96.080:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.261710][ T4936] loop4: detected capacity change from 0 to 128 [ 96.370427][ T4936] FAT-fs (loop4): bogus sectors per cluster 0 [ 96.372266][ T4936] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.380298][ T26] audit: type=1326 audit(96.080:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.407209][ T26] audit: type=1326 audit(96.080:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.429472][ T26] audit: type=1326 audit(96.080:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.435443][ T26] audit: type=1326 audit(96.080:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 96.907394][ T26] audit: type=1326 audit(96.080:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb19a3728 code=0x7fc00000 [ 97.326890][ T4949] loop5: detected capacity change from 0 to 512 [ 97.429014][ T4959] loop1: detected capacity change from 0 to 128 [ 97.430176][ T4949] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.436398][ T4949] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.462208][ T4949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 97.465572][ T4949] System zones: 1-12 [ 97.475552][ T4949] EXT4-fs (loop5): orphan cleanup on readonly fs [ 97.481598][ T4949] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.177: invalid indirect mapped block 12 (level 1) [ 97.491639][ T4949] EXT4-fs (loop5): Remounting filesystem read-only [ 97.495757][ T4949] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.177: invalid indirect mapped block 2 (level 2) [ 97.500190][ T4949] EXT4-fs (loop5): Remounting filesystem read-only [ 97.502280][ T4949] EXT4-fs (loop5): 1 truncate cleaned up [ 97.503916][ T4949] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,dioread_nolock,resgid=0x0000000000000000,errors=remount-ro,nolazytime. Quota mode: none. [ 97.524704][ T4949] binder: 4944:4949 tried to acquire reference to desc 0, got 1 instead [ 97.528139][ T4949] binder: 4944:4949 not enough space to store 5 fds in buffer [ 97.530423][ T4949] binder: 4944:4949 transaction failed 29201/-22, size 96-4176 line 3331 [ 97.534307][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.645677][ T4959] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.674301][ T4971] udc-core: couldn't find an available UDC or it's busy [ 97.706431][ T4971] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.755995][ T4959] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 97.774552][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 97.802759][ T4972] netlink: 'syz.4.182': attribute type 5 has an invalid length. [ 97.817806][ T4972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 97.879513][ T4972] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 97.895336][ T4972] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 97.910289][ T4972] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 97.919218][ T4976] loop5: detected capacity change from 0 to 256 [ 97.924582][ T4972] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 97.950628][ T4972] device geneve2 entered promiscuous mode [ 98.266532][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 99.452670][ T5005] device syzkaller1 entered promiscuous mode [ 99.518837][ T5011] binder: 5010:5011 tried to acquire reference to desc 0, got 1 instead [ 99.522442][ T5011] binder: 5010:5011 got reply transaction with bad transaction stack, transaction 36 has target 5010:0 [ 99.527492][ T5011] binder: 5010:5011 transaction failed 29201/-71, size 0-0 line 2837 [ 99.530547][ T7] binder: release 5010:5011 transaction 36 out, still active [ 99.532825][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.571841][ T7] binder: send failed reply for transaction 36, target dead [ 101.898877][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.902474][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.913211][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.942764][ T5057] device bridge_slave_0 left promiscuous mode [ 101.945379][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.974944][ T5060] loop0: detected capacity change from 0 to 512 [ 101.990198][ T5057] device bridge_slave_1 left promiscuous mode [ 101.992076][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.031062][ T5057] bond0: (slave bond_slave_0): Releasing backup interface [ 102.081108][ T5057] bond0: (slave bond_slave_1): Releasing backup interface [ 102.093833][ T5060] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 102.149527][ T5057] team0: Port device team_slave_0 removed [ 102.163713][ T5057] team0: Port device team_slave_1 removed [ 102.166464][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.169024][ T5057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.200544][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.203200][ T5057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.213132][ T5061] netlink: 'syz.5.203': attribute type 10 has an invalid length. [ 102.243113][ T5061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.246248][ T5061] team0: Port device bond0 added [ 102.252047][ T5065] device vlan2 entered promiscuous mode [ 102.256831][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 102.298315][ T5066] team0 (unregistering): Port device bond0 removed [ 103.794213][ T5084] loop3: detected capacity change from 0 to 8192 [ 103.852449][ T5084] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 103.868188][ T5084] REISERFS (device loop3): using ordered data mode [ 103.879086][ T5084] reiserfs: using flush barriers [ 103.907163][ T5084] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.926670][ T5084] REISERFS (device loop3): checking transaction log (loop3) [ 103.958668][ T5084] REISERFS (device loop3): Using r5 hash to sort names [ 103.962083][ T5084] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 103.965920][ T5084] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 104.022434][ T5096] tipc: Started in network mode [ 104.026278][ T5096] tipc: Node identity 420ae787d293, cluster identity 4711 [ 104.031037][ T5096] tipc: Enabled bearer , priority 0 [ 104.061840][ T5098] loop1: detected capacity change from 0 to 2048 [ 104.086134][ T5096] device syzkaller0 entered promiscuous mode [ 104.121905][ T5098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.223979][ T5095] tipc: Resetting bearer [ 105.086907][ T4074] tipc: Node number set to 2426005383 [ 107.095443][ T5095] tipc: Disabling bearer [ 108.790376][ T5116] loop1: detected capacity change from 0 to 512 [ 108.996909][ T5127] loop3: detected capacity change from 0 to 2048 [ 109.323809][ T5134] loop5: detected capacity change from 0 to 16 [ 110.152933][ T5116] EXT4-fs: error -4 creating inode table initialization thread [ 110.155854][ T5116] EXT4-fs (loop1): mount failed [ 110.625443][ T5127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.697848][ T5160] udc-core: couldn't find an available UDC or it's busy [ 110.705530][ T5160] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.710187][ T5160] udc-core: couldn't find an available UDC or it's busy [ 110.712089][ T5160] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.722144][ T5160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.220'. [ 110.841491][ T5134] erofs: (device loop5): erofs_read_inode: bogus i_mode (262) @ nid 36 [ 112.802583][ T5184] loop5: detected capacity change from 0 to 128 [ 112.944796][ T5187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 112.961582][ T5187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 113.854524][ T5184] attempt to access beyond end of device [ 113.854524][ T5184] loop5: rw=2049, want=577, limit=128 [ 113.973458][ T5184] attempt to access beyond end of device [ 113.973458][ T5184] loop5: rw=524288, want=369, limit=128 [ 114.012361][ T5197] attempt to access beyond end of device [ 114.012361][ T5197] loop5: rw=0, want=153, limit=128 [ 114.066692][ T5197] attempt to access beyond end of device [ 114.066692][ T5197] loop5: rw=0, want=153, limit=128 [ 114.067879][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 114.578808][ T5184] attempt to access beyond end of device [ 114.578808][ T5184] loop5: rw=0, want=153, limit=128 [ 114.595130][ T5218] usb usb1: usbfs: process 5218 (syz.0.232) did not claim interface 0 before use [ 114.622485][ T5219] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 114.631703][ T5218] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 114.634053][ T5218] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 114.637860][ T5197] attempt to access beyond end of device [ 114.637860][ T5197] loop5: rw=0, want=153, limit=128 [ 114.640774][ T5197] attempt to access beyond end of device [ 114.640774][ T5197] loop5: rw=0, want=153, limit=128 [ 114.686909][ T5184] attempt to access beyond end of device [ 114.686909][ T5184] loop5: rw=0, want=153, limit=128 [ 114.696560][ T5184] attempt to access beyond end of device [ 114.696560][ T5184] loop5: rw=0, want=153, limit=128 [ 114.705401][ T5218] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 114.714401][ T5197] attempt to access beyond end of device [ 114.714401][ T5197] loop5: rw=0, want=153, limit=128 [ 114.752194][ T5219] device bond2 entered promiscuous mode [ 114.754107][ T5219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.771220][ T5223] bond2: (slave bridge1): making interface the new active one [ 114.773423][ T5223] device bridge1 entered promiscuous mode [ 114.826261][ T5223] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 114.863318][ T5231] loop3: detected capacity change from 0 to 16 [ 