last executing test programs: 6m38.730876054s ago: executing program 1 (id=138): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6m37.404518201s ago: executing program 1 (id=147): r0 = socket(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000, 0x0, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r1, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 6m36.922276768s ago: executing program 1 (id=150): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x10000a47) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r1, &(0x7f00000004c0)="ab", 0x1, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r2 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 6m31.815422753s ago: executing program 1 (id=168): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x0, 0x187, &(0x7f0000001400)="$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") tgkill(0xffffffffffffffff, 0xffffffffffffffff, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x18, r1, 0xa95f7f23e6ffcb3f, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 6m21.304611439s ago: executing program 1 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000001080)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x1010814, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRES16, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x219, &(0x7f0000000740)="$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") chdir(&(0x7f0000000700)='./file0\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x6000) 6m20.006741855s ago: executing program 1 (id=189): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e21"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 6m18.823582521s ago: executing program 2 (id=187): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@isdn, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/249}]}, 0x8}], 0x14, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) 6m18.559144664s ago: executing program 2 (id=188): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xe, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r3, 0x0}]) 6m17.289982731s ago: executing program 2 (id=195): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a832a3106307be8e70717456a968c2eaa0d344507f6253f15e6605c", 0x79}, {&(0x7f00000002c0)="7e6b37ea4b479588e00b40a612b1949176de42e518bee23a0349893fa005e05906ba9a605f484c46bed328d7d113e6cda116ccc574da811c66ac7e2b89429ceeae9b1a4847ca7656c3c8288bb67bdf7ebc05ce86bca9607026129fc765870f72a96834bdf9425d49f0530c40b76c2b27c118327372cbfd363a3c2781a48bd21055e21bd0521b4e97c0a4ad7b75d59c6d99be3106a60b9a8ad5058430f61b74c29dfa25b8a59db9805d903279209a2e", 0xaf}, {&(0x7f0000000f80)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f985105a3d57f766486ea16428a7e8054cff9dbec74e9c77fe4c483e306e1042874ae8e51db87e9f5f2cfeeb5d9d6b787a45cddacf2500", 0xf5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)="83b0d1d58623e313838c1f7f5dd7f20215b9cb390ae6b6e7ce466c8c1f2436de04d83f62c4229e475dcb6f4f36ffdcc3f4b1d82102ab72670d3a9b8b4220951dada25c4a093551760f5851c7b3a90e48115e2f8bde650fa4797700895e507c1d3d58a9", 0x63}], 0x1}}], 0x2, 0xc0) sendmmsg$inet_sctp(r0, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="40f7b84e6714ce46d1df085ec3dd7db57b3fc2977fa0b0e8480c62820e3b39b435420d29dd23c4eaa10645196fd6e51a59522b549d2df82334b45fe2cc40c8d91c9db63de2686853fab16d4529c7c433360aa969c514e8ca3b688e4c3bcc0199bbe98a034371cd057baed56eef4771fee3bc82b7013d637de8072e6ce5de3361329fd92ae5d5af9808155ac553971880fc5a856fbabe1b", 0x97}, {0x0}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x480c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6m17.020362104s ago: executing program 2 (id=196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@auto_da_alloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@user_xattr}, {@noblock_validity}, {@errors_remount}]}, 0x1, 0x583, &(0x7f0000000d40)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) madvise(&(0x7f00000f2000/0x2000)=nil, 0x2000, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r1, &(0x7f0000000180)='2', 0x1, 0x8080c61) fallocate(r1, 0x3, 0x80007, 0x8000c62) 6m14.769821773s ago: executing program 2 (id=204): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6m11.442144236s ago: executing program 2 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200200, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) 6m10.599415536s ago: executing program 32 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200200, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) 6m3.617984117s ago: executing program 33 (id=189): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e21"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 5m32.804554524s ago: executing program 6 (id=233): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, 0x0, 0x40840) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x22a0b}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 5m28.893250664s ago: executing program 6 (id=294): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000130d005a75b8419ea61bcb00", @ANYRES64=r2, @ANYRES64=r3/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="01000040010000000000006021030000ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49221b1c8d82d1c6b338a16356bbf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"], 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) unshare(0x64000600) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x210040, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m12.89922862s ago: executing program 34 (id=294): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000130d005a75b8419ea61bcb00", @ANYRES64=r2, @ANYRES64=r3/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="01000040010000000000006021030000ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49221b1c8d82d1c6b338a16356bbf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"], 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) unshare(0x64000600) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x210040, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.111239004s ago: executing program 3 (id=1097): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x18d0c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300008ddc5071862885e9000a00", @ANYBLOB, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000200)=""/4096) 11.804554768s ago: executing program 3 (id=1101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 11.501908112s ago: executing program 3 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x1ed}], 0x3}}], 0x4000000000001ee, 0xfff0) 10.697284492s ago: executing program 4 (id=1106): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 9.28686969s ago: executing program 7 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000482, &(0x7f00000004c0)=ANY=[], 0x1, 0x224, &(0x7f0000000040)="$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") llistxattr(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) 9.28606664s ago: executing program 3 (id=1109): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r1, &(0x7f0000000bc0)=""/102397, 0x18ffd, 0x30c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 9.28590567s ago: executing program 4 (id=1110): lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x1) 9.086473232s ago: executing program 4 (id=1112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 8.102321135s ago: executing program 7 (id=1114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 7.811605429s ago: executing program 5 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x379, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 7.321615255s ago: executing program 0 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) 5.526944209s ago: executing program 0 (id=1117): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffd, 0x0, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xffc}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d411000000000000002900000003000000", 0xfe60) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$rfkill(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) 5.077552844s ago: executing program 0 (id=1118): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r0 = gettid() inotify_init1(0x800) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x25000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0, 0x3000}]) io_destroy(r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.925701246s ago: executing program 4 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 4.915618396s ago: executing program 7 (id=1120): r0 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") fsync(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0xc642, 0xa}) fcntl$setstatus(r1, 0x4, 0x6100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$FUSE_GETXATTR(r1, &(0x7f0000000300)={0x18, 0xfffffffffffffffe, 0x0, {0xfff}}, 0x18) fanotify_init(0x57, 0x80000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 3.912443019s ago: executing program 4 (id=1121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/154, 0x9a) 3.8919132s ago: executing program 5 (id=1122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3.731675652s ago: executing program 7 (id=1123): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x18d0c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300008ddc5071862885e9000a00", @ANYBLOB, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000200)=""/4096) 3.730331482s ago: executing program 0 (id=1133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xc8) 3.714804122s ago: executing program 5 (id=1124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00"/28, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 1.699316338s ago: executing program 0 (id=1125): open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@dioread_lock}, {@debug}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x61a, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r2, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x50b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40800, 0x200}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x34}}, 0x20004004) 1.586642789s ago: executing program 7 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000002000000ac1414bb00000000000000000200010000000000fd000504fefffc4b030005000000050002"], 0x50}}, 0x0) 1.585566779s ago: executing program 3 (id=1127): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.584647749s ago: executing program 5 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c6", 0x7, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.457955341s ago: executing program 3 (id=1129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x9) 1.447023451s ago: executing program 4 (id=1130): r0 = syz_usbip_server_init(0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) recvmmsg(r2, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x3}], 0x1, 0x10000, &(0x7f0000005e00)) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xc0, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0xe2, 0x5d, 0x8, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) shutdown(r3, 0x1) readv(r3, &(0x7f0000000080)=[{0x0}], 0x1) write$usbip_server(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000300"], 0x31) 407.945484ms ago: executing program 7 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 398.016635ms ago: executing program 5 (id=1132): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 143.484438ms ago: executing program 5 (id=1134): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfc, 0x6a7, &(0x7f00000006c0)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x854) socketpair(0x22, 0x2, 0x4, &(0x7f0000000800)) 0s ago: executing program 0 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 06] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.120: inode #1: comm syz.2.120: iget: illegal inode # [ 71.295663][ T4806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.120: error while reading EA inode 1 err=-117 [ 71.318671][ T4806] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.322633][ T4806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.120: inode #1: comm syz.2.120: iget: illegal inode # [ 71.346863][ T4806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.120: error while reading EA inode 1 err=-117 [ 71.360653][ T4806] EXT4-fs (loop2): 1 orphan inode deleted [ 71.364556][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.458330][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 71.458346][ T27] audit: type=1326 audit(71.400:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc75a768 code=0x7fc00000 [ 71.546881][ T4821] loop0: detected capacity change from 0 to 512 [ 71.572828][ T4821] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.575786][ T4821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.623009][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 71.627350][ T4821] EXT4-fs (loop0): 1 truncate cleaned up [ 71.671431][ T4821] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.883262][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 72.163448][ T4839] loop2: detected capacity change from 0 to 4096 [ 72.177303][ T4840] syz.4.129 uses obsolete (PF_INET,SOCK_PACKET) [ 72.546967][ T27] audit: type=1326 audit(72.