last executing test programs: 2m13.245509871s ago: executing program 3 (id=239): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0xa04c0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000280)) connect$can_bcm(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 2m13.199738635s ago: executing program 3 (id=242): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m10.313481375s ago: executing program 3 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1c, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 2m9.165339871s ago: executing program 3 (id=266): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x2000000000000178, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendto(0xffffffffffffffff, &(0x7f00000006c0)="8b80985ec4058dd7d4a5dba00490f80d7406e1ae9726234ecaf2ec68b17e52da3ec8cff8e4f6648e8c832612c5dec41ad97eb53044b2476b509dd30bfe322a81df55423ff349fca326845ad0036edbdf7afde0985ecb8da40f135797cd0e1373edef19e9f9bab17d8bd5ed7a640cc196879ea6dad5287191c3fd6dff83865281f7fb32c6b989d27dfc2ff43719f75c13895f052cc66f3026e01df42a64bec292e68fa0e9414ec7d925", 0xa9, 0x50, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r3, 0x0, 0x2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m8.308708362s ago: executing program 3 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001f00)=""/4093, 0xffd) 2m7.37741293s ago: executing program 3 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}}, 0x0) 2m7.36896043s ago: executing program 32 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}}, 0x0) 5.704041835s ago: executing program 1 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) 5.619498692s ago: executing program 5 (id=1054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a00000200000605000100070000000900020073797a3200"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 4.705365368s ago: executing program 0 (id=1062): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) sched_getparam(r0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000300)="390000001300034700bb5be1c3e4feff06000000010000004500007b32da90541842da2f646e84fedff391f7df47642dcdb959ac3a0d9f65bdfb339b8190180f3641d8e65ef614ae8584f12f8d088ed28544819dd7828c1d39fbdfdd90f7073b269be8a706e9a17766609169fa6d56344c", 0x71}, {&(0x7f0000000580)="fa21bd2b5c40cc4207", 0x9}], 0x2) 4.695220719s ago: executing program 5 (id=1063): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x10000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 4.3195915s ago: executing program 1 (id=1064): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) timer_settime(0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) 3.229478651s ago: executing program 1 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x2, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 3.229222091s ago: executing program 0 (id=1068): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x440, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0xfffffffe}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 3.228909451s ago: executing program 4 (id=1069): bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.835347343s ago: executing program 5 (id=1070): close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x4040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.772834529s ago: executing program 0 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 2.309248238s ago: executing program 1 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) 2.308959698s ago: executing program 4 (id=1074): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x40, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4080) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x8040) 1.724901286s ago: executing program 5 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) fchdir(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x4, 0x30000000000, 0x8, 0xffffffff, 0x7f, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) 1.724291806s ago: executing program 2 (id=1076): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001800)=ANY=[], 0x6c4}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.67995738s ago: executing program 2 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, &(0x7f0000000000)) 1.565338919s ago: executing program 5 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x5}}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x7}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7, 0x8, 0x8, 0xe, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x9}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_REORDER={0xc, 0x3, {0x80000001, 0x6}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x3c}}, @TCA_NETEM_DELAY_DIST={0x66, 0x2, "65255f68e921c2634376b408f9ea738ead41a74432ace1c9fd4f1c0f0145c6005fd0e19f1723f3d3a243c95fa220e24d2b3388a65a71ae252504c5e3e048b24bc5c4893fbe5a757b203fed8bfc1526124b5103f1e39c9007bd42e2153056748b661f"}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000080)=""/4096, 0x1000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'wg2\x00', {0x4}, 0x400}) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.564991129s ago: executing program 4 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) 1.214202559s ago: executing program 0 (id=1080): syz_emit_ethernet(0x52, &(0x7f0000000240)={@broadcast, @broadcast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "089f4f", 0x18, 0x6, 0xff, @private0, @loopback, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) 1.213902239s ago: executing program 1 (id=1081): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) 1.165399463s ago: executing program 0 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgget(0x2, 0x624) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 627.250048ms ago: executing program 2 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r5, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac"], 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 597.42886ms ago: executing program 5 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000880)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11363d2684fff43955079736fa4c80100487c31c09706b6bf168eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f0000000740)=""/264, 0x108, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha224-arm64-neon\x00'}}) 596.45487ms ago: executing program 2 (id=1085): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) 584.744601ms ago: executing program 1 (id=1086): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f000001fa80)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@unhide}, {@map_acorn}, {@overriderock}, {@hide}, {@check_strict}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@mode={'mode', 0x3d, 0xb2eb}}, {@check_relaxed}, {@hide}, {@unhide}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x2000, 0x0) 541.479265ms ago: executing program 4 (id=1087): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(0x0, 0x2) close(0x3) ftruncate(r2, 0xffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20], 0x20}}, 0x20008040) 538.511285ms ago: executing program 2 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x4, 0x30000000000, 0x8, 0xffffffff, 0x7f, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) 475.36739ms ago: executing program 2 (id=1089): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = inotify_init1(0x800) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r4}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 454.512602ms ago: executing program 4 (id=1090): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="620ac4ff000400007110030000000000950043"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c000180a7fe0600ffffffff100002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 145.247198ms ago: executing program 0 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r3, 0x4000) close(r3) 0s ago: executing program 4 (id=1092): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) r3 = epoll_create1(0x0) r4 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x60000005}) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44881}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.019891][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.021374][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.023399][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.025577][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.029006][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.030616][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.032147][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.034279][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.035853][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.037522][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.039653][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.042222][ T4048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.044584][ T4048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.045980][ T4048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.047390][ T4048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.049355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.051074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.052592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.054856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.058696][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.060210][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.062108][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.064131][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.065792][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.067313][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.069071][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.071086][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.074933][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.076317][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.077800][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.079317][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.081461][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.084358][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.085865][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.087421][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.088872][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.090394][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.092343][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.094353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.095916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.097438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.098933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.100823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.102296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.111292][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.112975][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.114426][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.115882][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.119046][ T4056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.120363][ T4056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.121681][ T4056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.123677][ T4056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.142831][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.144495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.180596][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.181913][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.189497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.196020][ T4052] device veth0_vlan entered promiscuous mode [ 37.200860][ T4052] device veth1_vlan entered promiscuous mode [ 37.202205][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.203933][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.205481][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.209541][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.210958][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.222581][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.223937][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.225381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.226926][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.234069][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.234380][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.235318][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.236545][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.239564][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.241032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.257021][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.258337][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.259779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.273072][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.274281][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.275538][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.292256][ T4052] device veth0_macvtap entered promiscuous mode [ 37.300537][ T4052] device veth1_macvtap entered promiscuous mode [ 37.305612][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.306875][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.310293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.311684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.313426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.317474][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.320399][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.339642][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.340978][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.342385][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.345980][ T4153] loop0: detected capacity change from 0 to 4096 [ 37.391046][ T4155] loop3: detected capacity change from 0 to 4096 [ 37.394074][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.395649][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.397228][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.398859][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.400353][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.401921][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.405616][ T4153] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 37.407243][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.408936][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.411227][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.416428][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.418021][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.425101][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.426750][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.428341][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.430034][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.431673][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.440650][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.442226][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.445632][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.448044][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.449594][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.451109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.456797][ T4052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.458159][ T4052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.459674][ T4052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.461222][ T4052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.530934][ T4155] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 37.539884][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.541130][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.542584][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.937008][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.938466][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.943156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.057195][ T4168] loop1: detected capacity change from 0 to 2048 [ 38.088543][ T4161] Alternate GPT is invalid, using primary GPT. [ 38.090703][ T4161] loop1: p1 p2 p3 [ 38.101011][ T4168] Alternate GPT is invalid, using primary GPT. [ 38.101997][ T4168] loop1: p1 p2 p3 [ 38.176992][ T4124] Bluetooth: hci0: command 0x041b tx timeout [ 38.179309][ T4124] Bluetooth: hci2: command 0x041b tx timeout [ 38.179793][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 38.193326][ T4124] Bluetooth: hci1: command 0x041b tx timeout [ 38.256829][ T4124] Bluetooth: hci3: command 0x041b tx timeout [ 38.627306][ T4183] loop1: detected capacity change from 0 to 512 [ 38.651958][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.664171][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.671439][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.675485][ T4055] udevd[4055]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.698894][ T4183] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 38.731195][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.734937][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.806553][ T4090] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.809063][ T4090] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.811323][ T4055] udevd[4055]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.006384][ T4211] binder: 4210:4211 tried to acquire reference to desc 0, got 1 instead [ 39.009461][ T4211] binder: 4210:4211 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.015979][ T4211] binder: 4211 RLIMIT_NICE not set [ 39.016826][ T4211] binder: 4211 RLIMIT_NICE not set [ 39.019038][ T4211] binder: 4211 RLIMIT_NICE not set [ 39.021122][ T4211] binder: 4210:4211 got transaction with invalid data ptr [ 39.350345][ T4211] binder: 4210:4211 transaction failed 29201/-14, size 240-0 line 3406 [ 39.351761][ T4211] binder: send failed reply for transaction 5 to 4210:4211 [ 39.376759][ T4124] binder: undelivered TRANSACTION_ERROR: 29190 [ 39.378149][ T4124] binder: undelivered TRANSACTION_COMPLETE [ 39.379057][ T4124] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.462547][ T4227] loop0: detected capacity change from 0 to 4096 [ 39.824269][ T4227] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 39.843242][ T4232] Zero length message leads to an empty skb [ 39.955286][ T4236] loop3: detected capacity change from 0 to 4096 [ 39.980757][ T4240] loop4: detected capacity change from 0 to 512 [ 39.987158][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.999605][ T4236] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 40.253607][ T4124] Bluetooth: hci0: command 0x040f tx timeout [ 40.332779][ T4124] Bluetooth: hci3: command 0x040f tx timeout [ 40.361015][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 40.362004][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 40.363093][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 40.375522][ T4240] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 40.529713][ T4254] device syzkaller0 entered promiscuous mode [ 40.619852][ T4258] netlink: 550 bytes leftover after parsing attributes in process `syz.0.33'. [ 41.203216][ T1605] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.282534][ T4279] loop1: detected capacity change from 0 to 512 [ 41.296352][ T4279] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 41.415583][ T4289] loop2: detected capacity change from 0 to 4096 [ 41.444474][ T4287] block device autoloading is deprecated and will be removed. [ 41.459943][ T4289] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 41.688462][ T4293] loop2: detected capacity change from 0 to 4096 [ 41.708531][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 41.711091][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 41.742218][ T4293] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 41.850354][ T4298] binder: 4297:4298 tried to acquire reference to desc 0, got 1 instead [ 41.852310][ T4298] binder: 4297:4298 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.855430][ T4298] binder: 4298 RLIMIT_NICE not set [ 41.856303][ T4298] binder: 4298 RLIMIT_NICE not set [ 41.857322][ T4298] binder: 4298 RLIMIT_NICE not set [ 41.858311][ T4298] binder: 4297:4298 transaction failed 29201/-22, size 240-0 line 3085 [ 41.859664][ T4298] binder: send failed reply for transaction 11 to 4297:4298 [ 41.864957][ T4090] binder: undelivered TRANSACTION_ERROR: 29190 [ 41.866023][ T4090] binder: undelivered TRANSACTION_COMPLETE [ 41.866923][ T4090] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.880211][ T4300] loop0: detected capacity change from 0 to 512 [ 41.903747][ T4300] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.905611][ T4300] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.907670][ T4300] Quota error (device loop0): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 41.913275][ T4300] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.915810][ T4300] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 41.919375][ T4300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.49: bg 0: block 40: padding at end of block bitmap is not set [ 41.927827][ T4300] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 41.930264][ T4300] EXT4-fs (loop0): 1 truncate cleaned up [ 41.931328][ T4300] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.096964][ T4310] loop0: detected capacity change from 0 to 512 [ 42.121121][ T4310] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 42.360197][ T1969] Bluetooth: hci0: command 0x0419 tx timeout [ 42.415068][ T1969] Bluetooth: hci4: command 0x0419 tx timeout [ 42.416721][ T1969] Bluetooth: hci2: command 0x0419 tx timeout [ 42.420401][ T1969] Bluetooth: hci1: command 0x0419 tx timeout [ 42.421676][ T1969] Bluetooth: hci3: command 0x0419 tx timeout [ 42.904230][ T4321] loop0: detected capacity change from 0 to 4096 [ 42.939900][ T4321] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 43.106395][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 43.178839][ T4332] loop1: detected capacity change from 0 to 4096 [ 43.190095][ T1606] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.208092][ T4341] loop2: detected capacity change from 0 to 512 [ 43.279896][ T4332] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 43.650996][ T4344] netlink: 44 bytes leftover after parsing attributes in process `syz.3.65'. [ 43.655986][ T4341] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 43.662516][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.920700][ T26] audit: type=1400 audit(43.900:2): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=4351 comm="syz.3.67" [ 44.667482][ T4365] loop0: detected capacity change from 0 to 4096 [ 44.682794][ T4363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.700218][ T4365] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 45.326207][ T4382] loop4: detected capacity change from 0 to 512 [ 45.426076][ T4382] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 45.572207][ T4393] loop4: detected capacity change from 0 to 4096 [ 45.705189][ T4393] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 47.122749][ T4419] loop1: detected capacity change from 0 to 4096 [ 47.138505][ T4423] loop4: detected capacity change from 0 to 2048 [ 47.142898][ T4419] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 47.259019][ T4431] MPTCP: addr_signal error, add_addr=1, echo=0 [ 47.288610][ T4423] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 47.291488][ T4423] NILFS (loop4): mounting unchecked fs [ 47.292384][ T4423] NILFS (loop4): recovery required for readonly filesystem [ 47.297080][ T4423] NILFS (loop4): write access will be enabled during recovery [ 47.300714][ T4423] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 47.666092][ T4438] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 47.673142][ T4423] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 47.696351][ T4161] udevd[4161]: incorrect nilfs2 checksum on /dev/loop4 [ 47.724702][ T4441] loop0: detected capacity change from 0 to 4096 [ 47.776020][ T4445] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 47.777758][ T4443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 47.858638][ T4441] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 48.255874][ T4219] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.261011][ T4468] loop3: detected capacity change from 0 to 4096 [ 49.293032][ T4470] syz.1.107 sent an empty control message without MSG_MORE. [ 49.514724][ T4476] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 49.517765][ T4476] team0: Device ipvlan1 failed to register rx_handler [ 49.546836][ T4468] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 50.871370][ T4513] loop0: detected capacity change from 0 to 4096 [ 50.911904][ T4513] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 51.792680][ T4522] loop3: detected capacity change from 0 to 512 [ 51.821991][ T4527] binder: 4526:4527 tried to acquire reference to desc 0, got 1 instead [ 51.827666][ T4124] binder: undelivered TRANSACTION_COMPLETE [ 51.828703][ T4124] binder: undelivered TRANSACTION_COMPLETE [ 51.842930][ T4522] EXT4-fs (loop3): inline encryption not supported [ 51.844032][ T4522] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 51.845090][ T4124] binder: undelivered transaction 18, process died. [ 51.846462][ T4124] binder: undelivered transaction 17, process died. [ 51.869164][ T4525] loop2: detected capacity change from 0 to 4096 [ 51.883645][ T4533] loop1: detected capacity change from 0 to 256 [ 51.906359][ T4536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.907614][ T4536] IPv6: NLM_F_CREATE should be set when creating new route [ 51.915484][ T4525] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 51.918156][ T4522] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.929441][ T4522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.930804][ T4522] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.123: inode #13: comm syz.3.123: iget: illegal inode # [ 51.936689][ T4522] EXT4-fs (loop3): Remounting filesystem read-only [ 51.938068][ T4522] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.123: couldn't read orphan inode 13 (err -117) [ 51.940684][ T4522] EXT4-fs (loop3): Remounting filesystem read-only [ 51.949122][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,bsdgroups,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 52.143747][ T4545] netlink: 'syz.3.123': attribute type 32 has an invalid length. [ 52.327002][ T4544] binder: BINDER_SET_CONTEXT_MGR already set [ 52.327973][ T4544] binder: 4543:4544 ioctl 4018620d 20000040 returned -16 [ 52.345599][ T4544] binder: 4543:4544 got transaction to invalid handle, 1 [ 52.349140][ T4544] binder: 4543:4544 transaction failed 29201/-22, size 0-0 line 2917 [ 52.360969][ T4544] binder: 4543:4544 BC_FREE_BUFFER u0000000020ffd000 no match [ 52.372298][ T4548] loop1: detected capacity change from 0 to 512 [ 52.379584][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.385508][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.446690][ T4548] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 52.521292][ T4553] udc-core: couldn't find an available UDC or it's busy [ 52.522529][ T4553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.732042][ T4561] syz.2.134 uses obsolete (PF_INET,SOCK_PACKET) [ 52.903562][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.917696][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.179288][ T4536] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.180773][ T4536] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.182082][ T4536] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.183476][ T4536] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.337395][ T4571] loop4: detected capacity change from 0 to 164 [ 53.434382][ T4574] loop1: detected capacity change from 0 to 4096 [ 53.855028][ T4574] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 54.279976][ T4584] binder: 4583:4584 tried to acquire reference to desc 0, got 1 instead [ 54.291310][ T25] binder: undelivered TRANSACTION_COMPLETE [ 54.311805][ T4585] loop4: detected capacity change from 0 to 4096 [ 54.385185][ T4585] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 54.386864][ T4124] binder: undelivered transaction 26, process died. [ 54.784985][ T4595] loop0: detected capacity change from 0 to 1024 [ 55.647014][ T1606] hfsplus: b-tree write err: -5, ino 4 [ 55.671023][ T4615] loop3: detected capacity change from 0 to 512 [ 56.100768][ T4615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.103203][ T4615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.121033][ T4615] EXT4-fs (loop3): 1 truncate cleaned up [ 56.122099][ T4615] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 56.139739][ T4615] tipc: Started in network mode [ 56.140841][ T4615] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 56.142613][ T4615] tipc: Enabled bearer , priority 0 [ 56.163685][ T4625] loop4: detected capacity change from 0 to 4096 [ 56.203772][ T4625] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 56.367348][ T4638] loop4: detected capacity change from 0 to 4096 [ 56.451953][ T4638] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 56.974164][ T4654] udc-core: couldn't find an available UDC or it's busy [ 56.975828][ T4654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.253125][ T4090] tipc: Node number set to 11578026 [ 57.392410][ T4668] loop2: detected capacity change from 0 to 4096 [ 57.442110][ T4668] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 57.506945][ C0] vcan0: j1939_tp_rxtimer: 0x00000000736dee95: rx timeout, send abort [ 58.006978][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b446e3fd: rx timeout, send abort [ 58.008717][ C0] vcan0: j1939_tp_rxtimer: 0x00000000736dee95: abort rx timeout. Force session deactivation [ 58.501595][ C0] vcan0: j1939_tp_rxtimer: 0x00000000658d883d: rx timeout, send abort [ 58.505022][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bb3e303a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.508372][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b446e3fd: abort rx timeout. Force session deactivation [ 59.002962][ C0] vcan0: j1939_tp_rxtimer: 0x00000000658d883d: abort rx timeout. Force session deactivation [ 59.065668][ T4697] loop4: detected capacity change from 0 to 4096 [ 59.079306][ T4697] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 59.155444][ T4700] loop3: detected capacity change from 0 to 4096 [ 59.180484][ T4700] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 59.244822][ T4702] MPTCP: addr_signal error, add_addr=1, echo=0 [ 60.369761][ T4731] netlink: 'syz.2.193': attribute type 3 has an invalid length. [ 60.374765][ T4124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.376498][ T4124] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.383175][ T4731] loop2: detected capacity change from 0 to 1024 [ 60.399690][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.405866][ T4729] Set syz0 is full, maxelem 0 reached [ 60.413309][ T4103] kernel write not supported for file /uhid (pid: 4103 comm: kworker/0:6) [ 60.436343][ T4732] fido_id[4732]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.440888][ T4737] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 60.479173][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 61.175204][ T4763] loop1: detected capacity change from 0 to 4096 [ 61.611185][ T4769] loop2: detected capacity change from 0 to 1024 [ 61.627020][ T4763] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 61.673842][ T4773] loop4: detected capacity change from 0 to 8 [ 61.683879][ T4773] SQUASHFS error: xz decompression failed, data probably corrupt [ 61.687402][ T4773] SQUASHFS error: Failed to read block 0x108: -5 [ 61.690247][ T4773] SQUASHFS error: Unable to read metadata cache entry [106] [ 61.697781][ T4773] SQUASHFS error: Unable to read inode 0x11f [ 61.822546][ T4775] bridge_slave_0: default FDB implementation only supports local addresses [ 62.906206][ T4797] MPTCP: addr_signal error, add_addr=1, echo=0 [ 63.905589][ T4827] binder: 4825:4827 tried to acquire reference to desc 0, got 1 instead [ 63.907534][ T4827] binder: 4825:4827 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.922053][ T4827] binder_alloc: 4825: binder_alloc_buf, no vma [ 63.923653][ T4827] binder: 4825:4827 transaction failed 29189/-3, size 0-0 line 3085 [ 63.929113][ T4827] binder: send failed reply for transaction 32 to 4825:4827 [ 63.937229][ T4124] binder: undelivered TRANSACTION_COMPLETE [ 63.938214][ T4124] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.950169][ T25] binder: undelivered TRANSACTION_ERROR: 29190 [ 64.328906][ T4832] loop2: detected capacity change from 0 to 4096 [ 64.408106][ T4832] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 64.903834][ T4844] loop2: detected capacity change from 0 to 4096 [ 64.929004][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 64.935156][ T26] audit: type=1326 audit(64.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 64.938949][ T26] audit: type=1326 audit(64.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 64.951092][ T26] audit: type=1326 audit(64.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=10 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 64.960475][ T26] audit: type=1326 audit(64.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 64.976549][ T4844] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 64.988415][ T26] audit: type=1326 audit(64.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 64.999017][ T26] audit: type=1326 audit(64.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 65.011770][ T26] audit: type=1326 audit(64.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 65.022041][ T26] audit: type=1326 audit(64.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 65.032323][ T26] audit: type=1326 audit(64.940:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 65.040478][ T26] audit: type=1326 audit(64.940:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8307bf28 code=0x7ffc0000 [ 65.729647][ T4869] udc-core: couldn't find an available UDC or it's busy [ 65.731121][ T4869] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.824049][ T4871] loop0: detected capacity change from 0 to 4096 [ 65.838839][ T4871] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.601268][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 67.069068][ T4896] loop4: detected capacity change from 0 to 4096 [ 67.101266][ T4897] bpf_jit: unknown atomic op code f1 [ 67.308238][ T4896] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 67.328477][ T4899] loop1: detected capacity change from 0 to 4096 [ 67.388122][ T4899] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 69.360075][ T4934] loop2: detected capacity change from 0 to 512 [ 69.362383][ T4933] loop3: detected capacity change from 0 to 1024 [ 69.410956][ T4939] loop4: detected capacity change from 0 to 4096 [ 69.658237][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.848452][ T1540] cfg80211: failed to load regulatory.db [ 69.850009][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.863460][ T4933] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 69.880189][ T4934] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 69.880724][ T4939] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 69.908449][ T4043] hfsplus: bad catalog entry type [ 69.911847][ T4043] hfsplus: bad catalog entry type [ 70.044041][ T4947] loop2: detected capacity change from 0 to 4096 [ 70.199643][ T4947] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 70.879009][ T4964] input: syz0 as /devices/virtual/input/input2 [ 71.114871][ T4368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.474621][ T4368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.516443][ T4368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.530934][ T4966] chnl_net:caif_netlink_parms(): no params data found [ 71.558458][ T4966] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.559753][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.561373][ T4966] device bridge_slave_0 entered promiscuous mode [ 71.563244][ T4985] loop1: detected capacity change from 0 to 4096 [ 71.564089][ T4966] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.565805][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.567384][ T4966] device bridge_slave_1 entered promiscuous mode [ 71.575710][ T4368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.583607][ T4966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.589533][ T4985] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 71.596752][ T4966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.616260][ T4090] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.627542][ T4966] team0: Port device team_slave_0 added [ 71.629681][ T4966] team0: Port device team_slave_1 added [ 71.636877][ T4966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.638138][ T4966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.642139][ T4966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.645305][ T4966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.646477][ T4966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.650629][ T4966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.679441][ T4990] 9pnet: Could not find request transport: 0xffffffffffffffff [ 71.694323][ T4966] device hsr_slave_0 entered promiscuous mode [ 71.698708][ T4992] process 'syz.1.286' launched './file1' with NULL argv: empty string added [ 71.713975][ T4966] device hsr_slave_1 entered promiscuous mode [ 71.744316][ T4966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.747010][ T4966] Cannot create hsr debugfs directory [ 71.794293][ T5001] loop1: detected capacity change from 0 to 128 [ 71.832746][ T4966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.868003][ T4090] usb 1-1: device descriptor read/64, error -71 [ 71.902976][ T4966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.133183][ T4090] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.243519][ T4368] tipc: Disabling bearer [ 72.246295][ T4368] tipc: Left network mode [ 72.246325][ T4966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.271991][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.273789][ T4966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.337031][ T5001] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 72.340005][ T5001] EXT4-fs (loop1): shut down requested (1) [ 72.343522][ T4090] usb 1-1: device descriptor read/64, error -71 [ 72.349866][ T5001] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 72.353593][ T5001] fscrypt (loop1, inode 13): Error -5 getting encryption context [ 72.355285][ T5001] EXT4-fs warning (device loop1): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 72.358268][ T5001] fscrypt (loop1, inode 13): Error -5 getting encryption context [ 72.361845][ T5001] EXT4-fs warning (device loop1): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 72.377210][ T4966] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.378402][ T4966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.379677][ T4966] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.380851][ T4966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.410256][ T4966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.421619][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.439644][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.441413][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.457356][ T4966] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.459774][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.461590][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.463364][ T4090] usb usb1-port1: attempt power cycle [ 72.465157][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.466379][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.473122][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.474948][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.476673][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.477826][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.482603][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.489863][ T5026] loop1: detected capacity change from 0 to 4096 [ 72.492879][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.495986][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.498222][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.509234][ T4966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.510876][ T4966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.519076][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.520591][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.522295][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.523975][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.525483][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.526964][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.528410][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.531978][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.568316][ T5026] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 72.660712][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.662039][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.688399][ T4966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.690183][ T5044] loop4: detected capacity change from 0 to 764 [ 72.710895][ T5040] loop2: detected capacity change from 0 to 8192 [ 72.787730][ T5040] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 72.789347][ T5040] REISERFS (device loop2): using ordered data mode [ 72.790357][ T5040] reiserfs: using flush barriers [ 72.792471][ T5040] REISERFS warning (device loop2): sh-460 journal_init: journal header magic 49ce1e1e (device loop2) does not match to magic found in super block 4001e [ 72.797203][ T5040] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 72.861655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.863448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.885152][ T4090] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.892360][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.894382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.896526][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.897871][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.910987][ T4966] device veth0_vlan entered promiscuous mode [ 72.919293][ T4966] device veth1_vlan entered promiscuous mode [ 