114.877833][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 114.901734][ T5231] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.255180][ T5242] process 'syz.3.235' launched './file2' with NULL argv: empty string added [ 116.323913][ T5245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.239'. [ 116.347213][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 116.349656][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.239'. [ 116.593700][ T5251] device syzkaller0 entered promiscuous mode [ 117.167156][ T7] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.186681][ T5281] loop1: detected capacity change from 0 to 512 [ 117.798599][ T5281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.924953][ T5281] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.990169][ T5281] EXT4-fs (loop1): 1 truncate cleaned up [ 118.011079][ T5281] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,user_xattr,lazytime,,errors=continue. Quota mode: none. [ 118.056091][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.304154][ T5340] bond0: (slave gre0): Error: Device type is different from other slaves [ 118.315414][ T5340] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 119.314008][ T4127] Bluetooth: hci0: command 0x0406 tx timeout [ 120.850755][ T5368] udc-core: couldn't find an available UDC or it's busy [ 120.852719][ T5368] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.916444][ T5365] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 120.918584][ T5365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.924298][ T5365] vhci_hcd vhci_hcd.0: Device attached [ 121.945054][ T4127] Bluetooth: hci0: command 0x0406 tx timeout [ 121.958772][ T5369] vhci_hcd: connection closed [ 121.962689][ T5313] vhci_hcd: stop threads [ 121.965743][ T5313] vhci_hcd: release socket [ 121.969326][ T5313] vhci_hcd: disconnect device [ 121.988494][ T5109] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 121.990557][ T5109] usb 4-1: enqueue for inactive port 0 [ 122.082999][ T5109] vhci_hcd: vhci_device speed not set [ 122.201991][ T5392] tipc: Enabled bearer , priority 0 [ 122.224422][ T5397] udc-core: couldn't find an available UDC or it's busy [ 122.232983][ T5397] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.250069][ T5389] tipc: Resetting bearer [ 122.308805][ T5389] tipc: Disabling bearer [ 122.354802][ T5400] loop4: detected capacity change from 0 to 256 [ 122.558415][ T5411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'. [ 125.004786][ T5429] bridge0: port 1(syz_tun) entered blocking state [ 125.011255][ T5430] loop3: detected capacity change from 0 to 1024 [ 125.013696][ T5429] bridge0: port 1(syz_tun) entered disabled state [ 125.016650][ T5429] device syz_tun entered promiscuous mode [ 125.044795][ T5429] bridge0: port 1(syz_tun) entered blocking state [ 125.047147][ T5429] bridge0: port 1(syz_tun) entered forwarding state [ 125.186396][ T5433] batman_adv: batadv0: Adding interface: dummy0 [ 125.192912][ T5433] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.213830][ T5433] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 125.269400][ T5430] EXT4-fs (loop3): Ignoring removed bh option [ 125.352183][ T5430] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 125.597895][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.279'. [ 125.621529][ T5448] device wlan0 entered promiscuous mode [ 127.090223][ T5466] loop1: detected capacity change from 0 to 8 [ 128.071886][ T5473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 128.179817][ T5466] capability: warning: `syz.1.285' uses deprecated v2 capabilities in a way that may be insecure [ 130.803277][ T5502] capability: warning: `syz.4.295' uses 32-bit capabilities (legacy support in use) [ 131.034733][ T5504] bond0: (slave gre0): Error: Device type is different from other slaves [ 131.091415][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.095312][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.640178][ T5504] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 131.675812][ T5510] loop0: detected capacity change from 0 to 128 [ 131.782209][ T5510] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 131.822842][ T5517] loop5: detected capacity change from 0 to 8192 [ 131.858639][ T5517] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 131.861757][ T5517] REISERFS (device loop5): using ordered data mode [ 131.865886][ T5517] reiserfs: using flush barriers [ 131.877335][ T5517] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.890857][ T5517] REISERFS (device loop5): checking transaction log (loop5) [ 132.069760][ T5517] REISERFS (device loop5): Using r5 hash to sort names [ 132.076624][ T5517] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.087508][ T5517] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 133.621080][ T5530] netlink: 'syz.0.302': attribute type 5 has an invalid length. [ 133.650587][ T5538] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 133.759201][ T5538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.762328][ T5538] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 133.852051][ T5549] loop4: detected capacity change from 0 to 128 [ 133.953328][ T5548] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.842041][ T5549] handle_bad_sector: 140 callbacks suppressed [ 134.842057][ T5549] attempt to access beyond end of device [ 134.842057][ T5549] loop4: rw=2049, want=1041, limit=128 [ 134.855440][ T5548] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.872877][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 134.893886][ T5549] attempt to access beyond end of device [ 134.893886][ T5549] loop4: rw=524288, want=369, limit=128 [ 134.915485][ T5549] attempt to access beyond end of device [ 134.915485][ T5549] loop4: rw=0, want=153, limit=128 [ 134.920295][ T5549] attempt to access beyond end of device [ 134.920295][ T5549] loop4: rw=0, want=153, limit=128 [ 134.923241][ T5549] attempt to access beyond end of device [ 134.923241][ T5549] loop4: rw=0, want=153, limit=128 [ 134.952833][ T5563] attempt to access beyond end of device [ 134.952833][ T5563] loop4: rw=0, want=153, limit=128 [ 134.971689][ T5557] device syzkaller0 entered promiscuous mode [ 135.017568][ T5563] attempt to access beyond end of device [ 135.017568][ T5563] loop4: rw=0, want=153, limit=128 [ 135.021287][ T5563] attempt to access beyond end of device [ 135.021287][ T5563] loop4: rw=0, want=153, limit=128 [ 135.045279][ T5548] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.059164][ T5549] attempt to access beyond end of device [ 135.059164][ T5549] loop4: rw=0, want=153, limit=128 [ 135.062144][ T5549] attempt to access beyond end of device [ 135.062144][ T5549] loop4: rw=0, want=153, limit=128 [ 135.959591][ T5548] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.229440][ T5548] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.236322][ T5548] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.275841][ T5548] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.309467][ T5548] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.416812][ T5578] device syzkaller0 entered promiscuous mode [ 137.394546][ T5597] loop0: detected capacity change from 0 to 16 [ 139.399956][ T5597] erofs: (device loop0): erofs_read_inode: bogus i_mode (262) @ nid 36 [ 143.269107][ T5644] netlink: 'syz.0.338': attribute type 5 has an invalid length. [ 143.276322][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 144.821149][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 144.830197][ T5653] loop0: detected capacity change from 0 to 4096 [ 144.879993][ T5672] bridge0: port 3(syz_tun) entered blocking state [ 144.882158][ T5672] bridge0: port 3(syz_tun) entered disabled state [ 144.886039][ T5672] device syz_tun entered promiscuous mode [ 144.904722][ T5672] bridge0: port 3(syz_tun) entered blocking state [ 144.907281][ T5672] bridge0: port 3(syz_tun) entered forwarding state [ 144.934705][ T5653] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 145.060437][ T5679] device netdevsim0 entered promiscuous mode [ 145.066082][ T5653] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 145.066334][ T5679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.083550][ T5679] udc-core: couldn't find an available UDC or it's busy [ 145.085735][ T5679] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.150472][ T5313] ntfs3: loop0: ino=1b, Internal error [ 145.152201][ T5313] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 145.445723][ T5686] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 145.545719][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 145.552271][ T5694] loop4: detected capacity change from 0 to 1024 [ 145.565806][ T5694] EXT4-fs (loop4): Ignoring removed bh option [ 145.584454][ T5694] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 145.589320][ T5692] md2: error: bitmap file must be a regular file [ 146.651960][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 146.839638][ T5715] bridge0: port 3(syz_tun) entered blocking state [ 146.856747][ T5715] bridge0: port 3(syz_tun) entered disabled state [ 146.870705][ T5715] device syz_tun entered promiscuous mode [ 146.879254][ T5715] bridge0: port 3(syz_tun) entered blocking state [ 146.881171][ T5715] bridge0: port 3(syz_tun) entered forwarding state [ 149.046310][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 149.046322][ T26] audit: type=1326 audit(148.980:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 149.085265][ T26] audit: type=1326 