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.562474][ T27] audit: type=1326 audit(72.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.573862][ T4844] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.593800][ T27] audit: type=1326 audit(72.500:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.603786][ T4844] FAT-fs (loop9): unable to read boot sector [ 72.621934][ T27] audit: type=1326 audit(72.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.627409][ T27] audit: type=1326 audit(72.500:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.659992][ T27] audit: type=1326 audit(72.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.675516][ T27] audit: type=1326 audit(72.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.691217][ T27] audit: type=1326 audit(72.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 72.706830][ T27] audit: type=1326 audit(72.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x7fc00000 [ 73.050076][ T4854] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 73.165433][ T4864] block device autoloading is deprecated and will be removed. [ 74.253244][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.256600][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.837913][ T4901] loop0: detected capacity change from 0 to 8 [ 75.841040][ T4901] squashfs: Bad value for 'errors' [ 76.237246][ T4908] random: crng reseeded on system resumption [ 77.087843][ T4890] loop1: detected capacity change from 0 to 32768 [ 77.092380][ T4890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.150 (4890) [ 77.099510][ T4890] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.102101][ T4890] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 77.104276][ T4890] BTRFS info (device loop1): using free space tree [ 77.160992][ T4918] loop3: detected capacity change from 0 to 512 [ 77.210742][ T4918] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.160: casefold flag without casefold feature [ 77.217090][ T4918] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.160: couldn't read orphan inode 15 (err -117) [ 77.239170][ T4918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.432472][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 78.599804][ T4890] BTRFS error (device loop1): open_ctree failed: -22 [ 79.874791][ T4435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4435) [ 79.900792][ T4957] binder: 4954:4957 tried to acquire reference to desc 0, got 1 instead [ 79.913183][ T4957] binder_alloc: 4954: pid 4954 spamming oneway? 1 buffers allocated for a total size of 4096 [ 79.928123][ T4957] binder: 4954:4957 got reply transaction with no transaction stack [ 79.935544][ T4957] binder: 4954:4957 transaction reply to 0:0 failed 9/29201/-71, size 0-0 line 2955 [ 79.954188][ T4635] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.987908][ T4635] binder: undelivered transaction 8, process died. [ 90.225121][ T4965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.169'. [ 90.227388][ T4965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.169'. [ 90.233840][ T4965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.169'. [ 90.236356][ T4965] net_ratelimit: 10 callbacks suppressed [ 90.236366][ T4965] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.452547][ T4992] loop1: detected capacity change from 0 to 256 [ 92.985022][ T5011] loop0: detected capacity change from 0 to 40427 [ 92.998842][ T5011] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 93.009264][ T5011] F2FS-fs (loop0): invalid crc value [ 93.015251][ T5011] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.035652][ T5011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.180247][ T4302] syz-executor: attempt to access beyond end of device [ 93.180247][ T4302] loop0: rw=2049, sector=45096, nr_sectors = 40 limit=40427 [ 94.870008][ T5059] loop2: detected capacity change from 0 to 1024 [ 95.403435][ T5059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.840786][ T5078] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 95.942903][ T5078] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 96.929939][ T4300] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz-executor: iget: bad extended attribute block 1 [ 96.942740][ T4300] EXT4-fs (loop2): Remounting filesystem read-only [ 96.947110][ T4300] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz-executor: iget: bad extended attribute block 1 [ 96.954032][ T4300] EXT4-fs (loop2): Remounting filesystem read-only [ 97.273213][ T5087] netlink: 72 bytes leftover after parsing attributes in process `syz.4.203'. [ 99.851786][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.854179][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.964900][ T5103] binder: 5101:5103 tried to acquire reference to desc 0, got 1 instead [ 99.967906][ T5103] binder: 5101:5103 got transaction with invalid offsets size, 46 [ 99.970505][ T5103] binder: 5101:5103 transaction async to 5101:0 failed 14/29201/-22, size 96-46 line 3286 [ 99.974199][ T4491] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.043520][ T5105] loop0: detected capacity change from 0 to 512 [ 100.076359][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 100.217061][ T4981] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.272476][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.275221][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.277733][ T4299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.282396][ T4299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.284921][ T4299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.287040][ T4299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.310605][ T4345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.523092][ T5112] team0: Port device team_slave_1 removed [ 101.579317][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 101.810611][ T4345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.752390][ T4345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.782106][ T5138] loop3: detected capacity change from 0 to 256 [ 102.890200][ T4345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.909601][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 102.912181][ T5140] netlink: 1 bytes leftover after parsing attributes in process `syz.4.224'. [ 103.030182][ T5131] loop0: detected capacity change from 0 to 40427 [ 103.091417][ T5131] F2FS-fs (loop0): invalid crc value [ 103.096806][ T5131] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.117821][ T5131] F2FS-fs (loop0): Start checkpoint disabled! [ 103.127804][ T5131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 103.143807][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 103.311630][ T5153] xt_NFQUEUE: number of total queues is 0 [ 103.359487][ T4312] Bluetooth: hci1: command 0x0409 tx timeout [ 104.499799][ T5157] loop4: detected capacity change from 0 to 64 [ 104.722289][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.724249][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.080265][ T5119] device bridge_slave_0 entered promiscuous mode [ 105.389564][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.391489][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.393910][ T5119] device bridge_slave_1 entered promiscuous mode [ 105.521378][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.553244][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.814490][ T5119] team0: Port device team_slave_0 added [ 105.817587][ T5119] team0: Port device team_slave_1 added [ 106.378367][ T4299] Bluetooth: hci1: command 0x041b tx timeout [ 106.541115][ T4540] kworker/u4:10: attempt to access beyond end of device [ 106.541115][ T4540] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.617390][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.622089][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.628111][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.851286][ T5181] capability: warning: `syz.3.232' uses deprecated v2 capabilities in a way that may be insecure [ 107.246411][ T5183] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 107.253057][ T5183] CIFS mount error: No usable UNC path provided in device string! [ 107.253057][ T5183] [ 107.255831][ T5183] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.094402][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.096194][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.163501][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.339912][ T4312] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.343760][ T4312] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.346416][ T4312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.350974][ T4312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.353301][ T4312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.355349][ T4312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.430932][ T5119] device hsr_slave_0 entered promiscuous mode [ 108.438995][ T5119] device hsr_slave_1 entered promiscuous mode [ 108.448556][ T4312] Bluetooth: hci1: command 0x040f tx timeout [ 108.488456][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.490499][ T5119] Cannot create hsr debugfs directory [ 108.829780][ T5119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.932673][ T5119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.971833][ T5119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.983590][ T5222] loop0: detected capacity change from 0 to 256 [ 109.012836][ T5119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.091980][ T5224] loop3: detected capacity change from 0 to 256 [ 109.148513][ T5224] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 109.597903][ T5235] xt_NFQUEUE: number of total queues is 0 [ 110.368577][ T4312] Bluetooth: hci5: command 0x0409 tx timeout [ 110.411824][ T5240] loop0: detected capacity change from 0 to 64 [ 110.573709][ T4312] Bluetooth: hci1: command 0x0419 tx timeout [ 110.596027][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.603404][ T5196] chnl_net:caif_netlink_parms(): no params data found [ 110.631193][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.633668][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.451081][ T4299] Bluetooth: hci5: command 0x041b tx timeout [ 113.452848][ T4299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.455117][ T4299] Bluetooth: hci3: Injecting HCI hardware error event [ 113.461619][ T4299] Bluetooth: hci3: hardware error 0x00 [ 113.669102][ T5255] binder: 5254:5255 tried to acquire reference to desc 0, got 1 instead [ 113.673184][ T5255] binder: 5254:5255 got transaction with invalid parent offset or type [ 113.675271][ T5255] binder: 5255:5254 failed to fixup parent [ 113.676761][ T5255] binder: 5254:5255 transaction async to 5254:0 failed 19/29201/-22, size 88-24 line 3549 [ 113.689755][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.849957][ T5268] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 115.488285][ T4312] Bluetooth: hci5: command 0x040f tx timeout [ 115.536554][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 115.557636][ T5273] loop3: detected capacity change from 0 to 512 [ 115.577077][ T5273] EXT4-fs error (device loop3): __ext4_fill_super:5390: inode #2: comm syz.3.249: iget: bad i_size value: -1 [ 115.609654][ T5273] EXT4-fs (loop3): get root inode failed [ 115.611084][ T5273] EXT4-fs (loop3): mount failed [ 115.760011][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.934610][ T5269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.966790][ T5282] batman_adv: batadv0: Adding interface: dummy0 [ 115.968435][ T4299] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 115.970306][ T5282] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.976405][ T5282] batman_adv: batadv0: Interface activated: dummy0 [ 115.995173][ T5284] batadv0: mtu less than device minimum [ 115.999886][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.005571][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.011138][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.016533][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.022144][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.027747][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.033467][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.039408][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.045018][ T5284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.101123][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.111703][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.114110][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.115889][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.148522][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.151317][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.153915][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.156285][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.158002][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.160244][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.170170][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.172928][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.179545][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.496464][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.502020][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.504737][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.525720][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.531684][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.542881][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.544888][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.547513][ T5196] device bridge_slave_0 entered promiscuous mode [ 116.612493][ T4345] device hsr_slave_0 left promiscuous mode [ 116.638867][ T4345] device hsr_slave_1 left promiscuous mode [ 116.738428][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.740394][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.748803][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.750818][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.753139][ T4345] device bridge_slave_1 left promiscuous mode [ 116.755398][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.809699][ T4345] device bridge_slave_0 left promiscuous mode [ 116.811389][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.978813][ T4345] device veth1_macvtap left promiscuous mode [ 116.980797][ T4345] device veth0_macvtap left promiscuous mode [ 116.982454][ T4345] device veth1_vlan left promiscuous mode [ 116.984137][ T4345] device veth0_vlan left promiscuous mode [ 117.568987][ T4299] Bluetooth: hci5: command 0x0419 tx timeout [ 118.964298][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 119.151603][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 119.349931][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.599099][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.158367][ T4345] bond0 (unregistering): Released all slaves [ 122.335157][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.338665][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.341108][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.342911][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.345500][ T5196] device bridge_slave_1 entered promiscuous mode [ 122.365711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.369671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.422977][ T5196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.427275][ T5196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.463851][ T5196] team0: Port device team_slave_0 added [ 122.467086][ T5196] team0: Port device team_slave_1 added [ 122.507327][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.509616][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.516218][ T5196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.533480][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.535263][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.553855][ T5196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.620151][ T5196] device hsr_slave_0 entered promiscuous mode [ 122.629435][ T5196] device hsr_slave_1 entered promiscuous mode [ 122.688497][ T5196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.690539][ T5196] Cannot create hsr debugfs directory [ 122.732612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.734654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.758991][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.916188][ T5196] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.942374][ T5196] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.991679][ T5196] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.021276][ T5196] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.128535][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.131350][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.222049][ T5119] device veth0_vlan entered promiscuous mode [ 123.240288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.243272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.246090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.255559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.272947][ T5196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.283685][ T5119] device veth1_vlan entered promiscuous mode [ 123.300887][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 123.303365][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.305938][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.315495][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.334707][ T5196] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.353818][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.356144][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.359826][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.362040][ T4939] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.363663][ T4939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.365838][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.378463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.381086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.390546][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.392479][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.394779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.404845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.407689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.413508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.420540][ T5119] device veth0_macvtap entered promiscuous mode [ 123.425023][ T5119] device veth1_macvtap entered promiscuous mode [ 123.437782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.441321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.445977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.448825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.451170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.453879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.467506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.470426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.472999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.706709][ T5196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.710590][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.782037][ T4345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.787417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.790730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.799025][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.801669][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.804009][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.806499][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.810420][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.812927][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.822106][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.824384][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.827125][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.870243][ T4345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.876458][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.880970][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.883395][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.885810][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.889338][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.891933][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.894389][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.896935][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.901906][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.906911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.910344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.920568][ T5119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.922608][ T5119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.924835][ T5119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.926958][ T5119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.000760][ T4345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.111223][ T4345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.121459][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.123489][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.136590][ T5196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.147572][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.155842][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.161872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.207780][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.231388][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.236286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.407716][ T5374] loop3: detected capacity change from 0 to 64 [ 125.630581][ T5389] loop5: detected capacity change from 0 to 64 [ 125.989736][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.994069][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.042464][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.046467][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.608571][ T5401] loop5: detected capacity change from 0 to 131072 [ 129.750471][ T5401] F2FS-fs (loop5): Found nat_bits in checkpoint [ 129.771558][ T5401] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 129.985057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.987632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.996413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.011494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.023712][ T5196] device veth0_vlan entered promiscuous mode [ 130.120834][ T5196] device veth1_vlan entered promiscuous mode [ 130.256786][ T5196] device veth0_macvtap entered promiscuous mode [ 130.262671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.265393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.269802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.366872][ T5196] device veth1_macvtap entered promiscuous mode [ 130.452810][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.455361][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.462352][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.468319][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.470776][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.473345][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.485979][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.488889][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.498681][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.501361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.504299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.507887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.605236][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.607923][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.620222][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.622765][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.625212][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.654175][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.656872][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.675158][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.677973][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.706173][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.735805][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.767852][ T5196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.770896][ T5196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.773158][ T5196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.775412][ T5196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.797806][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.800872][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.724603][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 131.724619][ T27] audit: type=1326 audit(131.660:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 131.788251][ T27] audit: type=1326 audit(131.680:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 131.809669][ T27] audit: type=1326 audit(131.680:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 131.870574][ T27] audit: type=1326 audit(131.680:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 131.918305][ T27] audit: type=1326 audit(131.680:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 131.938379][ T27] audit: type=1326 audit(131.680:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 131.944159][ T27] audit: type=1326 audit(131.680:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 132.047431][ T27] audit: type=1326 audit(131.680:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 132.063731][ T27] audit: type=1326 audit(131.680:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 132.078488][ T27] audit: type=1326 audit(131.680:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.5.269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95a768 code=0x7fc00000 [ 134.037315][ T4697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.041415][ T4697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.046827][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.090343][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.093635][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.098316][ T190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.210483][ T5471] binder: 5470:5471 tried to acquire reference to desc 0, got 1 instead [ 134.219725][ T5471] binder: 5470:5471 got new transaction with bad transaction stack, transaction 28 has target 5470:0 [ 134.222664][ T5471] binder: 5470:5471 transaction call to 5470:0 failed 29/29201/-71, size 0-48 line 3114 [ 134.253450][ T111] binder: release 5470:5471 transaction 28 out, still active [ 134.255995][ T111] binder: undelivered TRANSACTION_COMPLETE [ 134.257757][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.297750][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 134.340396][ T111] binder: send failed reply for transaction 28, target dead [ 135.838105][ T5472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.108775][ T5494] loop4: detected capacity change from 0 to 256 [ 138.919997][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 140.262971][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 140.384192][ T5518] binder: 5517:5518 tried to acquire reference to desc 0, got 1 instead [ 140.399390][ T5518] binder: 5517:5518 got new transaction with bad transaction stack, transaction 34 has target 5517:0 [ 140.410155][ T5518] binder: 5517:5518 transaction call to 5517:0 failed 35/29201/-71, size 0-48 line 3114 [ 140.423168][ T4417] binder: release 5517:5518 transaction 34 out, still active [ 140.425157][ T4417] binder: undelivered TRANSACTION_COMPLETE [ 140.426587][ T4417] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.519042][ T4417] binder: send failed reply for transaction 34, target dead [ 141.510688][ T5527] loop5: detected capacity change from 0 to 512 [ 141.594988][ T5527] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 142.415475][ T5527] EXT4-fs (loop5): 1 truncate cleaned up [ 142.416855][ T5527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.608936][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 142.608948][ T27] audit: type=1326 audit(142.560:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.618635][ T27] audit: type=1326 audit(142.560:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.659127][ T27] audit: type=1326 audit(142.560:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.668616][ T27] audit: type=1326 audit(142.560:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.676098][ T5527] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 4: comm syz.5.291: lblock 0 mapped to illegal pblock 4 (length 1) [ 142.685204][ T5527] EXT4-fs (loop5): Remounting filesystem read-only [ 142.697202][ T27] audit: type=1326 audit(142.560:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.706632][ T5514] team0: Port device team_slave_0 removed [ 142.708307][ T27] audit: type=1326 audit(142.560:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.715991][ T27] audit: type=1326 audit(142.560:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.727691][ T27] audit: type=1326 audit(142.560:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.728323][ T5119] EXT4-fs (loop5): unmounting filesystem. [ 142.736127][ T27] audit: type=1326 audit(142.560:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.756402][ T27] audit: type=1326 audit(142.560:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7fc00000 [ 142.790140][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 143.771145][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 143.837617][ T5550] loop5: detected capacity change from 0 to 256 [ 143.846076][ T5547] binder: 5546:5547 tried to acquire reference to desc 0, got 1 instead [ 143.861296][ T5550] exfat: Deprecated parameter 'utf8' [ 143.867818][ T5547] binder_alloc: 5546: pid 5546 spamming oneway? 2 buffers allocated for a total size of 5120 [ 143.906290][ T4417] binder: undelivered TRANSACTION_COMPLETE [ 143.907841][ T4417] binder: undelivered TRANSACTION_COMPLETE [ 143.919030][ T5550] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 143.940831][ T4345] device hsr_slave_0 left promiscuous mode [ 143.946307][ T4635] binder: undelivered transaction 41, process died. [ 143.947986][ T4635] binder: undelivered transaction 40, process died. [ 144.009068][ T4345] device hsr_slave_1 left promiscuous mode [ 144.172320][ T5556] netlink: 72 bytes leftover after parsing attributes in process `syz.0.296'. [ 145.788424][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.983872][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.986077][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.989464][ T4345] device bridge_slave_1 left promiscuous mode [ 145.993673][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.882865][ T4345] device bridge_slave_0 left promiscuous mode [ 146.888073][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.428075][ T5597] loop0: detected capacity change from 0 to 64 [ 149.476964][ T4345] device veth1_macvtap left promiscuous mode [ 149.479631][ T4345] device veth0_macvtap left promiscuous mode [ 149.481521][ T4345] device veth1_vlan left promiscuous mode [ 149.483070][ T4345] device veth0_vlan left promiscuous mode [ 150.422766][ T5602] loop4: detected capacity change from 0 to 128 [ 150.473117][ T5602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.671054][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 153.334710][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 153.541013][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 153.729803][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.979181][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.713351][ T4345] bond0 (unregistering): Released all slaves [ 156.926526][ T5581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 156.940711][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.394356][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 159.396901][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 160.172752][ T5651] loop5: detected capacity change from 0 to 512 [ 160.233166][ T5655] loop3: detected capacity change from 0 to 128 [ 160.349386][ T5651] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.324: casefold flag without casefold feature [ 160.349698][ T5651] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.324: couldn't read orphan inode 15 (err -117) [ 160.349851][ T5651] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.361545][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.439688][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.448936][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.450075][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.479510][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.482598][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.492783][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.635483][ T5119] EXT4-fs (loop5): unmounting filesystem. [ 160.699781][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 162.529568][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 163.123423][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.207239][ T5662] chnl_net:caif_netlink_parms(): no params data found [ 163.408342][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.410231][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.429033][ T5662] device bridge_slave_0 entered promiscuous mode [ 163.461105][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.462872][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.465364][ T5662] device bridge_slave_1 entered promiscuous mode [ 163.493788][ T5705] loop5: detected capacity change from 0 to 32768 [ 163.516458][ T5705] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.528698][ T5705] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 163.536490][ T5705] BTRFS info (device loop5): using free space tree [ 163.571179][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.575427][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.620614][ T5662] team0: Port device team_slave_0 added [ 163.645599][ T5662] team0: Port device team_slave_1 added [ 163.740831][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.765113][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.803536][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.156497][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 164.160541][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 164.663497][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 164.863545][ T5705] BTRFS info (device loop5): enabling ssd optimizations [ 165.042782][ T4345] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.085725][ T5705] BTRFS warning (device loop5): qgroup rescan is already in progress [ 165.089740][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.091553][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.098043][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.169677][ T4939] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 165.234740][ T4345] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.269293][ T5119] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.586826][ T5662] device hsr_slave_0 entered promiscuous mode [ 166.863465][ T5763] loop0: detected capacity change from 0 to 512 [ 166.916200][ T5763] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.338: casefold flag without casefold feature [ 166.922727][ T5763] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.338: couldn't read orphan inode 15 (err -117) [ 166.952653][ T5763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.959707][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 166.969201][ T5662] device hsr_slave_1 entered promiscuous mode [ 167.006100][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.337'. [ 167.008496][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.337'. [ 167.105314][ T4345] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.153686][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 167.360467][ T4345] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.472038][ T5776] batman_adv: batadv0: Adding interface: dummy0 [ 167.482170][ T5776] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.497796][ T5776] batman_adv: batadv0: Interface activated: dummy0 [ 169.006474][ T5776] net_ratelimit: 10 callbacks suppressed [ 169.006491][ T5776] batadv0: mtu less than device minimum [ 169.009829][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 169.034002][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.039935][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.045613][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.051334][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.056978][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.062679][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.068253][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.073783][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.079569][ T5776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.773123][ T5662] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.920016][ T5662] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.961108][ T5662] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 170.091298][ T5662] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.966623][ T5819] loop3: detected capacity change from 0 to 32768 [ 173.048347][ T5819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (5819) [ 173.147863][ T5819] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.151268][ T5819] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 173.158836][ T5819] BTRFS info (device loop3): using free space tree [ 173.174827][ T5833] loop4: detected capacity change from 0 to 1024 [ 173.193986][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.079293][ T5833] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 174.081861][ T5833] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.090167][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.146305][ T5833] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.352: Invalid block bitmap block 0 in block_group 0 [ 174.158834][ T5833] __quota_error: 58 callbacks suppressed [ 174.158848][ T5833] Quota error (device loop4): write_blk: dquota write failed [ 174.162351][ T5833] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 174.164835][ T5833] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.352: Failed to acquire dquot type 0 [ 174.191562][ T5833] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.352: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.363119][ T5833] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.352: Invalid inode bitmap blk 0 in block_group 0 [ 174.367816][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.372647][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.377598][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.388384][ T5833] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 