72.942387][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.944170][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.945567][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.950032][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.953523][ T4966] device veth0_macvtap entered promiscuous mode [ 72.957805][ T4966] device veth1_macvtap entered promiscuous mode [ 72.976575][ T4124] Bluetooth: hci0: command 0x0409 tx timeout [ 72.982952][ T4090] usb 1-1: device descriptor read/8, error -71 [ 72.991006][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.997001][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.000915][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.006496][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.010344][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.013838][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.017720][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.019864][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.027493][ T4966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.029095][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.030549][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.031931][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.034808][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.053422][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.055332][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.057076][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.058816][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.060367][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.062095][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.332702][ T4090] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 73.410621][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.412345][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.414984][ T4966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.417493][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.419207][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.421955][ T4966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.423464][ T4966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.424817][ T4966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.426195][ T4966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.432747][ T4090] usb 1-1: device descriptor read/8, error -71 [ 73.484283][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.485738][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.495746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.553664][ T1606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555417][ T4090] usb usb1-port1: unable to enumerate USB device [ 73.557810][ T1606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.560382][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.660528][ T4368] device hsr_slave_0 left promiscuous mode [ 73.733982][ T4368] device hsr_slave_1 left promiscuous mode [ 73.833824][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.869138][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.912081][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.062929][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.109386][ T4368] device bridge_slave_1 left promiscuous mode [ 74.110856][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.193519][ T4368] device bridge_slave_0 left promiscuous mode [ 74.195931][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.299194][ T5112] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 74.674261][ T4368] device veth1_macvtap left promiscuous mode [ 74.676619][ T4368] device veth0_macvtap left promiscuous mode [ 74.678593][ T4368] device veth1_vlan left promiscuous mode [ 74.679633][ T4368] device veth0_vlan left promiscuous mode [ 74.710956][ T5120] binder: 5119:5120 tried to acquire reference to desc 0, got 1 instead [ 74.713503][ T5120] binder: 5119:5120 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.715772][ T5120] binder: 5120 RLIMIT_NICE not set [ 74.716696][ T5120] binder: 5120 RLIMIT_NICE not set [ 74.721710][ T1969] binder: release 5119:5120 transaction 38 out, still active [ 74.723699][ T1969] binder: undelivered TRANSACTION_COMPLETE [ 74.724736][ T1969] binder: send failed reply for transaction 45 to 5119:5120 [ 74.726248][ T1969] binder: release 5119:5120 transaction 38 in, still active [ 74.727575][ T1969] binder: send failed reply for transaction 38, target dead [ 74.729306][ T1969] binder: undelivered TRANSACTION_COMPLETE [ 74.730253][ T1969] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.799027][ T5125] loop0: detected capacity change from 0 to 4096 [ 74.842233][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 74.847025][ T5125] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.848631][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 74.860061][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.887612][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.930448][ T5128] loop0: detected capacity change from 0 to 4096 [ 74.943626][ T5128] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.995842][ T4368] bond0 (unregistering): Released all slaves [ 75.052763][ T1969] Bluetooth: hci0: command 0x041b tx timeout [ 75.634838][ T5155] tipc: Started in network mode [ 75.635718][ T5155] tipc: Node identity ac14142f, cluster identity 4711 [ 75.645365][ T5155] tipc: New replicast peer: 0.0.0.0 [ 75.646555][ T5155] tipc: Enabled bearer , priority 10 [ 75.711622][ T5161] loop4: detected capacity change from 0 to 4096 [ 75.800842][ T5161] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 76.673493][ T4103] tipc: Node number set to 2886997039 [ 76.865748][ T5214] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 76.869822][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.876457][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.877668][ T5214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.880388][ T5214] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.004963][ T5230] loop0: detected capacity change from 0 to 4096 [ 77.132585][ T4117] Bluetooth: hci0: command 0x040f tx timeout [ 77.783652][ T5230] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 77.943591][ T5239] loop4: detected capacity change from 0 to 4096 [ 78.250131][ T5239] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 78.319897][ T5251] loop5: detected capacity change from 0 to 1024 [ 78.403548][ T5251] ======================================================= [ 78.403548][ T5251] WARNING: The mand mount option has been deprecated and [ 78.403548][ T5251] and is ignored by this kernel. Remove the mand [ 78.403548][ T5251] option from the mount to silence this warning. [ 78.403548][ T5251] ======================================================= [ 78.460348][ T5251] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.333: Invalid block bitmap block 0 in block_group 0 [ 78.488336][ T5251] __quota_error: 1 callbacks suppressed [ 78.488346][ T5251] Quota error (device loop5): write_blk: dquota write failed [ 78.495309][ T5251] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 78.499858][ T5260] tipc: Started in network mode [ 78.508560][ T5251] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.333: Failed to acquire dquot type 0 [ 78.510462][ T5260] tipc: Node identity 8, cluster identity 5 [ 78.511377][ T5260] tipc: Node number set to 8 [ 78.538231][ T5260] tipc: Cannot configure node identity twice [ 78.558667][ T5251] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.333: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.572000][ T5251] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.333: Invalid inode bitmap blk 0 in block_group 0 [ 78.607473][ T5251] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 78.612569][ T148] Quota error (device loop5): remove_tree: Getting block too big (0 >= 8) [ 78.614424][ T148] EXT4-fs error (device loop5): ext4_release_dquot:6243: comm kworker/u4:2: Failed to release dquot type 0 [ 78.624456][ T5251] EXT4-fs (loop5): 1 orphan inode deleted [ 78.625347][ T5251] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 79.479819][ T4357] Bluetooth: hci0: command 0x0419 tx timeout [ 79.513515][ T5289] loop5: detected capacity change from 0 to 1024 [ 79.534633][ T5289] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 79.545000][ T5289] EXT4-fs (loop5): invalid journal inode [ 79.546037][ T5289] EXT4-fs (loop5): can't get journal size [ 79.557731][ T5289] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.341: blocks 48-48 from inode overlap system zone [ 79.564085][ T5289] EXT4-fs (loop5): failed to initialize system zone (-117) [ 79.567889][ T5289] EXT4-fs (loop5): mount failed [ 79.571544][ T5294] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.608970][ T5294] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.760083][ T5289] loop5: detected capacity change from 0 to 512 [ 80.317996][ T5289] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.323050][ T5312] loop4: detected capacity change from 0 to 512 [ 80.335015][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.336287][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.341582][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.343479][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.344671][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.345832][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.347421][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.350430][ T5289] EXT4-fs (loop5): 1 truncate cleaned up [ 80.351062][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.351465][ T5289] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 80.352798][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.374197][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.375669][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.377004][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.378396][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.379768][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.381152][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.386896][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.388401][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.389946][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.391429][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.404063][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.405587][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.406959][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.417684][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.419012][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.420326][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.421650][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.423007][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.424321][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.425626][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.426951][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.429145][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.430398][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.431634][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.432937][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.434146][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.435456][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.436733][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.437998][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.439540][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.440873][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.442163][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.443403][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.444664][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 80.667831][ T4357] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.715400][ T5312] EXT4-fs (loop4): 1 orphan inode deleted [ 80.716393][ T5312] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.893835][ T5344] binder: 5342:5344 tried to acquire reference to desc 0, got 1 instead [ 80.907717][ T1540] binder: release 5342:5344 transaction 51 out, still active [ 80.909299][ T1540] binder: undelivered TRANSACTION_COMPLETE [ 80.910200][ T1540] binder: undelivered TRANSACTION_COMPLETE [ 80.933455][ T1540] binder: undelivered transaction 50, process died. [ 80.934553][ T1540] binder: send failed reply for transaction 51, target dead [ 81.319828][ T5345] fido_id[5345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.355390][ T5347] loop4: detected capacity change from 0 to 4096 [ 81.412882][ T5347] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 81.764615][ T5361] Cannot find add_set index 4 as target [ 82.758629][ T5369] siw: device registration error -23 [ 83.661120][ T5397] loop0: detected capacity change from 0 to 40427 [ 83.720447][ T5397] F2FS-fs (loop0): invalid crc value [ 83.737174][ T5397] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 83.758649][ T5397] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 83.760816][ T5397] F2FS-fs (loop0): Start checkpoint disabled! [ 83.786994][ T5414] loop2: detected capacity change from 0 to 512 [ 84.678536][ T5397] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 84.829006][ T5414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.839011][ T5414] EXT4-fs (loop2): 1 truncate cleaned up [ 84.839986][ T5414] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.803791][ T5437] loop1: detected capacity change from 0 to 4096 [ 85.934485][ T5437] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 85.951553][ T5426] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 86.409368][ T5462] loop5: detected capacity change from 0 to 512 [ 86.486311][ T5462] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 86.488519][ T5462] EXT4-fs (loop5): 1 truncate cleaned up [ 86.489491][ T5462] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.703357][ T5493] loop2: detected capacity change from 0 to 64 [ 88.271228][ T5556] device vlan2 entered promiscuous mode [ 88.272278][ T5556] device bond0 entered promiscuous mode [ 88.273127][ T5556] device bond_slave_0 entered promiscuous mode [ 88.274220][ T5556] device bond_slave_1 