audit(149.010:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 149.134262][ T26] audit: type=1326 audit(149.010:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 149.182879][ T26] audit: type=1326 audit(149.010:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 149.233509][ T26] audit: type=1326 audit(149.010:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 149.430753][ T26] audit: type=1326 audit(149.040:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 149.460573][ T5749] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 150.089465][ T26] audit: type=1326 audit(149.040:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 150.116174][ T26] audit: type=1326 audit(149.040:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 150.128672][ T26] audit: type=1326 audit(149.040:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 150.190475][ T5764] netlink: 'syz.4.374': attribute type 5 has an invalid length. [ 150.193974][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 150.230836][ T26] audit: type=1326 audit(149.040:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x7ffc0000 [ 153.866794][ T5788] device syzkaller0 entered promiscuous mode [ 160.002320][ T5842] loop1: detected capacity change from 0 to 512 [ 162.143793][ T5843] loop5: detected capacity change from 0 to 4096 [ 162.162563][ T5857] loop0: detected capacity change from 0 to 512 [ 162.215136][ T5842] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 162.224374][ T5843] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 162.246285][ T5857] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.473418][ T4026] Bluetooth: hci4: link tx timeout [ 162.475446][ T4026] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.983700][ T4026] Bluetooth: hci4: link tx timeout [ 162.985219][ T4026] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.044148][ T5857] EXT4-fs (loop0): 1 truncate cleaned up [ 163.045821][ T5857] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 163.163031][ T5857] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 163.179704][ T5857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.193060][ T5857] bond1: (slave ip6gretap1): making interface the new active one [ 163.239051][ T5857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.241827][ T5857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.244148][ T5857] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 163.246798][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 163.271155][ T5319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.302203][ T4073] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.063563][ T5874] binder: 5873:5874 tried to acquire reference to desc 0, got 1 instead [ 164.092969][ T4127] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.095949][ T4127] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.098362][ T4127] Bluetooth: hci3: command 0x0406 tx timeout [ 164.100036][ T4127] Bluetooth: hci1: command 0x0406 tx timeout [ 164.101754][ T4127] Bluetooth: hci2: command 0x0406 tx timeout [ 164.151682][ T25] binder: undelivered TRANSACTION_COMPLETE [ 164.240036][ T338] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.325373][ T4073] binder: undelivered transaction 42, process died. [ 164.481483][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 165.285945][ T4127] Bluetooth: hci4: command 0x0406 tx timeout [ 165.334222][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.337102][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.387679][ T5900] udc-core: couldn't find an available UDC or it's busy [ 165.389836][ T5900] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 166.956487][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.305901][ T5917] loop5: detected capacity change from 0 to 8 [ 167.525074][ T4122] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.297403][ T4108] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 169.297420][ T4108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.475636][ T5929] device bridge_slave_0 entered promiscuous mode [ 169.481909][ T5929] device bridge_slave_0 left promiscuous mode [ 169.567198][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.967119][ T4122] usb 1-1: Using ep0 maxpacket: 16 [ 171.534443][ T5945] loop3: detected capacity change from 0 to 512 [ 171.638466][ T4122] usb 1-1: device descriptor read/all, error -71 [ 171.984764][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.775622][ T4074] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 172.789217][ T5945] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.431: bad orphan inode 134217728 [ 172.793469][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 172.803208][ T4074] Bluetooth: hci3: Injecting HCI hardware error event [ 172.808812][ T4026] Bluetooth: hci3: hardware error 0x00 [ 173.348933][ T5313] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.861161][ T5971] bpf_jit: unknown atomic op code 51 [ 173.927457][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 173.951873][ T5976] loop0: detected capacity change from 0 to 256 [ 173.986799][ T5976] FAT-fs (loop0): Directory bread(block 64) failed [ 173.989299][ T5976] FAT-fs (loop0): Directory bread(block 65) failed [ 173.991414][ T5976] FAT-fs (loop0): Directory bread(block 66) failed [ 173.993896][ T5976] FAT-fs (loop0): Directory bread(block 67) failed [ 174.006209][ T5976] FAT-fs (loop0): Directory bread(block 68) failed [ 174.017970][ T5976] FAT-fs (loop0): Directory bread(block 69) failed [ 174.027027][ T5976] FAT-fs (loop0): Directory bread(block 70) failed [ 174.037897][ T5976] FAT-fs (loop0): Directory bread(block 71) failed [ 174.039901][ T5976] FAT-fs (loop0): Directory bread(block 72) failed [ 174.045478][ T5976] FAT-fs (loop0): Directory bread(block 73) failed [ 175.208694][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.375652][ T6000] loop1: detected capacity change from 0 to 512 [ 177.457491][ T4108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.689201][ T6000] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.448: corrupted inode contents [ 177.715661][ T6000] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #3: comm syz.1.448: mark_inode_dirty error [ 177.962294][ T6000] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.448: corrupted inode contents [ 177.986039][ T6000] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.448: mark_inode_dirty error [ 178.082417][ T6000] __quota_error: 23 callbacks suppressed [ 178.082434][ T6000] Quota error (device loop1): write_blk: dquota write failed [ 178.092545][ T6000] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 178.095660][ T6000] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.448: Failed to acquire dquot type 0 [ 178.104643][ T6032] loop0: detected capacity change from 0 to 512 [ 178.187157][ T6000] EXT4-fs (loop1): 1 orphan inode deleted [ 178.188971][ T6000] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.251967][ T6036] loop4: detected capacity change from 0 to 764 [ 178.308514][ T6032] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.322485][ T6032] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.393831][ T6036] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 178.429755][ T6032] EXT4-fs (loop0): 1 truncate cleaned up [ 178.431471][ T6032] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 178.447242][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.798610][ T1626] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.566836][ T6032] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 179.970411][ T4115] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.246035][ T6060] MPTCP: kernel_bind error, err=-22 [ 180.385297][ T6032] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 180.803825][ T6084] tmpfs: Bad value for 'size' [ 181.592158][ T6080] loop1: detected capacity change from 0 to 8 [ 182.081623][ T6080] unable to read inode lookup table [ 182.146675][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.469'. [ 182.220130][ T5108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.367667][ T6092] loop4: detected capacity change from 0 to 64 [ 182.476254][ T6094] device ip6gretap0 entered promiscuous mode [ 182.494931][ T6094] device vlan2 entered promiscuous mode [ 182.558943][ T6098] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 182.776414][ T6104] loop4: detected capacity change from 0 to 512 [ 182.790448][ T6104] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 182.796522][ T6104] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 182.912413][ T6104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 182.915682][ T6104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 182.953024][ T6104] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.475: attempt to clear invalid blocks 1024 len 1 [ 182.983382][ T6104] EXT4-fs (loop4): Remounting filesystem read-only [ 182.992406][ T6104] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.475: bg 0: block 361: padding at end of block bitmap is not set [ 183.051356][ T6104] EXT4-fs (loop4): Remounting filesystem read-only [ 183.054392][ T6104] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 183.405021][ T6104] EXT4-fs (loop4): Remounting filesystem read-only [ 183.417677][ T6104] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.475: invalid indirect mapped block 1811939328 (level 0) [ 183.426032][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 183.435740][ T6104] EXT4-fs (loop4): Remounting filesystem read-only [ 183.439792][ T6104] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.475: invalid indirect mapped block 2185560079 (level 1) [ 183.451519][ T6104] EXT4-fs (loop4): Remounting filesystem read-only [ 183.457734][ T6104] EXT4-fs (loop4): 1 truncate cleaned up [ 183.462849][ T6104] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 183.565946][ T26] audit: type=1326 audit(183.500:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.475" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b4c728 code=0x0 [ 183.621140][ T4115] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.844487][ T6130] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 183.885164][ T6131] bridge0: port 4(gretap0) entered blocking state [ 183.887020][ T6131] bridge0: port 4(gretap0) entered disabled state [ 183.902341][ T6131] device gretap0 entered promiscuous mode [ 183.905418][ T6131] bridge0: port 4(gretap0) entered blocking state [ 183.907371][ T6131] bridge0: port 4(gretap0) entered forwarding state [ 184.072990][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 184.096528][ T6131] netlink: 'syz.3.484': attribute type 3 has an invalid length. [ 184.099396][ T6142] loop4: detected capacity change from 0 to 1024 [ 184.280921][ T6130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.284296][ T6130] bond2: (slave bond3): making interface the new active one [ 184.329151][ T6130] bond2: (slave bond3): Enslaving as an active interface with an up link [ 184.344409][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 184.347891][ T6143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.585449][ T6151] 9pnet: Unknown protocol version 9p20\++} [ 184.830525][ T6149] loop0: detected capacity change from 0 to 40427 [ 184.870776][ T5313] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.954950][ T6149] F2FS-fs (loop0): invalid crc value [ 184.959609][ T148] hfsplus: b-tree write err: -5, ino 4 [ 185.028172][ T6149] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.028352][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 185.075937][ T6149] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 186.162167][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 186.165462][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 186.200373][ T6169] netlink: 'syz.5.495': attribute type 1 has an invalid length. [ 186.272797][ T6169] device macsec1 entered promiscuous mode [ 186.274743][ T6169] device bond1 entered promiscuous mode [ 186.286296][ T26] audit: type=1326 audit(186.220:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84563728 code=0x7ffc0000 [ 186.294241][ T26] audit: type=1326 audit(186.220:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84563728 code=0x7ffc0000 [ 186.361726][ T26] audit: type=1326 audit(186.230:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84563728 code=0x7ffc0000 [ 186.397308][ T26] audit: type=1326 audit(186.230:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84563728 code=0x7ffc0000 [ 186.420123][ T26] audit: type=1326 audit(186.230:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84563728 code=0x7ffc0000 [ 187.877140][ T5313] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.958804][ T6184] dccp_close: ABORT with 32 bytes unread [ 188.078975][ T6195] tipc: Enabled bearer , priority 0 [ 188.117852][ T6195] device syzkaller0 entered promiscuous mode [ 188.125700][ T6195] tipc: Resetting bearer [ 188.314491][ T6212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.037176][ T5322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.059180][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'. [ 189.065085][ T6208] loop0: detected capacity change from 0 to 128 [ 189.108147][ T6206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.964794][ T6206] device veth5 entered promiscuous mode [ 189.975801][ T6206] bond2: (slave veth5): Enslaving as an active interface with an up link [ 190.055400][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 190.295394][ T5313] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.299119][ T6232] loop3: detected capacity change from 0 to 64 [ 191.358350][ T6241] tipc: Enabling of bearer rejected, already enabled [ 191.497908][ T6245] bridge0: port 3(vxlan0) entered blocking state [ 191.502351][ T6245] bridge0: port 3(vxlan0) entered disabled state [ 191.510456][ T6245] device vxlan0 entered promiscuous mode [ 191.571272][ T6247] loop5: detected capacity change from 0 to 2048 [ 192.257277][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.094079][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.096253][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.210244][ T6247] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.495397][ T5313] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.219549][ T6266] tipc: Enabling of bearer rejected, already enabled [ 194.464068][ T6272] loop0: detected capacity change from 0 to 2048 [ 195.286188][ T6279] loop1: detected capacity change from 0 to 32768 [ 195.693707][ T5316] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.745259][ T6277] netlink: 'syz.5.529': attribute type 10 has an invalid length. [ 195.761693][ T6277] device hsr_slave_0 left promiscuous mode [ 196.039045][ T6272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.367205][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.881823][ T6285] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.895702][ T6298] loop4: detected capacity change from 0 to 1024 [ 197.907639][ T6285] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.045003][ T6298] EXT4-fs (loop4): Ignoring removed orlov option [ 198.046954][ T6298] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 198.243272][ T4314] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.257309][ T6298] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,quota,nomblk_io_submit,. Quota mode: writeback. [ 198.302122][ T6312] tipc: Started in network mode [ 198.636458][ T6312] tipc: Node identity 4, cluster identity 4711 [ 199.036760][ T6312] tipc: Node number set to 4 [ 199.848433][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.964712][ T6322] loop1: detected capacity change from 0 to 1024 [ 200.033979][ T6322] EXT4-fs (loop1): Ignoring removed nobh option [ 200.035845][ T6322] EXT4-fs (loop1): Ignoring removed bh option [ 200.139963][ T6326] loop3: detected capacity change from 0 to 256 [ 200.282991][ T6322] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,data_err=ignore,grpquota,nobh,user_xattr,bh,usrjquota=,. Quota mode: writeback. [ 201.212025][ T4115] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.022263][ T5108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.414254][ T6370] xt_CT: No such helper "netbios-ns" [ 205.221094][ T6381] binder: 6380:6381 ioctl 4018620d 0 returned -22 [ 205.268056][ T5108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.567144][ T3606] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.657220][ T4314] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.938094][ T3606] usb 1-1: Using ep0 maxpacket: 32 [ 207.757289][ T3606] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 207.760182][ T3606] usb 1-1: config 0 has no interface number 0 [ 207.762136][ T3606] usb 1-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 207.764982][ T3606] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 207.792957][ T3606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.795354][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 207.839283][ T3606] usb 1-1: config 0 descriptor?? [ 207.888793][ T4034] bridge0: port 3(syz_tun) entered disabled state [ 207.920974][ T4034] device syz_tun left promiscuous mode [ 207.922725][ T4034] bridge0: port 3(syz_tun) entered disabled state [ 207.925056][ T6405] loop5: detected capacity change from 0 to 256 [ 207.987351][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.044335][ T6409] tipc: Enabled bearer , priority 18 [ 208.160033][ T3606] usb 1-1: USB disconnect, device number 6 [ 208.235187][ T6414] loop4: detected capacity change from 0 to 1024 [ 208.505225][ T5316] hfsplus: b-tree write err: -5, ino 4 [ 209.575752][ T6431] input: syz0 as /devices/virtual/input/input4 [ 210.409075][ T6445] syz.4.579 (6445): drop_caches: 2 [ 210.875564][ T4074] Bluetooth: hci3: command 0x0409 tx timeout [ 210.987207][ T4379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.997285][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 211.062732][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 211.130704][ T6452] netlink: 'syz.5.581': attribute type 10 has an invalid length. [ 211.145818][ T6458] futex_wake_op: syz.1.583 tries to shift op by 36; fix this program [ 211.158734][ T6452] bridge0: port 1(syz_tun) entered disabled state [ 211.174659][ T6452] bridge0: port 1(syz_tun) entered disabled state [ 211.223397][ T6452] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 211.298836][ T6448] tc_dump_action: action bad kind [ 211.317951][ T6462] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 211.436322][ T6465] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.450159][ T6465] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.457247][ T6465] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.465513][ T6465] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.489265][ T6465] bond3: (slave geneve2): making interface the new active one [ 211.503752][ T6465] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 211.519375][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.528761][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.537623][ T6416] device bridge_slave_0 entered promiscuous