last executing test programs: 55.326400908s ago: executing program 2 (id=96): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\xea\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd\x00'/407, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800006b1132000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/60}, 0x20) 54.283580583s ago: executing program 2 (id=100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r4, 0x29, 0xff, 0x3, 0x0, 0x12, @empty, @mcast2, 0x80, 0x8000, 0x8001}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000010c0)='ns/mnt\x00') lseek(r5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 53.508746281s ago: executing program 2 (id=105): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fdatasync(r0) 53.089429612s ago: executing program 2 (id=107): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 50.90393528s ago: executing program 2 (id=111): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081a, &(0x7f0000000080)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 50.754097708s ago: executing program 2 (id=112): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.257217451s ago: executing program 32 (id=112): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.133894311s ago: executing program 3 (id=210): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000022c0)=""/4085, 0xff5}, {0x0}], 0x2}}], 0x1, 0x10000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x8, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 7.13267989s ago: executing program 3 (id=224): syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 7.132322867s ago: executing program 1 (id=225): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000300)={r7}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000002c0)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={r9}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x100000000) 7.124913995s ago: executing program 4 (id=226): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x3701, 0x0, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) 6.957598595s ago: executing program 1 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 6.881065226s ago: executing program 0 (id=228): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) 6.222661736s ago: executing program 3 (id=229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x27fdfefff}, 0xc) connect$inet6(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 6.149620693s ago: executing program 4 (id=230): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 5.939773872s ago: executing program 0 (id=231): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x1000, @mcast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8}]}, &(0x7f0000000440)=0x10) add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="632343ca5cab980b929bf328631c6022b9a201ec24f2d93d34b6d0d29c2ef12b84951b4803a93b2cd351d6c7a823cb847b99a7c18e930c79fddeca08edcca3a9a338be2d0a12cc33969c5e3d12ca78a7ebe05908a38621a0", 0x58, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) shutdown(r0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x1383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) 5.017825151s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 4.927825003s ago: executing program 3 (id=233): openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0) 4.145496503s ago: executing program 1 (id=234): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.086452515s ago: executing program 4 (id=235): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) 4.08612549s ago: executing program 3 (id=236): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x4, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) 3.01746605s ago: executing program 4 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 2.949359283s ago: executing program 0 (id=238): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 2.685072591s ago: executing program 1 (id=239): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.61412972s ago: executing program 1 (id=240): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/35) 2.361494411s ago: executing program 3 (id=241): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./bus/file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./bus\x00', 0x120c018, &(0x7f0000000180)=ANY=[@ANYBLOB='check=relaxed,map=normal,nojoliet,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d6f64653d3078303030303030303030303030313030302c73657373696f6e3d30783030303030303030303030303030305c5cd94f703d6e6f726d616c2c00"], 0xff, 0x534, &(0x7f0000001000)="$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") socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.03803567s ago: executing program 0 (id=242): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 876.714253ms ago: executing program 1 (id=243): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 876.355187ms ago: executing program 4 (id=244): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f0b9dee8300ebffff1f"], 0x1c}}, 0x0) 45.452842ms ago: executing program 0 (id=245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 0s ago: executing program 0 (id=246): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380), 0x10, 0x4f0, &(0x7f0000000700)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 33.384168][ T6413] cgroup: Unknown subsys name 'net' [ 33.662848][ T6413] cgroup: Unknown subsys name 'cpuset' [ 33.666637][ T6413] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.024845][ T6413] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.356510][ T6425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.358534][ T6425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.360787][ T6425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.363181][ T6425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.365216][ T6425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.366619][ T6425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.369283][ T6425] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.370893][ T6425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.373966][ T6428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.375554][ T6428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.379665][ T6433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.381554][ T6433] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.388234][ T6425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.399599][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.400578][ T6434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.401583][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.404927][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.405169][ T6434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.406651][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.409408][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.411928][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.413419][ T6428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.416476][ T6428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.418981][ T6428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.422366][ T6428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.425173][ T6428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.427335][ T6428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.430562][ T5992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.439618][ T6428] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.441566][ T6428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.627060][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 35.668319][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 35.780952][ T6431] chnl_net:caif_netlink_parms(): no params data found [ 35.784381][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.785935][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.787487][ T6423] bridge_slave_0: entered allmulticast mode [ 35.789336][ T6423] bridge_slave_0: entered promiscuous mode [ 35.792400][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 35.795937][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.797426][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.799007][ T6423] bridge_slave_1: entered allmulticast mode [ 35.801853][ T6423] bridge_slave_1: entered promiscuous mode [ 35.808273][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.809790][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.811387][ T6424] bridge_slave_0: entered allmulticast mode [ 35.813308][ T6424] bridge_slave_0: entered promiscuous mode [ 35.833231][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.834747][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.836264][ T6424] bridge_slave_1: entered allmulticast mode [ 35.838018][ T6424] bridge_slave_1: entered promiscuous mode [ 35.873312][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.877454][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.881886][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 35.906579][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.909686][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.941543][ T6424] team0: Port device team_slave_0 added [ 35.953135][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.954645][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.956310][ T6431] bridge_slave_0: entered allmulticast mode [ 35.958100][ T6431] bridge_slave_0: entered promiscuous mode [ 35.961654][ T6423] team0: Port device team_slave_0 added [ 35.969124][ T6424] team0: Port device team_slave_1 added [ 35.975694][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.977253][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.978719][ T6431] bridge_slave_1: entered allmulticast mode [ 35.980528][ T6431] bridge_slave_1: entered promiscuous mode [ 35.988002][ T6423] team0: Port device team_slave_1 added [ 36.006656][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.008239][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.009743][ T6430] bridge_slave_0: entered allmulticast mode [ 36.011553][ T6430] bridge_slave_0: entered promiscuous mode [ 36.018856][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.022196][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.042190][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.043688][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.048780][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.052994][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.054401][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.059450][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.063356][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.064979][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.066540][ T6430] bridge_slave_1: entered allmulticast mode [ 36.068254][ T6430] bridge_slave_1: entered promiscuous mode [ 36.086906][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.088467][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.089961][ T6435] bridge_slave_0: entered allmulticast mode [ 36.092294][ T6435] bridge_slave_0: entered promiscuous mode [ 36.106328][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.107868][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.117618][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.124735][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.126209][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.127750][ T6435] bridge_slave_1: entered allmulticast mode [ 36.129620][ T6435] bridge_slave_1: entered promiscuous mode [ 36.143625][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.147159][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.149498][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.150962][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.156114][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.160167][ T6431] team0: Port device team_slave_0 added [ 36.163895][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.166596][ T6431] team0: Port device team_slave_1 added [ 36.169199][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.212072][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.213500][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.218459][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.222147][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.223653][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.228798][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.237411][ T6430] team0: Port device team_slave_0 added [ 36.262752][ T6423] hsr_slave_0: entered promiscuous mode [ 36.331307][ T6423] hsr_slave_1: entered promiscuous mode [ 36.412292][ T6424] hsr_slave_0: entered promiscuous mode [ 36.451098][ T6424] hsr_slave_1: entered promiscuous mode [ 36.490762][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.492566][ T6424] Cannot create hsr debugfs directory [ 36.495367][ T6435] team0: Port device team_slave_0 added [ 36.500110][ T6435] team0: Port device team_slave_1 added [ 36.503071][ T6430] team0: Port device team_slave_1 added [ 36.540198][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.541880][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.546983][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.560229][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.562374][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.567549][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.574786][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.576266][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.581745][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.622948][ T6431] hsr_slave_0: entered promiscuous mode [ 36.661021][ T6431] hsr_slave_1: entered promiscuous mode [ 36.710804][ T6431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.712447][ T6431] Cannot create hsr debugfs directory [ 36.713987][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.715308][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.720612][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.832319][ T6430] hsr_slave_0: entered promiscuous mode [ 36.891037][ T6430] hsr_slave_1: entered promiscuous mode [ 36.950808][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.952443][ T6430] Cannot create hsr debugfs directory [ 37.012907][ T6435] hsr_slave_0: entered promiscuous mode [ 37.061085][ T6435] hsr_slave_1: entered promiscuous mode [ 37.110978][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.112585][ T6435] Cannot create hsr debugfs directory [ 37.249818][ T6423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.259483][ T6423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.270287][ T6423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.275067][ T6423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.291533][ T6424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.295474][ T6424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.300305][ T6424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.304432][ T6424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.345521][ T6430] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.355173][ T6430] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.358309][ T6430] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.367223][ T6435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.371223][ T6435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.378964][ T6430] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.384595][ T6435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.395210][ T6435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.419264][ T6431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.423615][ T6431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.429626][ T6431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.440076][ T6431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.451306][ T6434] Bluetooth: hci4: command