entered promiscuous mode [ 88.505654][ T5558] device syzkaller0 entered promiscuous mode [ 88.596658][ T5573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.396'. [ 88.995136][ T5591] loop4: detected capacity change from 0 to 4096 [ 89.008758][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 89.010311][ T5593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 89.757117][ T5591] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 89.891280][ T4124] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.226023][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'. [ 90.350957][ T4124] usb 1-1: device descriptor read/64, error -71 [ 90.359413][ T5615] udc-core: couldn't find an available UDC or it's busy [ 90.360583][ T5615] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.923186][ T4124] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.053975][ T5635] binder: 5634:5635 tried to acquire reference to desc 0, got 1 instead [ 91.056244][ T5635] binder: 5634:5635 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.058654][ T5635] binder: 5635 RLIMIT_NICE not set [ 91.059590][ T5635] binder: 5635 RLIMIT_NICE not set [ 91.060674][ T5635] binder: 5635 RLIMIT_NICE not set [ 91.064896][ T5635] binder: undelivered TRANSACTION_COMPLETE [ 91.065933][ T5635] binder: undelivered transaction 57, process died. [ 91.071106][ T4357] binder: undelivered TRANSACTION_COMPLETE [ 91.110866][ T4124] usb 1-1: device descriptor read/64, error -71 [ 91.276481][ T4124] usb usb1-port1: attempt power cycle [ 91.414966][ T5644] loop5: detected capacity change from 0 to 512 [ 91.782159][ T5646] xt_nat: multiple ranges no longer supported [ 91.989303][ T5644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.100858][ T5644] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.420: bad orphan inode 131083 [ 92.103032][ T5644] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 93.255302][ T5667] loop1: detected capacity change from 0 to 4096 [ 93.752330][ T5678] netlink: 48 bytes leftover after parsing attributes in process `syz.5.426'. [ 93.798387][ T5667] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 94.279077][ T5690] binder: 5689:5690 ioctl 4018620d 0 returned -22 [ 94.453684][ T5692] binder: 5689:5692 got transaction to invalid handle, 1 [ 94.455006][ T5692] binder: 5689:5692 transaction failed 29201/-22, size 0-0 line 2917 [ 94.828236][ T5696] loop4: detected capacity change from 0 to 128 [ 94.968929][ T5717] binder: 5705:5717 tried to acquire reference to desc 0, got 1 instead [ 95.278912][ T5724] netlink: 'syz.1.431': attribute type 2 has an invalid length. [ 95.282017][ T5722] atomic_op 00000000e809a54d conn xmit_atomic 0000000000000000 [ 95.287433][ T4357] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.326956][ T1540] binder: undelivered TRANSACTION_COMPLETE [ 95.340124][ T4124] binder: undelivered transaction 63, process died. [ 95.432166][ T1606] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.953167][ T5750] loop1: detected capacity change from 0 to 4096 [ 95.994946][ T5750] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 97.378524][ T5822] batman_adv: batadv0: Adding interface: dummy0 [ 97.387092][ T5822] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.395528][ T5822] batman_adv: batadv0: Interface activated: dummy0 [ 97.717599][ T5822] batadv0: mtu less than device minimum [ 97.721370][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.725401][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.725790][ T5801] loop1: detected capacity change from 0 to 32768 [ 97.729354][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.733247][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.737125][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.740980][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.744786][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.746805][ T5831] loop5: detected capacity change from 0 to 8 [ 97.748625][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.752473][ T5822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.775082][ T5831] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.776491][ T5831] SQUASHFS error: Failed to read block 0x9b: -5 [ 97.777430][ T5831] SQUASHFS error: Unable to read metadata cache entry [99] [ 97.778522][ T5831] SQUASHFS error: Unable to read inode 0x127 [ 97.781946][ T5831] xt_TCPMSS: Only works on TCP SYN packets [ 97.906743][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.967772][ T5840] loop4: detected capacity change from 0 to 16 [ 97.976624][ T5801] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 97.990764][ T5845] loop0: detected capacity change from 0 to 4096 [ 98.338843][ T5845] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.359021][ T5840] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.458737][ T4044] ocfs2: Unmounting device (7,1) on (node local) [ 98.551492][ T5854] autofs4:pid:5854:autofs_fill_super: called with bogus options [ 98.848733][ T5858] netlink: 56 bytes leftover after parsing attributes in process `syz.5.460'. [ 98.863059][ T5858] netlink: 56 bytes leftover after parsing attributes in process `syz.5.460'. [ 99.026576][ T5869] loop5: detected capacity change from 0 to 1024 [ 99.073317][ T5869] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 99.075288][ T5869] EXT4-fs error (device loop5): ext4_get_journal_inode:5158: inode #32: comm syz.5.461: iget: special inode unallocated [ 99.077796][ T5869] EXT4-fs (loop5): no journal found [ 99.078749][ T5869] EXT4-fs (loop5): can't get journal size [ 99.089736][ T5869] EXT4-fs (loop5): filesystem is read-only [ 99.095274][ T5869] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 99.727467][ T5888] binder: 5887:5888 tried to acquire reference to desc 0, got 1 instead [ 99.747387][ T25] binder: undelivered TRANSACTION_COMPLETE [ 99.753783][ T25] binder: undelivered transaction 74, process died. [ 100.169823][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 100.263692][ T5902] device ipip0 entered promiscuous mode [ 100.419505][ T5906] loop4: detected capacity change from 0 to 40427 [ 100.441687][ T5906] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 100.443073][ T5906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.445534][ T5906] F2FS-fs (loop4): invalid crc value [ 100.462047][ T5906] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.473211][ T5906] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.474380][ T5906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.483725][ T5906] attempt to access beyond end of device [ 100.483725][ T5906] loop4: rw=2049, want=45104, limit=40427 [ 100.486930][ T5909] loop0: detected capacity change from 0 to 4096 [ 100.487322][ T5906] attempt to access beyond end of device [ 100.487322][ T5906] loop4: rw=2049, want=45144, limit=40427 [ 100.490053][ T5906] attempt to access beyond end of device [ 100.490053][ T5906] loop4: rw=2049, want=45104, limit=40427 [ 100.553456][ T5909] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.574847][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.576534][ T5914] batman_adv: batadv0: Interface deactivated: dummy0 [ 100.577544][ T5914] batman_adv: batadv0: Removing interface: dummy0 [ 100.584644][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 100.586213][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.587445][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.591779][ T5914] device bridge_slave_0 left promiscuous mode [ 100.593184][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.642701][ T5914] device bridge_slave_1 left promiscuous mode [ 100.643798][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.721873][ T5914] bond0: (slave bond_slave_0): Releasing backup interface [ 100.750129][ T5914] device bond_slave_0 left promiscuous mode [ 100.757129][ T5914] bond0: (slave bond_slave_1): Releasing backup interface [ 100.930436][ T26] audit: type=1326 audit(2678.792:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.5.480" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa98f2f28 code=0x0 [ 101.077111][ T5914] device bond_slave_1 left promiscuous mode [ 101.133383][ T5914] team0: Port device team_slave_0 removed [ 101.143696][ T5914] team0: Port device team_slave_1 removed [ 101.146248][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.148526][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.150890][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.152245][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.164310][ T5919] device vlan0 entered promiscuous mode [ 101.184034][ T5919] team0: Port device vlan0 added [ 102.528268][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 102.819867][ T5962] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.863322][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 102.876223][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.878496][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.879827][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.881938][ T5968] device bridge_slave_0 left promiscuous mode [ 102.883110][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.920476][ T5968] device bridge_slave_1 left promiscuous mode [ 102.921930][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.981326][ T5968] bond0: (slave bond_slave_0): Releasing backup interface [ 103.023528][ T5968] bond0: (slave bond_slave_1): Releasing backup interface [ 103.074644][ T5968] team0: Port device team_slave_0 removed [ 103.081844][ T5968] team0: Port device team_slave_1 removed [ 103.083291][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.084582][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.086409][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.087653][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.093198][ T5971] device vlan0 entered promiscuous mode [ 103.103036][ T5971] team0: Port device vlan0 added [ 103.161881][ T5980] loop4: detected capacity change from 0 to 1024 [ 103.170429][ T5980] EXT4-fs (loop4): Ignoring removed bh option [ 103.207424][ T5980] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 103.209596][ T5985] netlink: 96 bytes leftover after parsing attributes in process `syz.5.499'. [ 103.216472][ T5985] netlink: 80 bytes leftover after parsing attributes in process `syz.5.499'. [ 103.223968][ T5985] macvtap0: refused to change device tx_queue_len [ 103.228527][ T5985] loop5: detected capacity change from 0 to 256 [ 103.389772][ T5985] attempt to access beyond end of device [ 103.389772][ T5985] loop5: rw=2049, want=260, limit=256 [ 103.847338][ T6000] loop1: detected capacity change from 0 to 1024 [ 104.722787][ T6018] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 104.733446][ T6018] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.767188][ T6022] bond0: (slave bridge0): Releasing backup interface [ 104.781759][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.786751][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.790539][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.792657][ T6022] device bridge_slave_0 left promiscuous mode [ 104.793864][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.840244][ T6022] device bridge_slave_1 left promiscuous mode [ 104.841536][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.891815][ T6022] bond0: (slave bond_slave_0): Releasing backup interface [ 104.933167][ T6022] bond0: (slave bond_slave_1): Releasing backup interface [ 104.983575][ T6022] team0: Port device team_slave_0 removed [ 104.990643][ T6022] team0: Port device team_slave_1 removed [ 104.992004][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.993254][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.994973][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.996225][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.001313][ T6022] bond0: (slave wlan1): Releasing backup interface [ 105.059517][ T6025] device vlan0 entered promiscuous mode [ 105.072353][ T6025] team0: Port device vlan0 added [ 105.132254][ T6033] loop1: detected capacity change from 0 to 512 [ 105.242113][ T6037] device macvlan2 entered promiscuous mode [ 105.243604][ T6037] device team0 entered promiscuous mode [ 105.244547][ T6037] device team_slave_0 entered promiscuous mode [ 105.245652][ T6037] device team_slave_1 entered promiscuous mode [ 105.247011][ T6037] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.248904][ T6037] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 105.252642][ T6033] EXT4-fs (loop1): Ignoring removed bh option [ 105.539338][ T6033] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.541429][ T6044] loop4: detected capacity change from 0 to 128 [ 105.555453][ T6033] EXT4-fs (loop1): 1 truncate cleaned up [ 105.558584][ T6033] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 105.565893][ T6046] loop5: detected capacity change from 0 to 1024 [ 105.636580][ T6046] EXT4-fs (loop5): Ignoring removed bh option [ 105.656536][ T6046] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 106.536263][ T6067] binder: 6066:6067 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 106.543849][ T6067] binder: 6067 RLIMIT_NICE not set [ 106.570772][ T6069] loop1: detected capacity change from 0 to 128 [ 106.577690][ T6071] device bridge_slave_0 left promiscuous mode [ 106.580612][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.587458][ T6072] binder: 6066:6072 tried to acquire reference to desc 0, got 1 instead [ 106.592099][ T6067] binder: 6067 RLIMIT_NICE not set [ 106.593908][ T4117] binder: release 6066:6072 transaction 85 out, still active [ 106.595194][ T4117] binder: undelivered TRANSACTION_COMPLETE [ 106.599704][ T13] binder: release 6066:6067 transaction 85 in, still active [ 106.600913][ T13] binder: send failed reply for transaction 85, target dead [ 106.609909][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 106.620349][ T6071] device bridge_slave_1 left promiscuous mode [ 106.623549][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.638528][ T6069] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.643602][ T6069] EXT4-fs (loop1): resizing filesystem from 64 to 2 blocks [ 106.645054][ T6069] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 106.661844][ T6071] bond0: (slave bond_slave_0): Releasing backup interface [ 106.698278][ T6071] bond0: (slave bond_slave_1): Releasing backup interface [ 106.711040][ T6081] loop5: detected capacity change from 0 to 512 [ 106.739626][ T6071] device team_slave_0 left promiscuous mode [ 106.743007][ T6071] team0: Port device team_slave_0 removed [ 106.744288][ T6071] device team_slave_1 left promiscuous mode [ 106.746300][ T6071] team0: Port device team_slave_1 removed [ 106.748421][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.758541][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.762525][ T6071] bond0: (slave macvlan2): Releasing backup interface [ 106.770227][ T6081] Quota error (device loop5): v2_read_file_info: Free block number too big (1090519040 >= 6). [ 106.772095][ T6081] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.777943][ T6081] EXT4-fs (loop5): mount failed [ 106.799863][ T6071] device team0 left promiscuous mode [ 106.822777][ T6075] device vlan0 entered promiscuous mode [ 106.829912][ T6087] udc-core: couldn't find an available UDC or it's busy [ 106.831076][ T6087] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.939778][ T6096] loop0: detected capacity change from 0 to 256 [ 107.617590][ T6096] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 107.738395][ T6109] loop4: detected capacity change from 0 to 256 [ 107.814882][ T6111] loop4: detected capacity change from 0 to 1024 [ 107.976970][ T6115] loop5: detected capacity change from 0 to 8 [ 108.239132][ T6115] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 108.242200][ T6111] EXT4-fs (loop4): Ignoring removed bh option [ 108.249219][ T6114] cramfs: Error -5 while decompressing! [ 108.250247][ T6114] cramfs: 000000004773d47b(26)->000000004d7f1fa5(4096) [ 108.251339][ T6114] cramfs: Error -3 while decompressing! [ 108.252162][ T6114] cramfs: 000000009d53271d(26)->00000000100ca446(4096) [ 108.253161][ T6114] cramfs: Error -3 while decompressing! [ 108.253972][ T6114] cramfs: 00000000e40b3f46(16)->000000003591df19(4096) [ 108.255030][ T6114] cramfs: Error -5 while decompressing! [ 108.255853][ T6114] cramfs: 000000004773d47b(26)->000000004d7f1fa5(4096) [ 108.257835][ T4037] udevd[4037]: incorrect cramfs checksum on /dev/loop5 [ 108.268613][ T4037] udevd[4037]: incorrect cramfs checksum on /dev/loop5 [ 108.271826][ T6111] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 108.872973][ T6127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.875013][ T6127] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 108.876633][ T6127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.878448][ T6127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.895255][ T6127] team0: Port device vlan0 removed [ 109.032664][ T6127] team0: Port device vlan0 added [ 110.160638][ T6168] loop4: detected capacity change from 0 to 4096 [ 110.225941][ T6168] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 111.106780][ T6187] loop2: detected capacity change from 0 to 1024 [ 111.160917][ T6187] EXT4-fs (loop2): inline encryption not supported [ 111.162129][ T6187] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.166998][ T6193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.169222][ T6193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.171426][ T6193] device bridge_slave_0 left promiscuous mode [ 111.172524][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.806070][ T6193] device bridge_slave_1 left promiscuous mode [ 111.807270][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.810965][ T6187] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 112.560785][ T6187] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.566: Allocating blocks 385-513 which overlap fs metadata [ 112.580166][ T6187] EXT4-fs (loop2): pa 00000000920aac9a: logic 16, phys. 129, len 24 [ 112.581568][ T6187] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 112.596089][ T6193] bond0: (slave bond_slave_0): Releasing backup interface [ 112.653226][ T6193] bond0: (slave bond_slave_1): Releasing backup interface [ 112.691699][ T6193] team0: Port device team_slave_0 removed [ 112.700434][ T6193] team0: Port device team_slave_1 removed [ 112.701670][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.702897][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.706470][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.707717][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.716320][ T6203] device vlan0 entered promiscuous mode [ 112.731821][ T6203] team0: Port device vlan0 added [ 112.781894][ T6224] loop2: detected capacity change from 0 to 4096 [ 112.894333][ T6224] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 113.471682][ T6243] udc-core: couldn't find an available UDC or it's busy [ 113.472892][ T6243] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.475071][ T6243] tipc: Enabled bearer , priority 10 [ 113.769529][ T6255] loop0: detected capacity change from 0 to 1024 [ 113.782094][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.583'. [ 113.784005][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 113.813758][ T6255] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 113.815349][ T6255] EXT4-fs (loop0): Unrecognized mount option "fsmagic=0x0000000000000001" or missing value [ 114.169512][ T6261] ptrace attach of "./syz-executor exec"[4052] was attempted by " [ 114.425866][ T4357] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.644990][ T6246] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.646652][ T6246] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.648874][ T6246] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.650379][ T6246] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.761048][ T6257] netlink: 'syz.5.582': attribute type 4 has an invalid length. [ 114.799574][ T4357] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 114.801409][ T4357] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 114.802954][ T4357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.819169][ T6255] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.844053][ T4357] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 115.655823][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 115.733977][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.739964][ T6287] bond0: (slave rose0): Enslaving as an active interface with an up link [ 115.742142][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 115.744940][ T6288] loop5: detected capacity change from 0 to 4096 [ 115.784173][ T6288] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 116.625937][ T3625] usb 1-1: USB disconnect, device number 9 [ 116.666235][ T6343] loop1: detected capacity change from 0 to 512 [ 116.728800][ T6343] Quota error (device loop1): v2_read_file_info: Free block number too big (1090519040 >= 6). [ 116.730842][ T6343] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.734802][ T6343] EXT4-fs (loop1): mount failed [ 116.769816][ T6352] binder: 6351:6352 tried to acquire reference to desc 0, got 1 instead [ 116.772564][ T6352] binder: 6351:6352 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 116.774769][ T6352] binder: 6352 RLIMIT_NICE not set [ 116.775566][ T6352] binder: 6352 RLIMIT_NICE not set [ 116.776855][ T6352] binder: 6352 RLIMIT_NICE not set [ 116.778403][ T6352] binder: 6351:6352 transaction failed 29201/-22, size 240-0 line 3085 [ 116.779684][ T6352] binder: send failed reply for transaction 90 to 6351:6352 [ 116.785130][ T1540] binder: undelivered TRANSACTION_ERROR: 29190 [ 116.786287][ T1540] binder: undelivered TRANSACTION_COMPLETE [ 116.787229][ T1540] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.336151][ T6368] loop1: detected capacity change from 0 to 4096 [ 117.346723][ T6372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.607'. [ 117.699609][ T6370] device syzkaller0 entered promiscuous mode [ 117.740242][ T6368] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 118.283803][ T6382] loop4: detected capacity change from 0 to 128 [ 118.297156][ T6384] loop5: detected capacity change from 0 to 256 [ 118.378248][ T6384] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 118.406466][ T6382] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.421516][ T6382] EXT4-fs (loop4): shut down requested (1) [ 118.424561][ T6382] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 118.430160][ T6382] fscrypt (loop4, inode 13): Error -5 getting encryption context [ 118.431448][ T6382] EXT4-fs warning (device loop4): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 118.433953][ T6382] fscrypt (loop4, inode 13): Error -5 getting encryption context [ 118.435150][ T6382] EXT4-fs warning (device loop4): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 119.351824][ T6401] loop0: detected capacity change from 0 to 512 [ 119.475004][ T6401] Quota error (device loop0): v2_read_file_info: Free block number too big (1090519040 >= 6). [ 119.476919][ T6401] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.480159][ T6401] EXT4-fs (loop0): mount failed [ 119.986193][ T6418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.620'. [ 120.015220][ T6420] device syzkaller0 entered promiscuous mode [ 120.181539][ T6427] loop1: detected capacity change from 0 to 4096 [ 120.264882][ T6430] Cannot find add_set index 4 as target [ 120.507162][ T6427] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.606935][ T6435] loop2: detected capacity change from 0 to 128 [ 120.617183][ T6435] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.643968][ T6435] EXT4-fs (loop2): shut down requested (1) [ 120.646753][ T6435] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 121.048646][ T6435] fscrypt (loop2, inode 13): Error -5 getting encryption context [ 121.050230][ T6435] EXT4-fs warning (device loop2): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 121.052742][ T6435] fscrypt (loop2, inode 13): Error -5 getting encryption context [ 121.053976][ T6435] EXT4-fs warning (device loop2): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 121.079676][ T6439] netlink: 550 bytes leftover after parsing attributes in process `syz.5.627'. [ 122.126865][ T6464] loop4: detected capacity change from 0 to 1024 [ 122.769301][ T6464] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.635: Invalid block bitmap block 0 in block_group 0 [ 122.805280][ T6464] Quota error (device loop4): write_blk: dquota write failed [ 122.810098][ T6464] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 122.811905][ T6464] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.635: Failed to acquire dquot type 0 [ 122.814845][ T6464] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.635: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.818037][ T6464] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.635: Invalid inode bitmap blk 0 in block_group 0 [ 122.820488][ T6464] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 122.822246][ T6464] EXT4-fs (loop4): 1 orphan inode deleted [ 122.823372][ T6464] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 122.828989][ T5519] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 122.832622][ T5519] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:12: Failed to release dquot type 0 [ 123.262400][ T6485] loop5: detected capacity change from 0 to 2048 [ 123.288617][ T4161] Alternate GPT is invalid, using primary GPT. [ 123.289794][ T4161] loop5: p1 p2 p3 [ 123.300229][ T6485] Alternate GPT is invalid, using primary GPT. [ 123.301258][ T6485] loop5: p1 p2 p3 [ 123.329548][ T6491] loop2: detected capacity change from 0 to 4096 [ 123.413717][ T6491] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 123.929317][ T6501] loop5: detected capacity change from 0 to 2048 [ 123.961913][ T6501] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.963492][ T6501] NILFS (loop5): mounting unchecked fs [ 123.964391][ T6501] NILFS (loop5): recovery required for readonly filesystem [ 123.965573][ T6501] NILFS (loop5): write access will be enabled during recovery [ 123.973080][ T5333] udevd[5333]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 123.975943][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 123.978721][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 123.983136][ T6501] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 123.987964][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.646'. [ 123.995643][ T6500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.646'. [ 123.997287][ T6501] NILFS (loop5): couldn't remount because the filesystem is in an incomplete recovery state [ 124.432448][ T5333] udevd[5333]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 124.453808][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 124.458074][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 125.401252][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 126.714132][ T6559] binder: 6558:6559 tried to acquire reference to desc 0, got 1 instead [ 126.732677][ T4124] binder: undelivered TRANSACTION_COMPLETE [ 126.733800][ T4124] binder: undelivered TRANSACTION_COMPLETE [ 126.740402][ T4124] binder: undelivered transaction 97, process died. [ 126.741736][ T4124] binder: undelivered transaction 96, process died. [ 126.776065][ T6565] loop0: detected capacity change from 0 to 256 [ 127.623507][ T6562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.045156][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.673'. [ 129.497919][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.606989][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.661135][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.665222][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.669033][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.433144][ T6653] netlink: 'syz.1.698': attribute type 3 has an invalid length. [ 130.442772][ C1] Unknown status report in ack skb [ 130.448914][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 130.452421][ T25] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.474031][ T6653] loop1: detected capacity change from 0 to 1024 [ 130.527496][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 130.530812][ T6653] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.544787][ T13] kernel