mode [ 211.542111][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 211.555415][ T6462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.566699][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.577313][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.580090][ T6416] device bridge_slave_1 entered promiscuous mode [ 211.627230][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.631971][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.832945][ T6416] team0: Port device team_slave_0 added [ 211.840898][ T6416] team0: Port device team_slave_1 added [ 211.870940][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.873255][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.887875][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.612429][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.628371][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.660995][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.809677][ T4379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.871253][ T6416] device hsr_slave_0 entered promiscuous mode [ 212.884633][ T6482] loop4: detected capacity change from 0 to 32768 [ 212.915506][ T6490] binder: 6489:6490 tried to acquire reference to desc 0, got 1 instead [ 212.918730][ T6416] device hsr_slave_1 entered promiscuous mode [ 212.927276][ T4127] Bluetooth: hci3: command 0x041b tx timeout [ 212.937787][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.942484][ T6416] Cannot create hsr debugfs directory [ 212.989574][ T25] binder: release 6489:6490 transaction 54 out, still active [ 212.991967][ T25] binder: undelivered TRANSACTION_COMPLETE [ 212.993782][ T25] binder: undelivered TRANSACTION_COMPLETE [ 213.022017][ T5109] binder: undelivered transaction 53, process died. [ 213.024254][ T5109] binder: send failed reply for transaction 54, target dead [ 213.024559][ T6482] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 213.110700][ T6492] loop0: detected capacity change from 0 to 8192 [ 213.126667][ T6496] loop1: detected capacity change from 0 to 1024 [ 213.155608][ T6492] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.166913][ T4035] ocfs2: Unmounting device (7,4) on (node local) [ 213.207239][ T6496] EXT4-fs (loop1): Ignoring removed orlov option [ 213.209444][ T6496] EXT4-fs (loop1): Ignoring removed nobh option [ 213.211131][ T6496] EXT4-fs (loop1): Ignoring removed bh option [ 213.212950][ T6496] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.266785][ T6496] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,data_err=abort,barrier=0x0000000000000002,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 213.438132][ T6416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.552490][ T6416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.579201][ T6416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.793500][ T6416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.557364][ T4108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.620614][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 214.624066][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'. [ 214.630417][ T6519] loop4: detected capacity change from 0 to 164 [ 215.391991][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 215.495767][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.506023][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.553779][ T6416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.566950][ T6416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.608051][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.610662][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.613333][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.616064][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.630271][ T6528] loop5: detected capacity change from 0 to 512 [ 215.642934][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.644916][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.176043][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.288611][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.317340][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.319513][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.327721][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.337517][ T4379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.343682][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.355794][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.376394][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.396749][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.399925][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.402921][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.405743][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.408720][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.416002][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.421280][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.423930][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.426676][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.435304][ T6529] loop0: detected capacity change from 0 to 4096 [ 216.456440][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 216.488955][ T6533] device ip6gretap0 entered promiscuous mode [ 216.489869][ T6529] ntfs: (device loop0): parse_options(): Unrecognized mount option disablå_sparse. [ 216.507742][ T6533] device ip6gretap0 left promiscuous mode [ 216.511381][ T6528] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.603: corrupted inode contents [ 216.527446][ T6528] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #16: comm syz.5.603: mark_inode_dirty error [ 216.532057][ T6528] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.603: corrupted inode contents [ 216.541793][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.543951][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.550326][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 216.555716][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 216.558729][ T6528] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.603: mark_inode_dirty error [ 216.562793][ T6528] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.603: corrupted inode contents [ 216.584634][ T6528] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 216.607382][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.611280][ T6528] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.603: corrupted inode contents [ 216.612005][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 216.617420][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 216.665800][ T6528] EXT4-fs error (device loop5): ext4_truncate:4273: inode #16: comm syz.5.603: mark_inode_dirty error [ 216.685736][ T6528] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 216.715589][ T6528] EXT4-fs (loop5): 1 truncate cleaned up [ 216.725149][ T6528] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.733849][ T6544] tipc: New replicast peer: 0.0.0.0 [ 216.735459][ T6544] tipc: Enabled bearer , priority 10 [ 217.101833][ T6558] syz.4.607 (6558): drop_caches: 2 [ 217.702985][ T4127] Bluetooth: hci3: command 0x0419 tx timeout [ 217.824344][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.827517][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.858212][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.861182][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 217.905582][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.912279][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.915445][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.937894][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.942299][ T6416] device veth0_vlan entered promiscuous mode [ 217.958276][ T6416] device veth1_vlan entered promiscuous mode [ 217.977892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.980413][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.995900][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.009601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.015835][ T6416] device veth0_macvtap entered promiscuous mode [ 218.021491][ T6566] loop1: detected capacity change from 0 to 512 [ 218.034715][ T6416] device veth1_macvtap entered promiscuous mode [ 218.043763][ T6566] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 218.043763][ T6566] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 218.043763][ T6566] [ 218.049610][ T6566] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.053219][ T6566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.216069][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.219564][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.222282][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.225124][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.228454][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.231298][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.233878][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.236723][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.240925][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.242948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.245609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.249403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.252257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.003654][ T6566] EXT4-fs (loop1): 1 truncate cleaned up [ 219.005208][ T6566] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 