tx timeout [ 37.451362][ T6425] Bluetooth: hci0: command tx timeout [ 37.454089][ T5992] Bluetooth: hci1: command tx timeout [ 37.455411][ T6428] Bluetooth: hci2: command tx timeout [ 37.503040][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.516789][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.530786][ T6428] Bluetooth: hci3: command tx timeout [ 37.581672][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.591875][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.599601][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.603146][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.605828][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.607421][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.610495][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.612237][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.628424][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.632854][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.636204][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.643385][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.644968][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.665703][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.667239][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.669905][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.671459][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.673999][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.675514][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.677866][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.679385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.692312][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.707172][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.708946][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.739434][ T2159] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.741066][ T2159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.744947][ T2159] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.746448][ T2159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.786061][ T6430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.788232][ T6430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.955612][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.977544][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.025222][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.035484][ T6423] veth0_vlan: entered promiscuous mode [ 38.040305][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.048416][ T6430] veth0_vlan: entered promiscuous mode [ 38.066008][ T6423] veth1_vlan: entered promiscuous mode [ 38.069508][ T6430] veth1_vlan: entered promiscuous mode [ 38.094637][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.108820][ T6423] veth0_macvtap: entered promiscuous mode [ 38.126958][ T6424] veth0_vlan: entered promiscuous mode [ 38.146452][ T6431] veth0_vlan: entered promiscuous mode [ 38.152476][ T6431] veth1_vlan: entered promiscuous mode [ 38.155318][ T6424] veth1_vlan: entered promiscuous mode [ 38.177725][ T6430] veth0_macvtap: entered promiscuous mode [ 38.181806][ T6423] veth1_macvtap: entered promiscuous mode [ 38.190208][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.206872][ T6430] veth1_macvtap: entered promiscuous mode [ 38.216962][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.220402][ T6424] veth0_macvtap: entered promiscuous mode [ 38.225143][ T6424] veth1_macvtap: entered promiscuous mode [ 38.239478][ T6423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.246997][ T6423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.248789][ T6423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.250578][ T6423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.271824][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.274101][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.277095][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.279445][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.282678][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.284722][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.286908][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.289803][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.293523][ T6431] veth0_macvtap: entered promiscuous mode [ 38.302353][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.304614][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.307645][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.311599][ T6431] veth1_macvtap: entered promiscuous mode [ 38.321784][ T6424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.323761][ T6424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.325558][ T6424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.327327][ T6424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.337965][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.340960][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.343212][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.345523][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.348473][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.360220][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.362821][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.364899][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.367042][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.369064][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.375533][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.378437][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.382167][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.384554][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.386687][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.388983][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.395669][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.397968][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.401914][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.431791][ T6431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.433613][ T6431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.444434][ T6431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.446223][ T6431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.450110][ T6430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.452187][ T6430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.454105][ T6430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.455868][ T6430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.496955][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.499033][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.506397][ T6435] veth0_vlan: entered promiscuous mode [ 38.542262][ T6435] veth1_vlan: entered promiscuous mode [ 38.559524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.561564][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.616742][ T6435] veth0_macvtap: entered promiscuous mode [ 38.619883][ T6435] veth1_macvtap: entered promiscuous mode [ 38.628420][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.630403][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.633629][ T6423] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.633815][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.640431][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.665793][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.667924][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.669873][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.696362][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.698459][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.701381][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.703327][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.705401][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.708609][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.718666][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.730248][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.736649][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.739714][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.739792][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.743852][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.746690][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.748828][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.751363][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.753334][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.755501][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.758235][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.760607][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.764515][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.769401][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.782863][ T6435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.784881][ T6435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.786598][ T6435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.788455][ T6435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.795714][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.849501][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.851686][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.882907][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.884650][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.900777][ T6428] Bluetooth: hci2: command tx timeout [ 39.901941][ T6428] Bluetooth: hci1: command tx timeout [ 39.903024][ T6428] Bluetooth: hci0: command tx timeout [ 39.904121][ T6428] Bluetooth: hci4: command tx timeout [ 39.905211][ T6428] Bluetooth: hci3: command tx timeout [ 39.961657][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.963363][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.376841][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.378455][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.437821][ T6515] loop1: detected capacity change from 0 to 1024 [ 40.481400][ T6515] EXT4-fs: Ignoring removed oldalloc option [ 40.505956][ T6515] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.536098][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.587428][ T6522] loop2: detected capacity change from 0 to 512 [ 40.810997][ T6522] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 40.813379][ T6522] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 40.815414][ T6522] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.8: Corrupt directory, running e2fsck is recommended [ 40.831210][ T6522] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 40.851549][ T6522] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8: corrupted in-inode xattr: invalid ea_ino [ 41.229366][ T6535] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.536579][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.559301][ T6522] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.8: couldn't read orphan inode 15 (err -117) [ 41.582941][ T6522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.679336][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.903324][ T30] audit: type=1107 audit(41.840:2): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 41.957931][ T5992] Bluetooth: hci3: command tx timeout [ 41.960060][ T5992] Bluetooth: hci4: command tx timeout [ 41.962346][ T6428] Bluetooth: hci0: command tx timeout [ 41.963759][ T6428] Bluetooth: hci1: command tx timeout [ 41.965429][ T6428] Bluetooth: hci2: command tx timeout [ 42.056331][ T6519] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 43.577595][ T6551] loop3: detected capacity change from 0 to 64 [ 44.480800][ T6425] Bluetooth: hci3: command tx timeout [ 44.482150][ T6425] Bluetooth: hci4: command tx timeout [ 44.483340][ T6425] Bluetooth: hci2: command tx timeout [ 44.484439][ T6425] Bluetooth: hci1: command tx timeout [ 44.485557][ T6425] Bluetooth: hci0: command tx timeout [ 45.010013][ T6556] loop4: detected capacity change from 0 to 64 [ 45.255283][ T6423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.025621][ T6556] minix_free_block (loop4:2): bit already cleared [ 46.054344][ T6556] minix_free_block (loop4:3): bit already cleared [ 46.055649][ T6556] minix_free_block (loop4:4): bit already cleared [ 46.757056][ T6559] loop1: detected capacity change from 0 to 32768 [ 46.799692][ T6556] minix_free_block (loop4:1): bit already cleared [ 46.829917][ T6556] minix_free_block (loop4:4): bit already cleared [ 46.833915][ T6556] minix_free_block (loop4:3): bit already cleared [ 46.835298][ T6556] minix_free_block (loop4:2): bit already cleared [ 46.857236][ T6556] minix_free_block (loop4:1): bit already cleared [ 48.888597][ T6586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.442226][ T6605] loop2: detected capacity change from 0 to 1024 [ 50.535254][ T6609] xt_SECMARK: invalid mode: 0 [ 51.169297][ T6605] hfsplus: request for non-existent node 3 in B*Tree [ 51.171051][ T6605] hfsplus: request for non-existent node 3 in B*Tree [ 51.172944][ T6605] hfsplus: catalog searching failed [ 52.285474][ T6620] loop3: detected capacity change from 0 to 4096 [ 52.287475][ T6620] ntfs3: Unknown parameter '0xffffffffffffffffÿÿÿÿ' [ 52.346967][ T6629] loop1: detected capacity change from 0 to 1024 [ 52.348669][ T6629] ======================================================= [ 52.348669][ T6629] WARNING: The mand mount option has been deprecated and [ 52.348669][ T6629] and is ignored by this kernel. Remove the mand [ 52.348669][ T6629] option from the mount to silence this warning. [ 52.348669][ T6629] ======================================================= [ 52.359088][ T6629] EXT4-fs: Ignoring removed bh option [ 52.390715][ T6629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.135381][ T6620] loop3: detected capacity change from 0 to 32768 [ 54.158243][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.266362][ T6651] loop1: detected capacity change from 0 to 1024 [ 54.268256][ T6651] hfsplus: unable to parse mount options [ 54.273111][ T6620] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 55.210990][ T6660] TCP: TCP_TX_DELAY enabled [ 55.644949][ T6663] loop1: detected capacity change from 0 to 8 [ 55.671082][ T6663] SQUASHFS error: lzo decompression failed, data probably corrupt [ 55.675316][ T6663] SQUASHFS error: Failed to read block 0x28d: -5 [ 55.676601][ T6663] SQUASHFS error: Unable to read metadata cache entry [28b] [ 55.680570][ T6663] SQUASHFS error: Unable to read inode 0x11f [ 56.449665][ T6430] ocfs2: Unmounting device (7,3) on (node local) [ 56.507989][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.44'. [ 56.509956][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 56.530761][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.44'. [ 56.532756][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.44'. [ 56.553357][ T6672] loop2: detected capacity change from 0 to 4096 [ 56.558930][ T6672] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 57.961900][ T6428] Bluetooth: hci1: unexpected event 0x05 length: 17 > 4 [ 58.117950][ T6689] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 58.198072][ T6699] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.003679][ T6705] loop4: detected capacity change from 0 to 512 [ 59.023490][ T6705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.086940][ T6709] loop3: detected capacity change from 0 to 4096 [ 60.198965][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.719645][ T6435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 60.902150][ T6730] loop1: detected capacity change from 0 to 128 [ 61.086310][ T6730] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 61.088240][ T6730] FAT-fs (loop1): Filesystem has been set read-only [ 61.409267][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.424167][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.526558][ T6715] loop2: detected capacity change from 0 to 32768 [ 61.528358][ T6715] XFS: attr2 mount option is deprecated. [ 61.529500][ T6715] XFS: ikeep mount option is deprecated. [ 61.540521][ T6715] XFS: noikeep mount option is deprecated. [ 61.618675][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.647890][ T6735] binder: BINDER_SET_CONTEXT_MGR already set [ 61.649233][ T6735] binder: 6734:6735 ioctl 4018620d 20004a80 returned -16 [ 61.652452][ T6735] binder: 6734:6735 got transaction to invalid handle, 1 [ 61.654114][ T6735] binder: 6735:6734 cannot find target node [ 61.655316][ T6735] binder: 6734:6735 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3145 [ 61.667875][ T6715] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 62.285625][ T6715] XFS (loop2): Ending clean mount [ 62.291406][ T6735] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.347058][ T6752] netlink: 184 bytes leftover after parsing attributes in process `syz.4.63'. [ 62.347594][ T6715] XFS (loop2): Quotacheck needed: Please wait. [ 62.496330][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.571148][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.581983][ T6245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.594713][ T6715] XFS (loop2): Quotacheck: Done. [ 62.713684][ T6423] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 62.854501][ T6761] loop3: detected capacity change from 0 to 1024 [ 62.856474][ T6761] EXT4-fs: Ignoring removed oldalloc option [ 62.886752][ T6761] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 63.281828][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.216354][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.360038][ T6773] Zero length message leads to an empty skb [ 64.493017][ T2348] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.496356][ T2348] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.084991][ T6783] loop0: detected capacity change from 0 to 512 [ 65.086719][ T6783] EXT4-fs: Ignoring removed bh option [ 65.111530][ T6430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.352288][ T6783] EXT4-fs error (device loop0): __ext4_iget:4952: inode #12: block 2: comm syz.0.72: invalid block [ 65.367257][ T6783] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.72: couldn't read orphan inode 12 (err -117) [ 65.379241][ T6783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.611584][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.777928][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.801861][ T6783] bridge0: port 3(syz_tun) entered blocking state [ 65.803227][ T6783] bridge0: port 3(syz_tun) entered disabled state [ 65.804794][ T6783] syz_tun: entered allmulticast mode [ 65.817660][ T6783] syz_tun: entered promiscuous mode [ 65.841669][ T6783] bridge0: port 3(syz_tun) entered blocking state [ 65.843136][ T6783] bridge0: port 3(syz_tun) entered forwarding state [ 65.867847][ T6793] process 'syz.3.71' launched './file1' with NULL argv: empty string added [ 65.889585][ T6431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.992055][ T6771] loop2: detected capacity change from 0 to 40427 [ 66.021118][ T6771] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 66.072432][ T6771] F2FS-fs (loop2): invalid crc value [ 66.094582][ T6771] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.127634][ T6799] loop4: detected capacity change from 0 to 4096 [ 66.137543][ T6771] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.154347][ T6799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.228847][ T6771] syz.2.66: attempt to access beyond end of device [ 66.228847][ T6771] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 66.237705][ T6771] syz.2.66: attempt to access beyond end of device [ 66.237705][ T6771] loop2: rw=2049, sector=45112, nr_sectors = 112 limit=40427 [ 66.244185][ T6771] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_commit_atomic_write+0x880/0x1030 [ 66.260369][ T6809] loop1: detected capacity change from 0 to 2048 [ 66.276439][ T6423] syz-executor: attempt to access beyond end of device [ 66.276439][ T6423] loop2: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 66.287256][ T6423] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 66.360590][ T6816] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.881601][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.897032][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.019868][ T6435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.243858][ T6826] usb usb8: usbfs: process 6826 (syz.1.78) did not claim interface 0 before use [ 67.745238][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.767206][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.964123][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.410816][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'. [ 68.965544][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.611015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.791380][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.975301][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.979011][ T2267] cfg80211: failed to load regulatory.db [ 70.253233][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.552766][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.826555][ T6859] loop0: detected capacity change from 0 to 256 [ 73.002661][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.361129][ T2267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.394242][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.396345][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.541283][ T6879] netlink: 'syz.4.98': attribute type 10 has an invalid length. [ 73.653635][ T6873] loop3: detected capacity change from 0 to 40427 [ 73.731477][ T6879] syz_tun: entered promiscuous mode [ 73.762482][ T6873] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 73.764242][ T6873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.949365][ T6428] Bluetooth: hci0: command 0x0406 tx timeout [ 74.159073][ T6873] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.186043][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.189869][ T6873] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.191592][ T6873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.193212][ T6879] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 74.833461][ T6897] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 74.932758][ T6897] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.040013][ T6903] loop2: detected capacity change from 0 to 128 [ 75.211004][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.228702][ T6903] syz.2.105: attempt to access beyond end of device [ 75.228702][ T6903] loop2: rw=2049, sector=145, nr_sectors = 656 limit=128 [ 75.262015][ T6893] loop1: detected capacity change from 0 to 40427 [ 75.269901][ T6893] F2FS-fs (loop1): invalid crc value [ 75.277422][ T6893] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.295041][ T6893] F2FS-fs (loop1): Start checkpoint disabled! [ 75.396034][ T6893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 75.481917][ T6913] netlink: 'syz.3.103': attribute type 21 has an invalid length. [ 75.483768][ T6913] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.329788][ T6922] syz.1.101: attempt to access beyond end of device [ 76.329788][ T6922] loop1: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 76.786577][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.851650][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.853748][ T2267] IPVS: starting estimator thread 0... [ 77.489732][ T30] audit: type=1326 audit(77.