174.390309][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.392830][ T4383] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 174.395373][ T4383] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 0 [ 174.398244][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.400166][ T5560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.400585][ T5833] EXT4-fs (loop4): 1 orphan inode deleted [ 175.523511][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.555791][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.049637][ T5819] BTRFS error (device loop3): open_ctree failed: -12 [ 176.638876][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 177.156365][ T5621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5621) [ 178.540095][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.542858][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.545423][ T4939] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.547170][ T4939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.574949][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.604210][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.609266][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.589711][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.832135][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.849688][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.867360][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.873612][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.908086][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.886373][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.890339][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.940254][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.945433][ T5925] Zero length message leads to an empty skb [ 184.170769][ T5946] loop4: detected capacity change from 0 to 1024 [ 184.355462][ T5946] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 184.367134][ T5946] hfsplus: failed to load root directory [ 186.732093][ T5987] xt_NFQUEUE: number of total queues is 0 [ 187.447632][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.449422][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.649627][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 187.937879][ T6008] binder: 6007:6008 tried to acquire reference to desc 0, got 1 instead [ 188.021483][ T6008] binder: 6007:6008 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.057572][ T6008] binder: 6008 RLIMIT_NICE not set [ 188.068264][ T4633] binder: undelivered TRANSACTION_COMPLETE [ 189.479505][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.481505][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.499273][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.571347][ T4345] device hsr_slave_0 left promiscuous mode [ 189.608572][ T4345] device hsr_slave_1 left promiscuous mode [ 189.658595][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.660263][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.662746][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.664707][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.667058][ T4345] device bridge_slave_1 left promiscuous mode [ 189.669486][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.720152][ T4345] device bridge_slave_0 left promiscuous mode [ 189.721916][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.838699][ T4345] device veth1_macvtap left promiscuous mode [ 189.840266][ T4345] device veth0_macvtap left promiscuous mode [ 189.841844][ T4345] device veth1_vlan left promiscuous mode [ 189.843298][ T4345] device veth0_vlan left promiscuous mode [ 191.952942][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 192.349900][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.588599][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.203788][ T4345] bond0 (unregistering): Released all slaves [ 195.604308][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.606945][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.637364][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.641298][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.645804][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.648921][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.651603][ T5662] device veth0_vlan entered promiscuous mode [ 195.680386][ T5662] device veth1_vlan entered promiscuous mode [ 195.699020][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.701584][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.704181][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.707333][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.712341][ T5662] device veth0_macvtap entered promiscuous mode [ 195.717053][ T5662] device veth1_macvtap entered promiscuous mode [ 195.736811][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.740510][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.743219][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.745995][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.748773][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.751357][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.753824][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.756205][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.760319][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.762200][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.764875][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.767566][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.779357][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.783683][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.786228][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.789283][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.791968][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.794448][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.797014][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.799487][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.802113][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.805972][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.808741][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.811653][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.816935][ T5662] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.819645][ T5662] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.821992][ T5662] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.824079][ T5662] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.912756][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.915119][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.921699][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.946218][ T5396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.954511][ T5396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.967704][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.765506][ T6157] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 202.156582][ T6204] xt_NFQUEUE: number of total queues is 0 [ 203.028799][ T6213] loop7: detected capacity change from 0 to 2048 [ 203.060006][ T6213] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 203.106383][ T6213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.149754][ T6222] loop0: detected capacity change from 0 to 128 [ 203.210728][ T6222] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 203.318793][ T6222] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 203.946871][ T6213] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 204.570589][ T6228] loop4: detected capacity change from 0 to 1024 [ 204.572822][ T6228] EXT4-fs: Ignoring removed nobh option [ 204.605157][ T6228] EXT4-fs: Ignoring removed bh option [ 204.632669][ T6228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.083791][ T6228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.268661][ T6256] device ip6tnl1 entered promiscuous mode [ 207.350062][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 207.632268][ T6265] xt_NFQUEUE: number of total queues is 0 [ 208.406750][ T6264] loop4: detected capacity change from 0 to 128 [ 208.428616][ T6264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.715701][ T6280] loop3: detected capacity change from 0 to 16 [ 209.718030][ T6280] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 210.356307][ T6283] binder: 6267:6283 got transaction to invalid handle, 1 [ 210.365581][ T6283] binder: 6283:6267 cannot find target node [ 210.367548][ T6283] binder: 6267:6283 transaction async to 0:0 failed 50/29201/-22, size 0-0 line 3054 [ 210.428560][ T5874] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.712544][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 216.173560][ T6347] loop0: detected capacity change from 0 to 512 [ 216.186527][ T6347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.363298][ T6347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec098, mo2=0002] [ 216.365469][ T6347] System zones: 1-12 [ 216.383115][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.438'. [ 216.384575][ T6340] loop3: detected capacity change from 0 to 32768 [ 216.397990][ T6347] EXT4-fs (loop0): 1 truncate cleaned up [ 216.603283][ T6347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.105708][ T6340] XFS (loop3): Mounting V5 Filesystem [ 217.202699][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 217.205693][ T6340] XFS (loop3): Ending clean mount [ 217.299806][ T6375] fuse: Bad value for 'fd' [ 217.436803][ T6371] netlink: 'syz.4.441': attribute type 5 has an invalid length. [ 217.453600][ T4308] XFS (loop3): Unmounting Filesystem [ 220.212015][ T6405] binder: 6403:6405 tried to acquire reference to desc 0, got 1 instead [ 220.214147][ T6405] binder: 6403:6405 ioctl c0306201 200003c0 returned -14 [ 220.250020][ T6405] binder: 6403:6405 got transaction with invalid data ptr [ 220.251909][ T6405] binder: 6403:6405 transaction call to 6403:0 failed 55/29201/-14, size 0-24 line 3342 [ 220.256463][ T4287] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.282727][ T6424] binder: 6420:6424 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 221.286030][ T6424] binder: 6424 RLIMIT_NICE not set [ 221.441245][ T6431] binder: 6420:6431 tried to acquire reference to desc 0, got 1 instead [ 221.445736][ T6424] binder: undelivered transaction 60, put_user failed [ 221.447454][ T6424] binder: 6420:6424 ioctl c0306201 20000280 returned -14 [ 221.498784][ T4487] binder: undelivered TRANSACTION_COMPLETE [ 221.504745][ T6434] loop0: detected capacity change from 0 to 512 [ 221.520217][ T6434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.182208][ T6434] EXT4-fs: Mount option(s) incompatible with ext3 [ 222.365519][ T6447] binder: 6446:6447 tried to acquire reference to desc 0, got 1 instead [ 222.377326][ T4287] binder: undelivered TRANSACTION_COMPLETE [ 222.419252][ T4287] binder: undelivered transaction 65, process died. [ 223.007136][ T6452] net_ratelimit: 10 callbacks suppressed [ 223.007157][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.013018][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.016768][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.020485][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.024023][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.027717][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.031645][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.035204][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.038958][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 223.042752][ T6452] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 225.091774][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 225.298150][ T6466] fuse: Bad value for 'fd' [ 225.831044][ T6470] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 225.864615][ T6470] device bond1 entered promiscuous mode [ 225.900359][ T6468] bond1: (slave ip6gretap1): making interface the new active one [ 225.902489][ T6468] device ip6gretap1 entered promiscuous mode [ 225.906269][ T6468] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.913321][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 225.958043][ T6476] device bond1 left promiscuous mode [ 225.978871][ T6476] device ip6gretap1 left promiscuous mode [ 225.981300][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.338288][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 226.350557][ T6505] netlink: 165 bytes leftover after parsing attributes in process `syz.3.474'. [ 234.615251][ T6566] netlink: 100 bytes leftover after parsing attributes in process `syz.7.489'. [ 234.742818][ T6544] loop3: detected capacity change from 0 to 32768 [ 234.755665][ T6544] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.484 (6544) [ 234.781885][ T6544] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 234.784518][ T6544] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 234.787023][ T6544] BTRFS info (device loop3): using free space tree [ 235.959971][ T6544] BTRFS error (device loop3): open_ctree failed: -12 [ 236.062906][ T6615] netlink: 'syz.7.500': attribute