write not supported for file /uhid (pid: 13 comm: kworker/0:1) [ 130.551759][ T6663] bridge_slave_0: default FDB implementation only supports local addresses [ 131.076487][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.078020][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.840234][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'. [ 131.972541][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.556054][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.559946][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.576169][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.578885][ T6706] loop0: detected capacity change from 0 to 164 [ 133.205259][ T6720] netlink: 'syz.4.710': attribute type 3 has an invalid length. [ 134.831238][ T6745] loop1: detected capacity change from 0 to 512 [ 134.835429][ T6745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.862417][ T6745] EXT4-fs (loop1): 1 truncate cleaned up [ 134.863536][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 134.906806][ T6745] tipc: Started in network mode [ 134.907656][ T6745] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 134.909165][ T6745] tipc: Enabled bearer , priority 0 [ 134.960149][ T6754] loop2: detected capacity change from 0 to 512 [ 135.360478][ T6754] EXT4-fs (loop2): inline encryption not supported [ 135.361558][ T6754] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 135.362803][ T6754] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.373842][ T6754] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.375169][ T6754] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.723: inode #13: comm syz.2.723: iget: illegal inode # [ 135.387446][ T6754] EXT4-fs (loop2): Remounting filesystem read-only [ 135.475567][ T6754] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.723: couldn't read orphan inode 13 (err -117) [ 135.478226][ T6754] EXT4-fs (loop2): Remounting filesystem read-only [ 135.480437][ T6754] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,bsdgroups,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 136.670678][ T6770] netlink: 'syz.2.723': attribute type 32 has an invalid length. [ 136.716680][ T4357] tipc: Node number set to 11578026 [ 136.852834][ T1540] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.657841][ T1540] usb 1-1: Using ep0 maxpacket: 8 [ 137.795289][ T1540] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.855218][ T1540] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 137.856455][ T1540] usb 1-1: can't read configurations, error -71 [ 138.060505][ T6800] loop5: detected capacity change from 0 to 128 [ 138.063677][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready [ 138.192850][ T6800] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.173849][ T6800] EXT4-fs (loop5): shut down requested (1) [ 139.803647][ T6800] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 139.813782][ T6800] fscrypt (loop5, inode 13): Error -5 getting encryption context [ 139.825645][ T6800] EXT4-fs warning (device loop5): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 139.866571][ T6800] fscrypt (loop5, inode 13): Error -5 getting encryption context [ 139.868015][ T6800] EXT4-fs warning (device loop5): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 141.498569][ T6850] loop2: detected capacity change from 0 to 4096 [ 142.445144][ T6850] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 143.706528][ T6889] loop4: detected capacity change from 0 to 8 [ 144.360182][ T6898] netlink: 'syz.1.760': attribute type 3 has an invalid length. [ 144.647071][ T6907] loop1: detected capacity change from 0 to 512 [ 144.653762][ T6909] loop0: detected capacity change from 0 to 128 [ 144.874150][ T6909] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.308944][ T26] audit: type=1400 audit(2722.937:15): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=6911 comm="syz.5.765" [ 145.643987][ T6907] EXT4-fs (loop1): 1 orphan inode deleted [ 145.654879][ T6907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.699863][ T6909] EXT4-fs (loop0): shut down requested (1) [ 145.720666][ T6909] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 145.724511][ T6922] loop5: detected capacity change from 0 to 512 [ 145.728708][ T6925] MPTCP: addr_signal error, add_addr=1, echo=0 [ 145.744666][ T6909] fscrypt (loop0, inode 13): Error -5 getting encryption context [ 145.748564][ T6909] EXT4-fs warning (device loop0): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 145.750768][ T6909] fscrypt (loop0, inode 13): Error -5 getting encryption context [ 145.752030][ T6909] EXT4-fs warning (device loop0): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 145.803100][ T6922] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.881047][ T26] audit: type=1400 audit(2723.867:16): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=6923 comm="syz.2.777" [ 146.168692][ T6935] batman_adv: batadv0: Adding interface: dummy0 [ 146.169764][ T6935] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.176390][ T6939] netlink: 'syz.4.772': attribute type 3 has an invalid length. [ 146.181678][ T6935] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 146.221981][ T6944] loop0: detected capacity change from 0 to 8 [ 146.227521][ T6945] netlink: 56 bytes leftover after parsing attributes in process `syz.4.775'. [ 146.229015][ T6945] netlink: 56 bytes leftover after parsing attributes in process `syz.4.775'. [ 146.248403][ T6944] SQUASHFS error: zlib decompression failed, data probably corrupt [ 146.250381][ T6944] SQUASHFS error: Failed to read block 0x9b: -5 [ 146.251468][ T6944] SQUASHFS error: Unable to read metadata cache entry [99] [ 146.253714][ T6944] SQUASHFS error: Unable to read inode 0x127 [ 146.263935][ T6944] xt_TCPMSS: Only works on TCP SYN packets [ 146.419112][ T6951] batman_adv: batadv0: Adding interface: dummy0 [ 146.420261][ T6951] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.426127][ T6951] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 147.860618][ T6971] loop2: detected capacity change from 0 to 1024 [ 147.876244][ T6976] loop1: detected capacity change from 0 to 512 [ 147.879198][ T6973] MPTCP: addr_signal error, add_addr=1, echo=0 [ 147.892044][ T6977] netlink: 'syz.4.785': attribute type 10 has an invalid length. [ 147.903057][ T6971] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 147.906353][ T6971] EXT4-fs (loop2): invalid journal inode [ 147.907363][ T6971] EXT4-fs (loop2): can't get journal size [ 147.912638][ T6971] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.783: blocks 48-48 from inode overlap system zone [ 147.917474][ T6977] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.920261][ T6971] EXT4-fs (loop2): failed to initialize system zone (-117) [ 147.921409][ T6971] EXT4-fs (loop2): mount failed [ 147.927145][ T6976] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.928695][ T6976] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.930544][ T6976] Quota error (device loop1): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 147.932287][ T6976] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.944290][ T6976] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 147.951632][ T6976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.784: bg 0: block 40: padding at end of block bitmap is not set [ 147.962759][ T6976] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 147.973261][ T6976] EXT4-fs (loop1): 1 truncate cleaned up [ 147.975798][ T6985] loop4: detected capacity change from 0 to 512 [ 147.981545][ T6976] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.993695][ T6987] loop5: detected capacity change from 0 to 128 [ 148.004889][ T6971] loop2: detected capacity change from 0 to 512 [ 148.024729][ T6985] EXT4-fs (loop4): Ignoring removed bh option [ 148.038028][ T6987] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.043749][ T6987] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 148.047276][ T6985] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.049709][ T6971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.057530][ T6987] EXT4-fs warning (device loop5): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 148.058499][ T6993] loop1: detected capacity change from 0 to 512 [ 148.062718][ T6985] EXT4-fs (loop4): 1 truncate cleaned up [ 148.063715][ T6985] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 148.070236][ T6971] EXT4-fs (loop2): 1 truncate cleaned up [ 148.071203][ T6971] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 148.113483][ T6993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.145536][ T6993] EXT4-fs (loop1): 1 truncate cleaned up [ 148.146579][ T6993] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.701227][ T7005] netlink: 'syz.2.796': attribute type 3 has an invalid length. [ 148.705057][ T3625] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 148.706686][ T3625] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.723478][ T7007] loop2: detected capacity change from 0 to 16 [ 148.859385][ T26] audit: type=1400 audit(2726.798:17): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=7001 comm="syz.0.793" [ 149.484377][ T7008] fido_id[7008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.507226][ T7007] erofs: (device loop2): mounted with root inode @ nid 36. [ 149.942557][ T7023] autofs4:pid:7023:autofs_fill_super: called with bogus options [ 151.811484][ T7031] netlink: 'syz.5.804': attribute type 10 has an invalid length. [ 151.888129][ T7045] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 151.915417][ T3625] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 151.916952][ T3625] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.948010][ T7031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.951167][ T7048] fido_id[7048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.313034][ T7060] loop0: detected capacity change from 0 to 512 [ 153.204860][ T7060] EXT4-fs (loop0): Ignoring removed bh option [ 153.254180][ T7060] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 153.295542][ T7060] EXT4-fs (loop0): 1 truncate cleaned up [ 153.296540][ T7060] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 153.957810][ T26] audit: type=1400 audit(2731.418:18): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=7067 comm="syz.4.810" [ 154.751684][ T7098] netlink: 'syz.2.821': attribute type 3 has an invalid length. [ 154.766400][ T7098] loop2: detected capacity change from 0 to 1024 [ 154.771090][ T7095] loop5: detected capacity change from 0 to 4096 [ 155.850761][ T7098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.856011][ T7095] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 155.865365][ T4357] kernel write not supported for file /uhid (pid: 4357 comm: kworker/1:7) [ 155.881534][ T7107] loop1: detected capacity change from 0 to 16 [ 155.924597][ T7107] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.156689][ T7114] autofs4:pid:7114:autofs_fill_super: called with bogus options [ 156.482891][ T7110] netlink: 'syz.2.822': attribute type 10 has an invalid length. [ 156.491388][ T7110] device wlan1 entered promiscuous mode [ 156.493818][ T7110] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.230600][ T7136] input: syz0 as /devices/virtual/input/input4 [ 157.529242][ T7145] loop2: detected capacity change from 0 to 764 [ 157.534723][ T7147] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 157.541888][ T7147] loop0: detected capacity change from 0 to 1024 [ 157.574884][ T7147] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.579471][ T4357] kernel write not supported for file /uhid (pid: 4357 comm: kworker/1:7) [ 158.143395][ T7169] binder: 7168:7169 ioctl 4018620d 0 returned -22 [ 158.330105][ T7172] binder: 7168:7172 got transaction to invalid handle, 1 [ 158.331423][ T7172] binder: 7168:7172 transaction failed 29201/-22, size 0-0 line 2917 [ 158.722903][ T4124] Bluetooth: hci1: command 0x0406 tx timeout [ 158.724018][ T4124] Bluetooth: hci3: command 0x0406 tx timeout [ 158.725076][ T4124] Bluetooth: hci2: command 0x0406 tx timeout [ 159.351521][ T4103] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.395474][ T7188] netlink: 'syz.5.848': attribute type 3 has an invalid length. [ 159.415663][ T7188] loop5: detected capacity change from 0 to 1024 [ 159.483690][ T4357] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.040332][ T7188] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.048158][ T4124] kernel write not supported for file /uhid (pid: 4124 comm: kworker/1:5) [ 160.174740][ T7207] loop5: detected capacity change from 0 to 16 [ 160.177864][ T7207] erofs: (device loop5): mounted with root inode @ nid 36. [ 160.253232][ T7209] loop4: detected capacity change from 0 to 8 [ 160.264243][ T4357] usb 1-1: Using ep0 maxpacket: 16 [ 160.313907][ T7209] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 160.411931][ T7210] autofs4:pid:7210:autofs_fill_super: called with bogus options [ 160.894736][ T7209] cramfs: Error -5 while decompressing! [ 160.895728][ T7209] cramfs: 00000000d6ef7c60(26)->0000000059540644(4096) [ 160.897322][ T7209] cramfs: Error -3 while decompressing! [ 160.898184][ T7209] cramfs: 0000000053bc5b46(26)->0000000091f92739(4096) [ 160.899400][ T7209] cramfs: Error -3 while decompressing! [ 160.900321][ T7209] cramfs: 000000007a00d506(16)->0000000031fd00ab(4096) [ 160.901554][ T7209] cramfs: Error -5 while decompressing! [ 160.902451][ T7209] cramfs: 00000000d6ef7c60(26)->0000000059540644(4096) [ 161.144953][ T4161] udevd[4161]: incorrect cramfs checksum on /dev/loop4 [ 161.161268][ T4161] udevd[4161]: incorrect cramfs checksum on /dev/loop4 [ 161.215880][ T7220] binder: 7219:7220 ioctl 4018620d 0 returned -22 [ 161.262843][ T4357] usb 1-1: unable to read config index 0 descriptor/all [ 161.264047][ T4357] usb 1-1: can't read configurations, error -71 [ 161.452414][ T7224] binder: 7219:7224 got transaction to invalid handle, 1 [ 161.472353][ T7224] binder: 7219:7224 transaction failed 29201/-22, size 0-0 line 2917 [ 162.083360][ T4103] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.190403][ T7232] loop1: detected capacity change from 0 to 1024 [ 162.328600][ T7232] EXT4-fs (loop1): inline encryption not