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6930 comm="syz.3.110" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb274ce68 code=0x0 [ 77.528503][ T6923] IPVS: using max 26 ests per chain, 62400 per kthread [ 77.628615][ T2159] kworker/u8:9: attempt to access beyond end of device [ 77.628615][ T2159] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 77.633506][ T6934] loop2: detected capacity change from 0 to 512 [ 77.653642][ T2159] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 77.656141][ T2159] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 77.682752][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.759111][ T6423] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /18/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 77.853538][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.904084][ T6472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.212574][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.872312][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.901036][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.056063][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.734498][ T6472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.743383][ T6961] loop1: detected capacity change from 0 to 8 [ 80.821467][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.823419][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.936856][ T6961] SQUASHFS error: zlib decompression failed, data probably corrupt [ 80.938546][ T6961] SQUASHFS error: Failed to read block 0x9b: -5 [ 80.939999][ T6961] SQUASHFS error: Unable to read metadata cache entry [99] [ 80.956756][ T6961] SQUASHFS error: Unable to read inode 0x127 [ 81.048092][ T6959] loop0: detected capacity change from 0 to 32768 [ 81.236274][ T6959] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.407745][ T2267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.409792][ T2267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.411558][ T2267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.460566][ T6431] ocfs2: Unmounting device (7,0) on (node local) [ 83.032938][ T6972] loop3: detected capacity change from 0 to 40427 [ 83.039067][ T6972] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 83.041693][ T6972] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.068715][ T6972] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.094326][ T6972] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.097094][ T6972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.301893][ T6979] loop4: detected capacity change from 0 to 40427 [ 83.305204][ T6979] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 83.307878][ T6979] F2FS-fs (loop4): invalid crc value [ 83.316740][ T6979] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.337843][ T6979] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.811468][ T6977] TCP: out of memory -- consider tuning tcp_mem [ 83.898988][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.949366][ T6430] syz-executor: attempt to access beyond end of device [ 83.949366][ T6430] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.952429][ T6430] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 85.014592][ T6997] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x140/0xb30 [ 85.068094][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.554930][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.581288][ T6435] syz-executor: attempt to access beyond end of device [ 85.581288][ T6435] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.594510][ T6435] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 86.319871][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 86.398837][ T6472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.423929][ T7009] input: syz0 as /devices/virtual/input/input2 [ 87.162405][ T7032] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 87.172541][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.175067][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.970561][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.320071][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.322340][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.324591][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.326151][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.522846][ T7032] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.553179][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 88.555032][ T7037] bridge_slave_1: left allmulticast mode [ 88.556142][ T7037] bridge_slave_1: left promiscuous mode [ 88.557340][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.571798][ T2267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.592297][ T7037] bridge_slave_0: left allmulticast mode [ 88.593559][ T7037] bridge_slave_0: left promiscuous mode [ 88.594749][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.643431][ T7037] bond0: (slave bridge0): Releasing backup interface [ 88.971024][ T6472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.835826][ T7046] loop0: detected capacity change from 0 to 32768 [ 90.011103][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.157330][ T7057] loop1: detected capacity change from 0 to 64 [ 90.175079][ T7057] hfs: get root inode failed [ 90.387878][ T7046] loop0: detected capacity change from 0 to 32768 [ 91.381608][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.611802][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.031105][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.915996][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.140954][ T7067] loop0: detected capacity change from 0 to 40427 [ 93.175791][ T7067] F2FS-fs (loop0): invalid crc value [ 93.178170][ T7067] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.196375][ T7067] F2FS-fs (loop0): Start checkpoint disabled! [ 93.204944][ T7067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 93.255524][ T7077] loop3: detected capacity change from 0 to 8192 [ 93.348391][ T7074] loop1: detected capacity change from 0 to 32768 [ 93.583541][ T7088] syz.0.150: attempt to access beyond end of device [ 93.583541][ T7088] loop0: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 94.415612][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.448505][ T38] kworker/u8:2: attempt to access beyond end of device [ 94.448505][ T38] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.452379][ T38] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.453828][ T38] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.637682][ T6428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.643327][ T6428] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.646473][ T6428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.648996][ T6428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.651485][ T6428] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.653231][ T6428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.660497][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.535956][ T7101] loop4: detected capacity change from 0 to 512 [ 95.565014][ T7074] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.567490][ T7074] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 95.567943][ T7074] XFS (loop1): log mount failed [ 95.593556][ T7101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.621613][ T6614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.658900][ T30] audit: type=1326 audit(95.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f4ce68 code=0x7ffc0000 [ 95.688214][ T30] audit: type=1326 audit(95.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f4ce68 code=0x7ffc0000 [ 95.712131][ T6423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.743890][ T30] audit: type=1326 audit(95.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95f4ce68 code=0x7ffc0000 [ 95.767020][ T30] audit: type=1326 audit(95.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f4ce68 code=0x7ffc0000 [ 95.776261][ T30] audit: type=1326 audit(95.