type 1 has an invalid length. [ 236.098624][ T6617] device veth3 entered promiscuous mode [ 236.178326][ T6615] device veth3 entered promiscuous mode [ 237.820746][ T6661] loop7: detected capacity change from 0 to 128 [ 237.975387][ T6663] loop4: detected capacity change from 0 to 1024 [ 238.159605][ T6663] hfsplus: request for non-existent node 65536 in B*Tree [ 238.161753][ T6663] hfsplus: request for non-existent node 65536 in B*Tree [ 238.163948][ T6663] hfsplus: failed to load root directory [ 238.722333][ T6667] loop0: detected capacity change from 0 to 512 [ 238.724099][ T6669] loop4: detected capacity change from 0 to 128 [ 238.724755][ T6667] EXT4-fs: Ignoring removed i_version option [ 238.810774][ T6667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.894849][ T6661] syz.7.511: attempt to access beyond end of device [ 238.894849][ T6661] loop7: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 238.918788][ T6667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.088922][ T6669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 239.666678][ T6667] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.512: corrupted inode contents [ 239.718378][ T6669] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 239.724477][ T6667] EXT4-fs (loop0): Remounting filesystem read-only [ 239.726242][ T6667] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.512: mark_inode_dirty error [ 239.775124][ T6669] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 239.786642][ T6667] EXT4-fs (loop0): Remounting filesystem read-only [ 239.796336][ T6667] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.512: corrupted inode contents [ 239.811855][ T6667] EXT4-fs (loop0): Remounting filesystem read-only [ 239.868428][ T6678] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.512: corrupted inode contents [ 239.898787][ T6678] EXT4-fs (loop0): Remounting filesystem read-only [ 239.907327][ T6678] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.512: mark_inode_dirty error [ 239.941018][ T6678] EXT4-fs (loop0): Remounting filesystem read-only [ 239.959866][ T6678] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.512: corrupted inode contents [ 239.971427][ T6678] EXT4-fs (loop0): Remounting filesystem read-only [ 239.973612][ T6678] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.512: mark_inode_dirty error [ 239.976488][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 239.988981][ T6678] EXT4-fs (loop0): Remounting filesystem read-only [ 239.994339][ T6678] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.512: corrupted inode contents [ 240.660488][ T6678] EXT4-fs (loop0): Remounting filesystem read-only [ 240.662119][ T6678] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.512: mark_inode_dirty error [ 240.677668][ T6678] EXT4-fs (loop0): Remounting filesystem read-only [ 240.972715][ T6667] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.512: corrupted inode contents [ 242.073755][ T6685] loop7: detected capacity change from 0 to 32768 [ 242.246354][ T6685] XFS (loop7): Mounting V5 Filesystem [ 242.355425][ T6716] loop3: detected capacity change from 0 to 164 [ 243.329494][ T6716] isofs_fill_super: get root inode failed [ 243.410954][ T6685] XFS (loop7): Ending clean mount [ 243.461419][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 243.495805][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.523849][ T6728] batman_adv: batadv0: Interface deactivated: dummy0 [ 243.530984][ T5662] XFS (loop7): Unmounting Filesystem [ 243.568610][ T6728] batman_adv: batadv0: Removing interface: dummy0 [ 243.617437][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 243.620498][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.622818][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.676640][ T6728] device bridge_slave_0 left promiscuous mode [ 243.749666][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.394526][ T6728] device bridge_slave_1 left promiscuous mode [ 244.396204][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.468514][ T6728] bond0: (slave bond_slave_0): Releasing backup interface [ 244.505613][ T6728] bond0: (slave bond_slave_1): Releasing backup interface [ 244.577225][ T6728] team0: Port device team_slave_0 removed [ 244.594945][ T6728] team0: Port device team_slave_1 removed [ 244.597153][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.601461][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.607205][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.609389][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.677646][ T6733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.687163][ T6733] team0: Port device bond0 added [ 246.642011][ T6776] syz.3.534 (6776): drop_caches: 3 [ 248.852469][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.855677][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.510991][ T6785] loop7: detected capacity change from 0 to 40427 [ 249.547015][ T6819] overlayfs: workdir and upperdir must reside under the same mount [ 249.551520][ T6785] F2FS-fs (loop7): Found nat_bits in checkpoint [ 249.589129][ T6785] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 250.566787][ T6836] device ip6tnl2 entered promiscuous mode [ 250.758002][ T4312] Bluetooth: hci2: hardware error 0x09 [ 250.824980][ T6821] loop4: detected capacity change from 0 to 32768 [ 250.876866][ T6821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.548 (6821) [ 250.921596][ T6821] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.924308][ T6821] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 250.926412][ T6821] BTRFS info (device loop4): enabling ssd optimizations [ 250.928088][ T6821] BTRFS info (device loop4): using spread ssd allocation scheme [ 250.965174][ T6821] BTRFS info (device loop4): using free space tree [ 253.084558][ T4312] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 253.389667][ T6821] BTRFS error (device loop4): open_ctree failed: -22 [ 253.637729][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 253.649900][ T4312] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 253.652213][ T4312] Bluetooth: hci1: Injecting HCI hardware error event [ 253.657293][ T47] Bluetooth: hci1: hardware error 0x00 [ 253.695389][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.762083][ T6911] team0: Port device bond0 removed [ 253.774734][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 253.777233][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.801556][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.820346][ T6914] binder: 6912:6914 tried to acquire reference to desc 0, got 1 instead [ 253.906375][ T6913] team0: Mode changed to "broadcast" [ 253.939685][ T4487] binder: undelivered transaction 70, process died. [ 253.985142][ T6919] device vlan0 entered promiscuous mode [ 254.046907][ T6919] team0: Port device vlan0 added [ 254.159214][ T6911] tipc: Started in network mode [ 254.164037][ T6911] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 254.166070][ T6911] tipc: Enabled bearer , priority 0 [ 254.206213][ T6924] loop0: detected capacity change from 0 to 4096 [ 254.227300][ T6892] 9pnet_fd: Insufficient options for proto=fd [ 254.232385][ T6924] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 255.229869][ T4348] tipc: Node number set to 11578026 [ 255.685750][ T6931] binder: 6930:6931 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 255.909384][ T6931] binder: 6930:6931 got transaction to invalid handle, 1 [ 255.911100][ T6931] binder: 6931:6930 cannot find target node [ 255.912596][ T6931] binder: 6930:6931 transaction async to 0:0 failed 77/29201/-22, size 72-24 line 3054 [ 256.125967][ T47] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 256.203626][ T6931] binder: 6930:6931 ioctl c0306201 20000700 returned -14 [ 256.773529][ T6947] binder: 6942:6947 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 256.780615][ T6947] binder: 6942:6947 got transaction to invalid handle, 1 [ 256.782554][ T6947] binder: 6947:6942 cannot find target node [ 256.784094][ T6947] binder: 6942:6947 transaction call to 0:0 failed 80/29201/-22, size 0-0 line 3054 [ 256.787093][ T6947] binder: 6942:6947 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 256.822814][ T6947] binder: 6947 RLIMIT_NICE not set [ 256.824167][ T6947] binder: 6942:6947 ioctl c0306201 20000240 returned -11 [ 256.868314][ T5761] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.126852][ T6960] loop4: detected capacity change from 0 to 16 [ 257.207028][ T6960] erofs: (device loop4): mounted with root inode @ nid 36. [ 257.304492][ T6960] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 257.353319][ T6960] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 257.355809][ T6960] syz.4.580: attempt to access beyond end of device [ 257.355809][ T6960] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 257.563682][ T6960] syz.4.580: attempt to access beyond end of device [ 257.563682][ T6960] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 258.316447][ T6960] syz.4.580: attempt to access beyond end of device [ 258.316447][ T6960] loop4: rw=524288, sector=67108880, nr_sectors = 16 limit=16 [ 259.572715][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.586'. [ 259.989302][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.586'. [ 261.906434][ T7020] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 262.360818][ T7028] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 262.471997][ T7028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.540819][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'. [ 262.550449][ T7035] vcan0: tx drop: invalid da for name 0x0008000000000000 [ 263.453606][ T7028] device ip6erspan0 entered promiscuous mode [ 263.484554][ T7028] bond2: (slave ip6erspan0): making interface the new active one [ 263.493810][ T7028] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 263.528905][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 263.572728][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.595'. [ 263.587033][ T7028] device bond2 entered promiscuous mode [ 268.035668][ T7114] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 268.037681][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.613'. [ 268.044624][ T7114] batman_adv: batadv0: Adding interface: wlan0 [ 268.046276][ T7114] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.052693][ T7114] batman_adv: batadv0: Interface activated: wlan0 [ 270.817232][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.619'. [ 273.531443][ T7166] loop0: detected capacity change from 0 to 64 [ 273.558329][ T7166] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 277.507926][ T7190] loop3: detected capacity change from 0 to 4096 [ 277.535284][ T7190] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 277.548727][ T7196] input: syz0 as /devices/virtual/input/input2 [ 279.865657][ T7224] loop7: detected capacity change from 0 to 256 [ 279.868023][ T7224] FAT-fs (loop7): Unrecognized mount option "shortname=[Ƚ›[(­ºg$win95" or missing value [ 281.322590][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 281.405254][ T7239] loop0: detected capacity change from 0 to 512 [ 282.495151][ T7244] loop7: detected capacity change from 0 to 8 [ 282.948750][ T7244] SQUASHFS error: Failed to read block 0x6e6: -5 [ 282.950670][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.952567][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.954529][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.956282][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.957957][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.959721][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.961470][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.963178][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.964893][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.967601][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.969547][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.971457][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.973264][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.974943][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.976598][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.978303][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.979926][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.981647][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.983357][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.984992][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.986601][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.988325][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.989982][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.991680][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.993511][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 282.995195][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 282.996932][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 