219.036267][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.040837][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.049249][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.052034][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.054723][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.078109][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.080899][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.083694][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.127837][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.221626][ T4108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.242591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.245713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.279829][ T6416] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.282796][ T6416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.285213][ T6416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.298551][ T6416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.153295][ T6584] loop4: detected capacity change from 0 to 8 [ 220.216837][ T6587] siw: device registration error -23 [ 220.227782][ T6584] handle_bad_sector: 3436 callbacks suppressed [ 220.227799][ T6584] attempt to access beyond end of device [ 220.227799][ T6584] loop4: rw=2048, want=36028797018963976, limit=8 [ 220.246417][ T6584] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 220.274515][ T6584] unable to read xattr id index table [ 220.297615][ T5108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.300210][ T5108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.335285][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.349192][ T5108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.351792][ T5108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.385871][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.563558][ T6595] xt_TCPMSS: Only works on TCP SYN packets [ 221.766660][ T6606] loop4: detected capacity change from 0 to 128 [ 221.988375][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.045862][ T6606] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.383621][ T6624] loop0: detected capacity change from 0 to 128 [ 224.331242][ T6631] input: syz0 as /devices/virtual/input/input5 [ 225.300533][ T136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.406189][ T6643] loop1: detected capacity change from 0 to 128 [ 225.478965][ T4028] bridge0: port 3(syz_tun) entered disabled state [ 225.527547][ T4028] device syz_tun left promiscuous mode [ 225.529210][ T4028] bridge0: port 3(syz_tun) entered disabled state [ 227.873639][ T6668] netlink: 'syz.5.641': attribute type 4 has an invalid length. [ 228.290041][ T136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.327501][ T26] audit: type=1107 audit(228.180:129): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 229.058218][ T6684] udc-core: couldn't find an available UDC or it's busy [ 229.133163][ T6684] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 230.273902][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.328665][ T4447] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.980940][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.002659][ T6704] loop5: detected capacity change from 0 to 1024 [ 231.099655][ T6704] EXT4-fs (loop5): Ignoring removed nobh option [ 231.101514][ T6704] EXT4-fs (loop5): Invalid want_extra_isize 9 [ 231.113497][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.427680][ T5108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.964381][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.990454][ T6721] loop6: detected capacity change from 0 to 512 [ 232.136237][ T6721] EXT2-fs (loop6): warning: mounting ext3 filesystem as ext2 [ 232.847726][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.261503][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 233.568892][ T5108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.305623][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 234.691956][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.693915][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.697229][ T6699] device bridge_slave_0 entered promiscuous mode [ 234.713749][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.715753][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.727907][ T6699] device bridge_slave_1 entered promiscuous mode [ 234.755464][ T9] tipc: Left network mode [ 234.780473][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.788799][ T5316] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.799942][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.874739][ T6699] team0: Port device team_slave_0 added [ 234.887675][ T6699] team0: Port device team_slave_1 added [ 234.964513][ T9] bond1: (slave ip6gretap1): Releasing active interface [ 235.043429][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.047389][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.062031][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.077752][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.090547][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.123034][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.240031][ T6699] device hsr_slave_0 entered promiscuous mode [ 235.339217][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 235.341504][ T6699] device hsr_slave_1 entered promiscuous mode [ 235.368122][ T6699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.371247][ T6699] Cannot create hsr debugfs directory [ 235.373090][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.665'. [ 235.660827][ T6784] loop1: detected capacity change from 0 to 128 [ 235.765613][ T6789] loop4: detected capacity change from 0 to 1024 [ 235.770286][ T6784] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.803977][ T6699] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.847804][ T6699] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.899524][ T6699] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.006559][ T6699] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.077182][ T6796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.080391][ T6796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.088431][ T6796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.107345][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'. [ 236.204166][ T6796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.216809][ T6796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.226387][ T6796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.305109][ T6810] loop6: detected capacity change from 0 to 64 [ 236.464819][ T6814] loop5: detected capacity change from 0 to 512 [ 236.583309][ T6796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.592894][ T6796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.595842][ T6796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.220706][ T6814] EXT4-fs (loop5): 1 orphan inode deleted [ 237.222432][ T6814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.279446][ T6796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.282540][ T6796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.285357][ T6796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.407269][ T4075] Bluetooth: hci2: command 0x040f tx timeout [ 237.481974][ T6823] loop6: detected capacity change from 0 to 1024 [ 237.503396][ T6823] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.565201][ T6823] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsold,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nodioread_nolock,user_xattr,nobarrier,dioread_nolock,,errors=continue. Quota mode: writeback. [ 237.603962][ T6796] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.606608][ T6796] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 237.620080][ T6796] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.802118][ T6796] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.804382][ T6796] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 237.806635][ T6796] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.840414][ T6796] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.888135][ T6796] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 237.890902][ T6796] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 238.446416][ T6796] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.457742][ T6796] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 238.478698][ T6796] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 238.725403][ T6833] loop1: detected capacity change from 0 to 1024 [ 238.733291][ T6837] loop6: detected capacity change from 0 to 512 [ 238.755952][ T9] device hsr_slave_0 left promiscuous mode [ 238.774209][ T6833] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.844807][ T6837] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 238.849098][ T9] device hsr_slave_1 left promiscuous mode [ 239.065139][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.070040][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.072819][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.200086][ T6861] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 240.072915][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.084384][ T9] device bridge_slave_1 left promiscuous mode [ 240.086198][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.154157][ T9] device bridge_slave_0 left promiscuous mode [ 240.156071][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.291203][ T4075] Bluetooth: hci2: command 0x0419 tx timeout [ 240.317303][ T9] device veth1_macvtap left promiscuous mode [ 240.319129][ T9] device