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff95f4ce68 code=0x7ffc0000 [ 96.858344][ T6614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.860595][ T6425] Bluetooth: hci5: command tx timeout [ 97.164083][ T30] audit: type=1400 audit(97.140:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="#!" requested=w pid=7117 comm="syz.1.161" saddr=fe80::bb daddr=fe80::aa netif=wpan0 [ 97.275164][ T453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.290598][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.158'. [ 97.463352][ T6435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.820473][ T453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.966873][ T6425] Bluetooth: hci5: command tx timeout [ 99.204631][ T453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.220081][ T7093] chnl_net:caif_netlink_parms(): no params data found [ 99.422208][ T453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.448404][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.449921][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.467740][ T7093] bridge_slave_0: entered allmulticast mode [ 99.475234][ T7093] bridge_slave_0: entered promiscuous mode [ 99.477907][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.479477][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.563195][ T7093] bridge_slave_1: entered allmulticast mode [ 99.565049][ T7093] bridge_slave_1: entered promiscuous mode [ 99.593855][ T7158] loop0: detected capacity change from 0 to 32768 [ 100.306497][ T7166] loop4: detected capacity change from 0 to 1024 [ 100.307477][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.338008][ T7158] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.342876][ T7166] hfsplus: bad catalog entry used to create inode [ 100.344580][ T7166] hfsplus: failed to load root directory [ 100.822703][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.973184][ T6425] Bluetooth: hci5: command tx timeout [ 100.993356][ T7158] XFS (loop0): Ending clean mount [ 101.125451][ T7093] team0: Port device team_slave_0 added [ 101.135238][ T453] bridge_slave_1: left allmulticast mode [ 101.136556][ T453] bridge_slave_1: left promiscuous mode [ 101.138487][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.202300][ T453] bridge_slave_0: left allmulticast mode [ 101.203537][ T453] bridge_slave_0: left promiscuous mode [ 101.205579][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.257722][ T7189] loop3: detected capacity change from 0 to 764 [ 101.270206][ T7189] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 101.272682][ T6431] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.050766][ T6425] Bluetooth: hci5: command tx timeout [ 104.236560][ T453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.275194][ T453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.329744][ T453] bond0 (unregistering): Released all slaves [ 104.355784][ T7214] loop3: detected capacity change from 0 to 16 [ 104.368673][ T7214] erofs: Unknown parameter '01777777777777777777777ÿ' [ 104.372631][ T7093] team0: Port device team_slave_1 added [ 104.385667][ T7214] loop3: detected capacity change from 0 to 512 [ 104.721376][ T7222] netlink: 104 bytes leftover after parsing attributes in process `syz.4.181'. [ 105.816522][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.818047][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.836553][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.958953][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.983751][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.163083][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.335811][ T7239] warning: `syz.3.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.592786][ T7093] hsr_slave_0: entered promiscuous mode [ 107.641009][ T7093] hsr_slave_1: entered promiscuous mode [ 107.793025][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.795336][ T7093] Cannot create hsr debugfs directory [ 108.160461][ T7260] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.437841][ T7265] binder: 7264:7265 tried to acquire reference to desc 0, got 1 instead [ 108.439735][ T7265] binder: 7264:7265 got transaction with invalid offsets ptr [ 108.446255][ T7265] binder: 7264:7265 transaction call to 7264:0 failed 8/29201/-14, size 0-16 line 3372 [ 108.590581][ T453] hsr_slave_0: left promiscuous mode [ 108.655354][ T7252] loop0: detected capacity change from 0 to 32768 [ 108.792662][ T453] hsr_slave_1: left promiscuous mode [ 109.660306][ T7281] read_mapping_page failed! [ 110.541718][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.543445][ T453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.550030][ T6476] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.560376][ T7265] syz.4.192 (7265): drop_caches: 2 [ 110.746535][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.748391][ T453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.765112][ T453] veth1_macvtap: left promiscuous mode [ 110.768664][ T453] veth0_macvtap: left promiscuous mode [ 110.769964][ T453] veth1_vlan: left promiscuous mode [ 110.771374][ T453] veth0_vlan: left promiscuous mode [ 111.625236][ T7299] loop4: detected capacity change from 0 to 64 [ 111.630323][ T7299] hfs: unable to locate alternate MDB [ 111.631696][ T7299] hfs: continuing without an alternate MDB [ 111.690591][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 113.340967][ T2267] IPVS: starting estimator thread 0... [ 113.397860][ T7326] loop3: detected capacity change from 0 to 512 [ 113.477453][ T7317] IPVS: using max 26 ests per chain, 62400 per kthread [ 113.566795][ T7326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.212999][ T7326] EXT4-fs (loop3): shut down requested (1) [ 114.328953][ T7324] loop4: detected capacity change from 0 to 32768 [ 114.334023][ T7324] XFS: ikeep mount option is deprecated. [ 114.338013][ T7322] loop0: detected capacity change from 0 to 32768 [ 114.378542][ T7324] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.389210][ T7322] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.207 (7322) [ 114.425945][ T7322] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.428621][ T7322] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 114.431312][ T7322] BTRFS info (device loop0): using free-space-tree [ 114.466146][ T7324] XFS (loop4): Ending clean mount [ 114.471652][ T7324] XFS (loop4): Quotacheck needed: Please wait. [ 114.539792][ T7324] XFS (loop4): Quotacheck: Done. [ 114.688391][ T6435] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.777342][ T653] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 114.846801][ T7379] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 114.848262][ T7379] [U] J"—e:ÀÆ" [ 114.996275][ T7382] loop1: detected capacity change from 0 to 4096 [ 115.000254][ T7382] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 115.089861][ T6431] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.899099][ T7391] loop1: detected capacity change from 0 to 1024 [ 115.908021][ T7391] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.962122][ T7391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.635068][ T453] team0 (unregistering): Port device team_slave_1 removed [ 116.696611][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.818453][ T7401] loop4: detected capacity change from 0 to 2048 [ 116.820396][ T7401] ext4: Unknown parameter 'uid>00000000000000000000' [ 117.839608][ T453] team0 (unregistering): Port device team_slave_0 removed [ 118.418693][ T7409] syz.4.220 uses obsolete (PF_INET,SOCK_PACKET) [ 121.243062][ T7409] bridge0: port 3(vlan2) entered blocking state [ 121.244436][ T7409] bridge0: port 3(vlan2) entered disabled state [ 121.245859][ T7409] vlan2: entered allmulticast mode [ 121.246899][ T7409] bond0: entered allmulticast mode [ 121.247866][ T7409] bond_slave_0: entered allmulticast mode [ 121.248982][ T7409] bond_slave_1: entered allmulticast mode [ 121.250403][ T7409] syz_tun: entered allmulticast mode [ 121.252405][ T7409] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 121.254741][ T7409] vlan2: entered promiscuous mode [ 121.255813][ T7409] bond0: entered promiscuous mode [ 121.256880][ T7409] bond_slave_0: entered promiscuous mode [ 121.258093][ T7409] bond_slave_1: entered promiscuous mode [ 121.259316][ T7409] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 121.261569][ T7409] bridge0: port 3(vlan2) entered blocking state [ 121.262928][ T7409] bridge0: port 3(vlan2) entered forwarding state [ 121.277554][ T6430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.541832][ T7431] input: syz0 as /devices/virtual/input/input3 [ 121.659665][ T7442] loop3: detected capacity change from 0 to 256 [ 122.238118][ T7093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.272286][ T7093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.281599][ T7093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.287476][ T7093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.378526][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.405742][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.490962][ T7451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.496274][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.508191][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.550286][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.551946][ T7320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.595177][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.596694][ T653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.608231][ T7093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.610422][ T7093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.947037][ T6425] block nbd0: Receive control failed (result -107) [ 124.432282][ T453] IPVS: stop unused estimator thread 0... [ 124.438307][ T7483] loop4: detected capacity change from 0 to 256 [ 124.479642][ T7486] loop3: detected capacity change from 0 to 2048 [ 124.591694][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.619756][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.839204][ T7508] binder: 7507:7508 tried to acquire reference to desc 0, got 1 instead [ 125.849297][ T6614] binder: release 7507:7508 transaction 13 out, still active [ 125.851480][ T6614] binder: undelivered TRANSACTION_COMPLETE [ 126.172377][ T7492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 126.187089][ T6614] binder: send failed reply for transaction 13, target dead [ 127.427106][ T2348] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.428537][ T2348] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.461203][ T6430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.653701][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.655603][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.287374][ T7093] veth0_vlan: entered promiscuous mode [ 128.293669][ T7093] veth1_vlan: entered promiscuous mode [ 128.357649][ T7093] veth0_macvtap: entered promiscuous mode [ 128.363058][ T7093] veth1_macvtap: entered promiscuous mode [ 128.369042][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.371365][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.373251][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.375336][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.377249][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.379315][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.385675][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.387851][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.390544][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.401762][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.415680][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.417594][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.419680][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.447014][ T7537] TCP: out of memory -- consider tuning tcp_mem [ 128.470702][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.472765][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.474734][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.476805][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.481162][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.891402][ C0] ------------[ cut here ]------------ [ 128.892639][ C0] WARNING: CPU: 0 PID: 6430 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x574/0x66c [ 128.894535][ C0] Modules linked in: [ 128.895377][ C0] CPU: 0 UID: 0 PID: 6430 Comm: syz-executor Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 128.897376][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.899413][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 128.901086][ C0] pc : inet_sock_destruct+0x574/0x66c [ 128.902142][ C0] lr : inet_sock_destruct+0x574/0x66c [ 128.903272][ C0] sp : ffff800080007c70 [ 128.904168][ C0] x29: ffff800080007c70 x28: ffff800089634a78 x27: 0000000000000005 [ 128.905822][ C0] x26: 1fffe0001e65ed92 x25: dfff800000000000 x24: 1fffe0001e65ed82 [ 128.907571][ C0] x23: 1fffe0001e65ed85 x22: 0000000000000007 x21: 0000000000000000 [ 128.909243][ C0] x20: 000000000000046b x19: ffff0000f32f6c00 x18: ffff0001b36329a8 [ 128.910938][ C0] x17: ffff800123dfd000 x16: ffff800080585eb0 x15: 0000000000000001 [ 128.912601][ C0] x14: 1fffe0001e65edd3 x13: 0000000000000000 x12: 0000000000000000 [ 128.914314][ C0] x11: ffff60001e65edd4 x10: 0000000000ff0100 x9 : 0000000000000000 [ 128.916085][ C0] x8 : ffff0000e987dac0 x7 : ffff8000804213f8 x6 : 0000000000000000 [ 128.917786][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800089fb7c64 [ 128.919628][ C0] x2 : 0000000000000000 x1 : 000000000000046b x0 : 0000000000000000 [ 128.921450][ C0] Call trace: [ 128.922223][ C0] inet_sock_destruct+0x574/0x66c (P) [ 128.923334][ C0] inet_sock_destruct+0x574/0x66c (L) [ 128.924556][ C0] inet6_sock_destruct+0x28/0x38 [ 128.925546][ C0] __sk_destruct+0x5c/0x74c [ 128.926471][ C0] rcu_core+0x898/0x1b5c [ 128.927442][ C0] rcu_core_si+0x10/0x1c [ 128.928299][ C0] handle_softirqs+0x2e0/0xbf8 [ 128.929338][ C0] __do_softirq+0x14/0x20 [ 128.930335][ C0] ____do_softirq+0x14/0x20 [ 128.931461][ C0] call_on_irq_stack+0x24/0x4c [ 128.932455][ C0] do_softirq_own_stack+0x20/0x2c [ 128.933472][ C0] __irq_exit_rcu+0x1d8/0x544 [ 128.934473][ C0] irq_exit_rcu+0x14/0x84 [ 128.935518][ C0] el1_interrupt+0x38/0x68 [ 128.936410][ C0] el1h_64_irq_handler+0x18/0x24 [ 128.937465][ C0] el1h_64_irq+0x6c/0x70 [ 128.938385][ C0] finish_lock_switch+0xc0/0x1e4 (P) [ 128.939543][ C0] finish_lock_switch+0xbc/0x1e4 (L) [ 128.940773][ C0] finish_task_switch+0x120/0x608 [ 128.941914][ C0] __schedule+0x16e4/0x27d0 [ 128.942994][ C0] schedule+0xbc/0x238 [ 128.943920][ C0] do_notify_resume+0x13c/0x1f4 [ 128.944992][ C0] el0_interrupt+0xc8/0x248 [ 128.946071][ C0] __el0_irq_handler_common+0x18/0x24 [ 128.947308][ C0] el0t_64_irq_handler+0x10/0x1c [ 128.948398][ C0] el0t_64_irq+0x198/0x19c [ 128.949447][ C0] irq event stamp: 649163 [ 128.950353][ C0] hardirqs last enabled at (649162): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 128.952712][ C0] hardirqs last disabled at (649163): [] el1_dbg+0x24/0x80 [ 128.954665][ C0] softirqs last enabled at (649070): [] local_bh_enable+0x10/0x34 [ 128.956853][ C0] softirqs last disabled at (649079): [] __do_softirq+0x14/0x20 [ 128.958970][ C0] ---[ end trace 0000000000000000 ]--- [ 129.056203][ T7535] loop3: detected capacity change from 0 to 164 [ 129.063691][ T7093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.073127][ T7093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.075051][ T7093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.076929][ T7093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.096370][ T7535] iso9660: Bad value for 'session' [ 129.110490][ T7545] loop0: detected capacity change from 0 to 512 [ 129.185433][ T7545] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 130.774109][ T575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.776393][ T575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.778113][ T575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.779793][ T575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50