supported [ 162.329688][ T7232] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.357197][ T7232] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 162.619257][ T7254] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.861: Allocating blocks 385-513 which overlap fs metadata [ 162.631762][ T7254] EXT4-fs (loop1): pa 0000000021ee88a9: logic 16, phys. 129, len 24 [ 162.633207][ T7254] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 162.658263][ T7258] input: syz0 as /devices/virtual/input/input5 [ 162.730589][ T7268] binder: 7266:7268 ioctl 4018620d 0 returned -22 [ 162.964110][ T7271] binder: 7266:7271 got transaction to invalid handle, 1 [ 162.965345][ T7271] binder: 7266:7271 transaction failed 29201/-22, size 0-0 line 2917 [ 163.599538][ T4357] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.196491][ T7281] loop0: detected capacity change from 0 to 1024 [ 164.304214][ T4103] Bluetooth: hci4: command 0x0406 tx timeout [ 164.396002][ T7279] sched: RT throttling activated [ 164.648287][ T7284] tipc: New replicast peer: 0.0.0.0 [ 164.650103][ T7284] tipc: Enabled bearer , priority 10 [ 165.253895][ T7304] loop2: detected capacity change from 0 to 8 [ 165.443706][ T7304] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 165.474303][ T7304] cramfs: Error -5 while decompressing! [ 165.475311][ T7304] cramfs: 000000004773d47b(26)->00000000c207ab70(4096) [ 165.476675][ T7304] cramfs: Error -3 while decompressing! [ 165.477669][ T7304] cramfs: 000000009d53271d(26)->0000000024412024(4096) [ 165.478883][ T7304] cramfs: Error -3 while decompressing! [ 165.479805][ T7304] cramfs: 00000000e40b3f46(16)->0000000027929f66(4096) [ 165.481290][ T7304] cramfs: Error -5 while decompressing! [ 165.482199][ T7304] cramfs: 000000004773d47b(26)->00000000c207ab70(4096) [ 165.733492][ T4162] udevd[4162]: incorrect cramfs checksum on /dev/loop2 [ 165.748975][ T7310] loop4: detected capacity change from 0 to 1024 [ 165.763424][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): rose1: link becomes ready [ 165.814806][ T7310] EXT4-fs (loop4): inline encryption not supported [ 165.815917][ T7310] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.849118][ T7310] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 165.888914][ T7310] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.884: Allocating blocks 385-513 which overlap fs metadata [ 165.896755][ T7310] EXT4-fs (loop4): pa 0000000050733c6f: logic 16, phys. 129, len 24 [ 165.898035][ T7310] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 166.017193][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.888'. [ 166.018699][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 166.064972][ T7318] device ipip0 entered promiscuous mode [ 166.448454][ T7332] netlink: 96 bytes leftover after parsing attributes in process `syz.1.890'. [ 166.450155][ T7332] netlink: 80 bytes leftover after parsing attributes in process `syz.1.890'. [ 166.454819][ T7332] macvtap0: refused to change device tx_queue_len [ 166.458626][ T7332] loop1: detected capacity change from 0 to 256 [ 166.513264][ T7329] binder: 7327:7329 ioctl 4018620d 0 returned -22 [ 166.649484][ T7338] binder: 7327:7338 got transaction to invalid handle, 1 [ 166.650761][ T7338] binder: 7327:7338 transaction failed 29201/-22, size 0-0 line 2917 [ 166.808598][ T7339] loop5: detected capacity change from 0 to 1024 [ 167.525394][ T4357] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.653445][ T7332] attempt to access beyond end of device [ 167.653445][ T7332] loop1: rw=2049, want=260, limit=256 [ 168.355232][ T7355] loop1: detected capacity change from 0 to 8 [ 168.356767][ T7355] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 168.403233][ T7355] cramfs: Error -5 while decompressing! [ 168.404196][ T7355] cramfs: 00000000d6ef7c60(26)->0000000031b9760c(4096) [ 168.405573][ T7355] cramfs: Error -3 while decompressing! [ 168.406466][ T7355] cramfs: 0000000053bc5b46(26)->0000000050758e90(4096) [ 168.407603][ T7355] cramfs: Error -3 while decompressing! [ 168.408558][ T7355] cramfs: 000000007a00d506(16)->0000000034bfb942(4096) [ 168.410192][ T7355] cramfs: Error -5 while decompressing! [ 168.411134][ T7355] cramfs: 00000000d6ef7c60(26)->0000000031b9760c(4096) [ 169.662287][ T4161] udevd[4161]: incorrect cramfs checksum on /dev/loop1 [ 169.673396][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 169.676738][ T7364] device macvlan2 entered promiscuous mode [ 169.678352][ T7364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.761762][ T7405] loop2: detected capacity change from 0 to 1024 [ 170.792970][ T7406] netlink: 'syz.1.920': attribute type 9 has an invalid length. [ 171.701634][ T7418] loop4: detected capacity change from 0 to 128 [ 172.142638][ T7418] qnx6: invalid mount options. [ 173.836535][ T7443] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.692326][ T7489] loop1: detected capacity change from 0 to 2048 [ 176.133215][ T7489] hpfs: hpfs_map_sector(): read error [ 177.201521][ T4090] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 177.203024][ T4090] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.242482][ T7523] loop1: detected capacity change from 0 to 1024 [ 177.893939][ T7523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.906060][ T4103] kernel write not supported for file /uhid (pid: 4103 comm: kworker/0:6) [ 178.840413][ T7565] loop2: detected capacity change from 0 to 512 [ 179.406655][ T7565] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.954: bg 0: block 248: padding at end of block bitmap is not set [ 179.410710][ T7565] Quota error (device loop2): write_blk: dquota write failed [ 179.412034][ T7565] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 179.413705][ T7565] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.954: Failed to acquire dquot type 1 [ 179.422526][ T7565] EXT4-fs (loop2): 1 truncate cleaned up [ 179.423369][ T7565] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.452970][ T7565] tipc: Enabled bearer , priority 10 [ 179.472011][ T9] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6) [ 179.473495][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:0: Failed to release dquot type 1 [ 180.014336][ T7587] device syzkaller0 entered promiscuous mode [ 180.470782][ T7598] netlink: 'syz.4.962': attribute type 9 has an invalid length. [ 182.352563][ T7633] device syzkaller0 entered promiscuous mode [ 182.361571][ T7631] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 182.844710][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 183.445304][ T7657] device syzkaller0 left promiscuous mode [ 183.466544][ T7657] tipc: Enabled bearer , priority 0 [ 184.579670][ T7682] udc-core: couldn't find an available UDC or it's busy [ 184.581921][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 184.584608][ T7679] loop4: detected capacity change from 0 to 1024 [ 184.585779][ T7682] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 184.601388][ T7680] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 184.616328][ T25] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.641026][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 184.690862][ T7679] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.738385][ T13] kernel write not supported for file /uhid (pid: 13 comm: kworker/0:1) [ 184.974518][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.995'. [ 185.334821][ T7704] tipc: Enabled bearer , priority 0 [ 185.841274][ T7714] loop0: detected capacity change from 0 to 256 [ 185.885852][ T7716] loop1: detected capacity change from 0 to 128 [ 185.924174][ T13] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 185.925843][ T13] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.932403][ T7718] loop5: detected capacity change from 0 to 1024 [ 186.004687][ T7718] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.021425][ T4103] kernel write not supported for file /uhid (pid: 4103 comm: kworker/0:6) [ 186.031493][ T7716] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,bsddf,errors=remount-ro,. Quota mode: none. [ 186.057431][ T7723] binder: 7722:7723 tried to acquire reference to desc 0, got 1 instead [ 186.065276][ T7725] fido_id[7725]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.138520][ T7730] binder: 7722:7730 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 186.140707][ T7730] binder: 7730 RLIMIT_NICE not set [ 186.151398][ T7730] binder: 7730 RLIMIT_NICE not set [ 186.153651][ T7730] binder: 7730 RLIMIT_NICE not set [ 186.225538][ T7736] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 186.730730][ T7744] tipc: Started in network mode [ 186.731665][ T7744] tipc: Node identity 080211000001, cluster identity 4711 [ 186.733120][ T7744] tipc: Enabled bearer , priority 0 [ 187.658268][ T13] binder: undelivered TRANSACTION_COMPLETE [ 187.959490][ T25] tipc: Node number set to 134418688 [ 188.059772][ T13] binder: undelivered TRANSACTION_COMPLETE [ 188.060789][ T13] binder: undelivered transaction 107, process died. [ 188.106771][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 188.109327][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 188.741155][ T7777] device syzkaller0 left promiscuous mode [ 188.747368][ T7777] tipc: Enabled bearer , priority 0 [ 188.766738][ T7784] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 188.769986][ T4103] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 188.771719][ T4103] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.778404][ T7784] loop2: detected capacity change from 0 to 1024 [ 189.252291][ T7791] ptrace attach of "./syz-executor exec"[4044] was attempted by ""[7791] [ 189.720211][ T7784] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.728200][ T4103] kernel write not supported for file /uhid (pid: 4103 comm: kworker/0:6) [ 190.098651][ T7807] fido_id[7807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 190.161066][ T7810] loop0: detected capacity change from 0 to 512 [ 190.485317][ T7810] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 191.020357][ T7833] loop1: detected capacity change from 0 to 128 [ 191.117352][ T7837] loop4: detected capacity change from 0 to 4096 [ 191.130449][ T7833] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.493297][ T7837] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 192.667217][ T7866] loop4: detected capacity change from 0 to 8 [ 193.174742][ T7866] SQUASHFS error: zlib decompression failed, data probably corrupt [ 193.178415][ T7866] SQUASHFS error: Failed to read block 0x9b: -5 [ 193.180208][ T7866] SQUASHFS error: Unable to read metadata cache entry [99] [ 193.182537][ T7866] SQUASHFS error: Unable to read inode 0x127 [ 193.252110][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.253172][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.275324][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 193.283391][ T7877] net_ratelimit: 10 callbacks suppressed [ 193.283399][ T7877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.333258][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 193.343156][ T7882] loop0: detected capacity change from 0 to 1024 [ 193.413968][ T7882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.423783][ T7882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1058: bg 0: block 260: invalid block bitmap [ 193.440447][ T7882] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.470563][ T7882] smc: net device bond0 erased user defined pnetid SYZ0 [ 195.332314][ T7943] set match dimension is over the limit! [ 196.499649][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1074'. [ 196.559071][ T7967] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 196.561528][ T7967] netlink: 'syz.4.1074': attribute type 2 has an invalid length. [ 197.627670][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 197.749296][ T8022] loop1: detected capacity change from 0 to 1764 [ 198.098329][ T8022] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 198.753947][ T8052] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 198.755266][ T8052] Modules linked in: [ 198.755885][ T8052] CPU: 1 PID: 8052 Comm: syz.4.1092 Not tainted 5.15.189-syzkaller #0 [ 198.757222][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 198.758700][ T8052] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 198.759842][ T8052] pc : bpf_obj_get_info_by_fd+0x16d0/0x30c0 [ 198.760800][ T8052] lr : bpf_obj_get_info_by_fd+0x16b4/0x30c0 [ 198.761746][ T8052] sp : ffff800020c57900 [ 198.762430][ T8052] x29: ffff800020c57bc0 x28: ffff70000418af34 x27: ffff0000c8a26780 [ 198.763732][ T8052] x26: 0000000000000000 x25: dfff800000000000 x24: ffff0000c8a26781 [ 198.765027][ T8052] x23: 00000000fffffff2 x22: 0000000000000000 x21: 0000000000000001 [ 198.766292][ T8052] x20: 0000000000000400 x19: 0000000000000004 x18: 0000000000000000 [ 198.767616][ T8052] x17: 0000000000000002 x16: ffff800008524918 x15: ffff800020c579c0 [ 198.768935][ T8052] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000080000 [ 198.770246][ T8052] x11: 00000000000001ff x10: 0000000000000004 x9 : 0000ffffffffffff [ 198.771507][ T8052] x8 : 0000000000000004 x7 : ffff800008750ed4 x6 : 0000000000000000 [ 198.772717][ T8052] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 198.774006][ T8052] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 198.775293][ T8052] Call trace: [ 198.775805][ T8052] bpf_obj_get_info_by_fd+0x16d0/0x30c0 [ 198.776660][ T8052] __sys_bpf+0x39c/0x5f0 [ 198.777292][ T8052] __arm64_sys_bpf+0x80/0x98 [ 198.778045][ T8052] invoke_syscall+0x98/0x2b8 [ 198.778823][ T8052] el0_svc_common+0x138/0x258 [ 198.779545][ T8052] do_el0_svc+0x58/0x14c [ 198.780199][ T8052] el0_svc+0x78/0x1e0 [ 198.780844][ T8052] el0t_64_sync_handler+0xcc/0xe4 [ 198.781646][ T8052] el0t_64_sync+0x1a0/0x1a4 [ 198.782331][ T8052] Code: 9a9f026a d503229f 2a1f03f7 b8000956 (2a1f03e0) [ 198.783530][ T8052] ---[ end trace 100642f94ea7b6fb ]--- [ 199.027884][ T8052] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 199.028910][ T8052] SMP: stopping secondary CPUs [ 199.029683][ T8052] Kernel Offset: disabled [ 199.030408][ T8052] CPU features: 0x8,000003c1,7d33ffd9 [ 199.031261][ T8052] Memory Limit: none [ 199.269845][ T8052] Rebooting in 86400 seconds..