veth0_macvtap left promiscuous mode [ 240.320810][ T9] device veth1_vlan left promiscuous mode [ 240.322419][ T9] device veth0_vlan left promiscuous mode [ 240.476976][ T6872] loop6: detected capacity change from 0 to 256 [ 240.542745][ T6872] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 240.739180][ T9] bond2 (unregistering): (slave bond3): Releasing backup interface [ 240.861033][ T9] bond3 (unregistering): Released all slaves [ 240.876700][ T9] bond2 (unregistering): Released all slaves [ 240.884152][ T9] bond1 (unregistering): Released all slaves [ 242.631969][ T9] team0 (unregistering): Port device team_slave_1 removed [ 242.651454][ T9] team0 (unregistering): Port device team_slave_0 removed [ 242.666335][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.718537][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.912866][ T9] bond0 (unregistering): Released all slaves [ 243.772680][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.776819][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.779561][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.783247][ T6868] device bridge_slave_0 left promiscuous mode [ 243.785108][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.839079][ T6868] device bridge_slave_1 left promiscuous mode [ 243.841788][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.878889][ T6868] bond0: (slave bond_slave_0): Releasing backup interface [ 243.919443][ T6898] loop5: detected capacity change from 0 to 8192 [ 243.939075][ T6898] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 243.942170][ T6898] REISERFS (device loop5): using ordered data mode [ 243.943981][ T6898] reiserfs: using flush barriers [ 243.946577][ T6898] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.953315][ T6898] REISERFS (device loop5): checking transaction log (loop5) [ 243.972532][ T6868] bond0: (slave bond_slave_1): Releasing backup interface [ 244.030882][ T6898] REISERFS (device loop5): Using tea hash to sort names [ 244.033087][ T6898] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 244.078334][ T6868] team0: Port device team_slave_0 removed [ 244.091813][ T6868] team0: Port device team_slave_1 removed [ 244.094617][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.101110][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.104292][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.106339][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.114815][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 244.124679][ T6868] bond2: (slave bridge1): Releasing backup interface [ 244.126581][ T6868] device bridge1 left promiscuous mode [ 244.196363][ T6868] bond3: (slave geneve2): Releasing active interface [ 244.249926][ T6868] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 244.252348][ T6868] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 244.254664][ T6868] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 244.257023][ T6868] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 244.314950][ T6870] team0: Mode changed to "loadbalance" [ 244.316987][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 244.558998][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.580570][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.631055][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.633816][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.636716][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.639919][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.642465][ T5313] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.644354][ T5313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.503661][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.518270][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.525783][ T6916] loop6: detected capacity change from 0 to 512 [ 245.529028][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.542101][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.544127][ T5313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.552540][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.610690][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.615230][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.621336][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.628080][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.645545][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.671796][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.684142][ T6916] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.713516][ T6699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.717239][ T6699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.749210][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.753406][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.777773][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.790636][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.801538][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.891802][ T6924] sp0: Synchronizing with TNC [ 245.893826][ T26] audit: type=1326 audit(245.830:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 245.904559][ T26] audit: type=1326 audit(245.840:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=10 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 245.937814][ T26] audit: type=1326 audit(245.840:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 245.946034][ T26] audit: type=1326 audit(245.840:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 245.996100][ T26] audit: type=1326 audit(245.840:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 246.003350][ T26] audit: type=1326 audit(245.870:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 246.018463][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.020602][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.049965][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.054504][ T26] audit: type=1326 audit(245.870:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.5.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79ea728 code=0x7ffc0000 [ 246.430339][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.436384][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.121554][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.124260][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.127508][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.130194][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.147000][ T6699] device veth0_vlan entered promiscuous mode [ 247.203533][ T6699] device veth1_vlan entered promiscuous mode [ 247.454923][ T6976] binder: 6972:6976 tried to acquire reference to desc 0, got 1 instead [ 248.077008][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.080257][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.096349][ T6699] device veth0_macvtap entered promiscuous mode [ 248.109485][ T6699] device veth1_macvtap entered promiscuous mode [ 248.128328][ T6982] binder: release 6972:6982 transaction 59 out, still active [ 248.130403][ T6982] binder: undelivered TRANSACTION_COMPLETE [ 248.140100][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.143026][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.166428][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.175572][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.184941][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.205324][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.213446][ T6979] udc-core: couldn't find an available UDC or it's busy [ 248.215398][ T6979] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 248.225145][ T6976] binder: 6972:6976 ioctl c0306201 200003c0 returned -14 [ 248.245311][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.299902][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.304427][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.320607][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.389331][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.399364][ T25] binder: send failed reply for transaction 59, target dead [ 248.405512][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.415089][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.417877][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.420813][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.424693][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.443705][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.447593][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.451075][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.556749][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.217337][ T6699] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.219746][ T6699] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.222179][ T6699] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.264272][ T6699] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.321509][ T6999] loop4: detected capacity change from 0 to 1024 [ 249.545120][ T6999] EXT4-fs (loop4): Ignoring removed orlov option [ 249.547655][ T6999] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 249.569125][ T4108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.571553][ T4108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.588169][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.620405][ T6999] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 249.645952][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.651868][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.660995][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.830598][ T7023] loop5: detected capacity change from 0 to 512 [ 251.159126][ T7023] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 251.262822][ T7023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 251.277295][ T7023] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.716: corrupted in-inode xattr [ 251.309661][ T7034] loop4: detected capacity change from 0 to 256 [ 251.315666][ T7023] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.716: couldn't read orphan inode 15 (err -117) [ 251.363815][ T7023] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 251.377546][ T7034] exfat: Deprecated parameter 'utf8' [ 251.379056][ T7034] exfat: Deprecated parameter 'namecase' [ 251.380577][ T7034] exfat: Deprecated parameter 'utf8' [ 251.425020][ T7034] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 252.931683][ T7063] loop7: detected capacity change from 0 to 2048 [ 252.944475][ T7067] loop5: detected capacity change from 0 to 764 [ 253.051750][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.269580][ T7063] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 254.194169][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.195962][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.199837][ T7007] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 254.478586][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 254.478609][ T7099] tc_dump_action: action bad kind [ 254.486450][ T7097] netlink: 44 bytes leftover after parsing attributes in process `syz.1.728'. [ 255.401201][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 255.456209][ T7116] loop7: detected capacity change from 0 to 128 [ 255.532227][ T7121] loop1: detected capacity change from 0 to 256 [ 255.588112][ T7116] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 255.631341][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 255.636237][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 255.669656][ T7121] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 255.680852][ T7121] UDF-fs: Scanning with blocksize 512 failed [ 255.695286][ T7121] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 255.722645][ T7121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.107311][ T7154] 9pnet: p9_client_clunk (7154): Trying to clunk with invalid fid [ 257.109419][ T7154] CPU: 0 PID: 7154 Comm: syz.5.745 Not tainted 5.15.182-syzkaller #0 [ 257.111745][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.114556][ T7154] Call trace: [ 257.115472][ T7154] dump_backtrace+0x0/0x43c [ 257.116668][ T7154] show_stack+0x2c/0x3c [ 257.117752][ T7154] __dump_stack+0x30/0x40 [ 257.118899][ T7154] dump_stack_lvl+0xf8/0x160 [ 257.120185][ T7154] dump_stack+0x1c/0x5c [ 257.121292][ T7154] p9_client_clunk+0x280/0x368 [ 257.122551][ T7154] v9fs_statfs+0x154/0x2d0 [ 257.123679][ T7154] user_statfs+0x1bc/0x4f0 [ 257.124874][ T7154] __arm64_sys_statfs+0xc8/0x148 [ 257.126205][ T7154] invoke_syscall+0x98/0x2b8 [ 257.127491][ T7154] el0_svc_common+0x138/0x258 [ 257.128747][ T7154] do_el0_svc+0x58/0x14c [ 257.129928][ T7154] el0_svc+0x78/0x1e0 [ 257.131045][ T7154] el0t_64_sync_handler+0xcc/0xe4 [ 257.132354][ T7154] el0t_64_sync+0x1a0/0x1a4 [ 260.174406][ T7179] loop7: detected capacity change from 0 to 32768 [ 260.202143][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 260.334862][ T7192] tipc: Enabled bearer , priority 0 [ 260.342873][ T7192] device syzkaller0 entered promiscuous mode [ 260.344878][ T7179] XFS (loop7): Mounting V5 Filesystem [ 260.408006][ T7192] tipc: Resetting bearer [ 260.457641][ T7179] XFS (loop7): Ending clean mount [ 260.470078][ T7191] tipc: Resetting bearer [ 260.486182][ T7179] XFS (loop7): Quotacheck needed: Please wait. [ 260.490445][ T7191] tipc: Disabling bearer [ 260.550685][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.753'. [ 260.631010][ T7179] XFS (loop7): Quotacheck: Done. [ 260.796230][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.756'. [ 260.859180][ T7215] udc-core: couldn't find an available UDC or it's busy [ 260.861269][ T7215] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.949710][ T6699] XFS (loop7): Unmounting Filesystem [ 264.880814][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.5.765'. [ 268.533081][ T7338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.375250][ T7334] loop1: detected capacity change from 0 to 2048 [ 270.474377][ T7341] loop4: detected capacity change from 0 to 1024 [ 270.977936][ T7341] hfsplus: unable to parse mount options [ 271.003291][ T7334] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 271.005472][ T7334] UDF-fs: Scanning with blocksize 512 failed [ 271.045742][ T7334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.205631][ T7363] netlink: 104 bytes leftover after parsing attributes in process `syz.7.785'. [ 272.231497][ T7380] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 272.405039][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.789'. [ 272.412343][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.789'. [ 276.854126][ T7447] netlink: 'syz.4.802': attribute type 21 has an invalid length. [ 278.522906][ T7451] ================================================================== [ 278.525516][ T7451] BUG: KASAN: use-after-free in rose_get_neigh+0x17c/0x480 [ 278.527501][ T7451] Read of size 1 at addr ffff0000e8b03c30 by task syz.1.805/7451 [ 278.529564][ T7451] [ 278.530172][ T7451] CPU: 0 PID: 7451 Comm: syz.1.805 Not tainted 5.15.182-syzkaller #0 [ 278.532340][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 278.535054][ T7451] Call trace: [ 278.535891][ T7451] dump_backtrace+0x0/0x43c [ 278.537149][ T7451] show_stack+0x2c/0x3c [ 278.538290][ T7451] __dump_stack+0x30/0x40 [ 278.539727][ T7451] dump_stack_lvl+0xf8/0x160 [ 278.541729][ T7451] print_address_description+0x78/0x30c [ 278.543446][ T7451] kasan_report+0xec/0x15c [ 278.544723][ T7451] __asan_report_load1_noabort+0x44/0x50 [ 278.546328][ T7451] rose_get_neigh+0x17c/0x480 [ 278.547635][ T7451] rose_connect+0x350/0xffc [ 278.548887][ T7451] __sys_connect+0x264/0x28c [ 278.550152][ T7451] __arm64_sys_connect+0x7c/0x94 [ 278.551513][ T7451] invoke_syscall+0x98/0x2b8 [ 278.552795][ T7451] el0_svc_common+0x138/0x258 [ 278.554077][ T7451] do_el0_svc+0x58/0x14c [ 278.555258][ T7451] el0_svc+0x78/0x1e0 [ 278.556386][ T7451] el0t_64_sync_handler+0xcc/0xe4 [ 278.557718][ T7451] el0t_64_sync+0x1a0/0x1a4 [ 278.558988][ T7451] [ 278.559637][ T7451] Allocated by task 3643: [ 278.560824][ T7451] __kasan_kmalloc+0xb0/0xf0 [ 278.562133][ T7451] kmem_cache_alloc_trace+0x274/0x3fc [ 278.563566][ T7451] kernfs_fop_open+0x368/0xa8c [ 278.564870][ T7451] do_dentry_open+0x760/0xebc [ 278.566181][ T7451] vfs_open+0x7c/0x90 [ 278.567305][ T7451] path_openat+0x1f80/0x26e4 [ 278.568586][ T7451] do_filp_open+0x164/0x330 [ 278.569804][ T7451] do_sys_openat2+0x128/0x3d8 [ 278.571103][ T7451] __arm64_sys_openat+0x120/0x154 [ 278.572418][ T7451] invoke_syscall+0x98/0x2b8 [ 278.573666][ T7451] el0_svc_common+0x138/0x258 [ 278.574908][ T7451] do_el0_svc+0x58/0x14c [ 278.576082][ T7451] el0_svc+0x78/0x1e0 [ 278.577255][ T7451] el0t_64_sync_handler+0xcc/0xe4 [ 278.578618][ T7451] el0t_64_sync+0x1a0/0x1a4 [ 278.579927][ T7451] [ 278.580542][ T7451] Freed by task 3643: [ 278.581659][ T7451] kasan_set_track+0x4c/0x84 [ 278.582961][ T7451] kasan_set_free_info+0x28/0x4c [ 278.584310][ T7451] ____kasan_slab_free+0x118/0x164 [ 278.585721][ T7451] __kasan_slab_free+0x18/0x28 [ 278.587067][ T7451] slab_free_freelist_hook+0x128/0x1e8 [ 278.588578][ T7451] kfree+0x170/0x40c [ 278.589642][ T7451] kernfs_fop_release+0x1e8/0x288 [ 278.591004][ T7451] __fput+0x1c0/0x7f8 [ 278.592155][ T7451] ____fput+0x20/0x30 [ 278.593287][ T7451] task_work_run+0x12c/0x1e0 [ 278.594512][ T7451] do_notify_resume+0x24b4/0x3128 [ 278.595902][ T7451] el0_svc+0xf0/0x1e0 [ 278.597001][ T7451] el0t_64_sync_handler+0xcc/0xe4 [ 278.598382][ T7451] el0t_64_sync+0x1a0/0x1a4 [ 278.599608][ T7451] [ 278.600229][ T7451] The buggy address belongs to the object at ffff0000e8b03c00 [ 278.600229][ T7451] which belongs to the cache kmalloc-512 of size 512 [ 278.604087][ T7451] The buggy address is located 48 bytes inside of [ 278.604087][ T7451] 512-byte region [ffff0000e8b03c00, ffff0000e8b03e00) [ 278.607728][ T7451] The buggy address belongs to the page: [ 278.609296][ T7451] page:00000000346dbfc1 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128b00 [ 278.612193][ T7451] head:00000000346dbfc1 order:2 compound_mapcount:0 compound_pincount:0 [ 278.614528][ T7451] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 278.616854][ T7451] raw: 05ffc00000010200 fffffc000322d600 0000000400000004 ffff0000c0002600 [ 278.619275][ T7451] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 278.621704][ T7451] page dumped because: kasan: bad access detected [ 278.623436][ T7451] [ 278.624092][ T7451] Memory state around the buggy address: [ 278.625699][ T7451] ffff0000e8b03b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.628058][ T7451] ffff0000e8b03b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.630373][ T7451] >ffff0000e8b03c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.632607][ T7451] ^ [ 278.634180][ T7451] ffff0000e8b03c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.636358][ T7451] ffff0000e8b03d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.638560][ T7451] ================================================================== [ 278.640783][ T7451] Disabling lock debugging due to kernel taint [ 286.767290][ T4074] Bluetooth: hci4: command 0x0406 tx timeout