282.998772][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.000418][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.002148][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.003886][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.005663][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.007471][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.009699][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.011550][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.013360][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.015195][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.017011][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.018895][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.020778][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.022598][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.024380][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.026242][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.027985][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.029570][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.031098][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.032816][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.034425][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.035823][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.037514][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.039258][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.040783][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.042534][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.044145][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.045619][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.047460][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.049215][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.050633][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.052370][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.054126][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.055802][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.057618][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.059306][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.060965][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.062843][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.064732][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.066274][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.067870][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.068212][ T7239] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 283.069670][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.073517][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.075255][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.076886][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.078357][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.078719][ T7239] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 283.080097][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.080133][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.085277][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.086984][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.088665][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.090168][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.091927][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.093564][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.095123][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.096892][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.098567][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.100169][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.102030][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.103780][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.105300][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.106995][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.108726][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.110257][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.112045][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.113662][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.115121][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.117053][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.121021][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.122630][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.124504][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.126176][ T7244] SQUASHFS error: Failed to read block 0x0: -5 [ 283.128093][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.130080][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.132245][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.134271][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.136160][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.137964][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.140064][ T7244] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 283.143025][ T7244] SQUASHFS error: read_indexes: reading block [6e4:0] [ 283.233193][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.653'. [ 283.375287][ T7250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.547057][ T7263] net_ratelimit: 244 callbacks suppressed [ 283.547081][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.552356][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.556139][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.559995][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.563528][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.567325][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.571068][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.574943][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.578694][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 283.582345][ T7263] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 284.900114][ T7253] device veth3 entered promiscuous mode [ 284.906107][ T7253] bond1: (slave veth3): Enslaving as an active interface with an up link [ 286.963512][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 287.032386][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 288.066107][ T7301] loop3: detected capacity change from 0 to 8192 [ 288.080323][ T7301] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 288.083793][ T7301] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 288.100776][ T7303] loop7: detected capacity change from 0 to 1764 [ 288.110654][ T7301] REISERFS (device loop3): using ordered data mode [ 288.112291][ T7301] reiserfs: using flush barriers [ 288.114464][ T7308] loop0: detected capacity change from 0 to 2048 [ 288.189236][ T7301] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.194505][ T7308] loop0: p1 < > p2 p3 < p5 > p4 [ 288.194725][ T7301] REISERFS (device loop3): checking transaction log (loop3) [ 288.196323][ T7308] loop0: partition table partially beyond EOD, truncated [ 288.203960][ T7308] loop0: p1 start 4278190080 is beyond EOD, truncated [ 288.212667][ T7308] loop0: p2 start 16908800 is beyond EOD, truncated [ 288.233666][ T7308] loop0: p4 start 11326 is beyond EOD, truncated [ 288.234097][ T7301] REISERFS (device loop3): Using r5 hash to sort names [ 288.243228][ T7308] loop0: p5 start 16908800 is beyond EOD, truncated [ 288.260129][ T7301] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 288.357745][ T7266] udevd[7266]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 288.453242][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'. [ 290.557827][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 296.136649][ T7448] loop7: detected capacity change from 0 to 2048 [ 296.265935][ T7450] netlink: 'syz.5.697': attribute type 10 has an invalid length. [ 296.267910][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.697'. [ 296.271372][ T7450] batman_adv: batadv0: Adding interface: wlan0 [ 296.273055][ T7450] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.279416][ T7450] batman_adv: batadv0: Interface activated: wlan0 [ 296.281050][ T7450] net_ratelimit: 244 callbacks suppressed [ 296.281059][ T7450] batadv0: mtu less than device minimum [ 296.287006][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.292747][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.298345][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.303881][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.305741][ T7455] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.309431][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.314979][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.320586][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.326152][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.331875][ T7450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.527069][ T7448] syz.7.688 sent an empty control message without MSG_MORE. [ 296.779530][ T7475] loop3: detected capacity change from 0 to 8 [ 305.169056][ T7599] loop0: detected capacity change from 0 to 16 [ 305.171206][ T7599] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 309.551559][ T7638] loop3: detected capacity change from 0 to 256 [ 309.553832][ T7638] FAT-fs (loop3): Unrecognized mount option "shortname=[Ƚ›[(­ºg$win95" or missing value [ 309.562026][ T7640] overlayfs: failed to clone upperpath [ 310.290715][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.316686][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.098969][ T6102] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.715684][ T7679] loop7: detected capacity change from 0 to 256 [ 315.411899][ T7679] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 315.414968][ T7679] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 316.530196][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 316.556579][ T7695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.736'. [ 316.575265][ T7700] net_ratelimit: 10 callbacks suppressed [ 316.575277][ T7700] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 316.581265][ T7700] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 317.752726][ T7700] device batadv0 entered promiscuous mode [ 317.757586][ T7700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.794377][ T7700] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 326.130813][ C0] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 327.562836][ T7803] binder: 7801:7803 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 327.565863][ T7803] binder: 7803 RLIMIT_NICE not set [ 328.464438][ T7850] binder: 7801:7850 tried to acquire reference to desc 0, got 1 instead [ 328.466766][ T7803] binder: undelivered transaction 85, put_user failed [ 328.468571][ T7803] binder: 7801:7803 ioctl c0306201 20000280 returned -14 [ 328.624683][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 329.619003][ T7852] device ip6tnl1 entered promiscuous mode [ 329.894288][ T7866] dccp_close: ABORT with 32 bytes unread [ 330.030579][ T7871] loop7: detected capacity change from 0 to 512 [ 330.226631][ T7871] EXT2-fs (loop7): error: revision level too high, forcing read-only mode [ 330.233687][ T7871] EXT2-fs (loop7): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 331.605043][ T7883] loop3: detected capacity change from 0 to 1024 [ 331.607331][ T7883] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.203866][ T7883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.259750][ T7883] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.772: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 333.264295][ T7883] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.772: couldn't read orphan inode 11 (err -117) [ 333.267450][ T7883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 333.280037][ T7883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.772'. [ 333.315882][ T7887] loop0: detected capacity change from 0 to 2048 [ 333.596371][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 333.609082][ T7887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 334.552838][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 334.572357][ T7915] device ip6tnl1 entered promiscuous mode [ 334.769338][ T7925] netlink: 'syz.5.780': attribute type 1 has an invalid length. [ 334.799917][ T7925] device bond1 entered promiscuous mode [ 335.690310][ T7925] bond1: (slave ip6gretap1): making interface the new active one [ 335.708375][ T7925] device ip6gretap1 entered promiscuous mode [ 335.711171][ T7925] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 335.965060][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'. [ 338.139709][ T7971] loop7: detected capacity change from 0 to 8 [ 343.632575][ T8041] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 343.746093][ T8042] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 343.770126][ T8042] device bond1 entered promiscuous mode [ 343.815643][ T8045] device veth5 entered promiscuous mode [ 343.846858][ T8045] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 343.872087][ T8046] bond1: (slave ip6gretap1): making interface the new active one [ 343.874065][ T8046] device ip6gretap1 entered promiscuous mode [ 343.882508][ T8046] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 343.918830][ T8047] device veth7 entered promiscuous mode [ 343.944061][ T8047] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 343.951994][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 343.982028][ T8048] device bond1 left promiscuous mode [ 343.983618][ T8048] device ip6gretap1 left promiscuous mode [ 343.986901][ T8048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.496877][ T8087] loop3: detected capacity change from 0 to 40427 [ 346.962170][ T8087] F2FS-fs (loop3): Found nat_bits in checkpoint [ 347.110901][ T8087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 350.112237][ T8113] loop0: detected capacity change from 0 to 8 [ 354.586961][ T8148] netlink: 'syz.5.828': attribute type 1 has an invalid length. [ 354.627621][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.827'. [ 354.630207][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 354.759928][ T8145] netlink: 96 bytes leftover after parsing attributes in process `syz.7.826'. [ 354.785789][ T8148] device veth3 entered promiscuous mode [ 354.802085][ T8148] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 355.704102][ T8148] device veth5 entered promiscuous mode [ 355.707568][ T8148] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 358.785670][ T47] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 358.788767][ T47] Bluetooth: hci0: Injecting HCI hardware error event [ 358.795594][ T47] Bluetooth: hci0: hardware error 0x00 [ 359.298129][ T8205] tipc: Started in network mode [ 359.307848][ T8205] tipc: Node identity ac1414aa, cluster identity 4711 [ 359.322704][ T8205] tipc: Enabled bearer , priority 10 [ 359.356068][ T8205] tipc: Enabled bearer , priority 0 [ 360.667246][ T4344] tipc: Node number set to 2886997162 [ 361.499203][ T47] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 361.770072][ T8273] netlink: 96 bytes leftover after parsing attributes in process `syz.4.847'. [ 361.817169][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 361.872527][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.875034][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 361.913120][ T8275] device bridge_slave_0 left promiscuous mode [ 361.914820][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.097292][ T8282] loop7: detected capacity change from 0 to 64 [ 362.377156][ T8282] syz.7.857: attempt to access beyond end of device [ 362.377156][ T8282] loop7: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 362.381432][ T8282] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 362.480909][ T8282] Trying to free block not in datazone [ 364.778868][ T8275] device bridge_slave_1 left promiscuous mode [ 364.846661][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.943714][ T8275] bond0: (slave bond_slave_0): Releasing backup interface [ 365.232829][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 366.594800][ T8275] bond0: (slave bond_slave_1): Releasing backup interface [ 366.784712][ T8275] team0: Port device team_slave_0 removed [ 366.786775][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.789163][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.792084][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.794042][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.801565][ T8275] batman_adv: batadv0: Interface deactivated: wlan0 [ 366.803308][ T8275] batman_adv: batadv0: Removing interface: wlan0 [ 366.806963][ T8275] bond1: (slave ip6gretap1): Releasing active interface [ 368.245817][ T8275] bond2: (slave ip6erspan0): Releasing active interface [ 368.260579][ T8327] loop0: detected capacity change from 0 to 128 [ 368.315350][ T8327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 368.372730][ T8327] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 368.432827][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 368.668538][ T8275] bond3: (slave veth5): Releasing backup interface [ 368.670392][ T8275] bond3: (slave veth5): the permanent HWaddr of slave - 86:ce:60:8a:8c:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 368.724195][ T8275] bond3: (slave veth7): Releasing backup interface [ 368.764147][ T8276] team0: Mode changed to "broadcast" [ 368.767847][ T8285] device vlan0 entered promiscuous mode [ 368.774417][ T8285] team0: Port device vlan0 added [ 368.794393][ T8287] tipc: Started in network mode [ 368.795617][ T8287] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 368.797670][ T8287] tipc: Enabled bearer , priority 0 [ 370.008338][ T4633] tipc: Node number set to 11578026 [ 370.057148][ T8353] device ip6tnl1 entered promiscuous mode [ 372.358983][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.388299][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.265919][ T8380] loop7: detected capacity change from 0 to 512 [ 373.311800][ T8380] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 373.376246][ T8385] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 373.385055][ T8380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec098, mo2=0002] [ 373.387287][ T8380] System zones: 1-12 [ 374.393623][ T8385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.490155][ T8393] loop3: detected capacity change from 0 to 16 [ 374.536698][ T8393] erofs: (device loop3): mounted with root inode @ nid 36. [ 375.348922][ T8380] EXT4-fs (loop7): 1 truncate cleaned up [ 375.350421][ T8380] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 376.279332][ T8391] device ip6erspan0 entered promiscuous mode [ 376.302869][ T8391] bond1: (slave ip6erspan0): making interface the new active one [ 376.306133][ T8391] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 376.351753][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'. [ 376.358708][ T5662] EXT4-fs (loop7): unmounting filesystem. [ 376.536419][ T8385] device bond1 entered promiscuous mode [ 376.653805][ T8427] loop3: detected capacity change from 0 to 64 [ 376.876371][ T8427] syz.3.879: attempt to access beyond end of device [ 376.876371][ T8427] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 376.880001][ T8427] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 377.001697][ T8427] Trying to free block not in datazone [ 380.777841][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.782022][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.786013][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.790026][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.793754][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.797439][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.801412][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.805279][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.809014][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 380.812821][ T8446] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 381.223941][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.889'. [ 381.490056][ T8452] tipc: Started in network mode [ 381.491561][ T8452] tipc: Node identity 7, cluster identity 5 [ 381.501860][ T8452] tipc: Node number set to 7 [ 382.803854][ T8471] loop7: detected capacity change from 0 to 164 [ 382.959687][ T8471] rock: directory entry would overflow storage [ 382.961268][ T8471] rock: sig=0x5053, size=7, remaining=4 [ 382.962695][ T8471] isofs_fill_super: root inode is not a directory. Corrupted media? [ 390.791244][ T8552] loop3: detected capacity change from 0 to 8 [ 393.181616][ T8579] loop0: detected capacity change from 0 to 64 [ 397.697079][ T8608] tipc: Failed to remove unknown binding: 66,1,1/7:3106028807/3106028809 [ 397.706161][ T8608] tipc: Failed to remove unknown binding: 66,1,1/7:3106028807/3106028809 [ 397.711520][ T8608] tipc: Failed to remove unknown binding: 66,1,1/7:3106028807/3106028809 [ 399.091862][ T8621] loop3: detected capacity change from 0 to 128 [ 400.084284][ T8621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 401.304678][ T8644] Bluetooth: MGMT ver 1.22 [ 406.547333][ T8681] loop7: detected capacity change from 0 to 512 [ 406.549620][ T8681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.551463][ T8681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.659020][ T8681] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 406.887391][ T5662] EXT4-fs (loop7): unmounting filesystem. [ 408.293907][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.946'. [ 408.529107][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.949'. [ 408.554163][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 414.495283][ T8761] binder: 8759:8761 tried to acquire reference to desc 0, got 1 instead [ 414.504826][ T8761] binder: 8759:8761 ERROR: BC_REGISTER_LOOPER called without request [ 414.507158][ T8761] binder: 8759:8761 Acquire 1 refcount change on invalid ref 3 ret -22 [ 414.633796][ T8767] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 414.669056][ T8761] binder: 8759:8761 got transaction with invalid fd, -1 [ 414.670977][ T8761] binder: 8761:8759 translate fd failed [ 414.672889][ T8761] binder: 8759:8761 transaction async to 8759:0 failed 91/29201/-9, size 72-24 line 3424 [ 414.677105][ T5764] binder: release 8759:8761 transaction 90 out, still active [ 414.698794][ T5764] binder: send failed reply for transaction 90, target dead [ 414.792333][ T27] audit: type=1326 audit(414.740:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.3.958" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed5a768 code=0x0 [ 415.615078][ T8767] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.617392][ T8767] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.637065][ T8767] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.698478][ T8767] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.701830][ T8767] bond2: (slave geneve2): making interface the new active one [ 415.705447][ T8767] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 415.908461][ T8795] xt_nat: multiple ranges no longer supported [ 416.561962][ T8797] loop7: detected capacity change from 0 to 8 [ 417.092624][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 417.182925][ T8774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.212224][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 419.848733][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.972'. [ 419.851156][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.972'. [ 421.935225][ T8849] netlink: 'syz.5.980': attribute type 1 has an invalid length. [ 422.479079][ T8862] xt_nat: multiple ranges no longer supported [ 423.519499][ T8849] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.521783][ T8849] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.523893][ T8849] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.526017][ T8849] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.532770][ T8849] bond3: (slave geneve2): making interface the new active one [ 423.535504][ T8849] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 423.580237][ T8849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.087025][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.993'. [ 427.275121][ T8909] loop0: detected capacity change from 0 to 2048 [ 427.991802][ T8909] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 429.006504][ T8912] loop3: detected capacity change from 0 to 8192 [ 429.111444][ T8912] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 429.215737][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 431.734602][ T8284] Bluetooth: Error in BCSP hdr checksum [ 432.226161][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'. [ 432.689735][ T5560] Bluetooth: Error in BCSP hdr checksum [ 432.690607][ T8965] Bluetooth: hci5: command 0x1003 tx timeout [ 432.709751][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 433.008518][ T4345] Bluetooth: Error in BCSP hdr checksum [ 433.954068][ T47] Bluetooth: hci6: command 0xfc11 tx timeout [ 433.958761][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.960436][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.978529][ T4312] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 434.100291][ T7423] Bluetooth: Error in BCSP hdr checksum [ 434.308814][ T4345] Bluetooth: Error in BCSP hdr checksum [ 434.465217][ T8989] MPTCP: kernel_bind error, err=-98 [ 435.833406][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 440.577785][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 440.580557][ T9060] netlink: 'syz.3.1030': attribute type 5 has an invalid length. [ 440.582459][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1030'. [ 440.615615][ T9060] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 440.617748][ T9060] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 440.673497][ T9060] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 440.675789][ T9060] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 440.739786][ T9060] device geneve2 entered promiscuous mode [ 442.624098][ T9097] loop7: detected capacity change from 0 to 1024 [ 442.662469][ T9097] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 442.697416][ T9097] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 442.715708][ T9097] EXT4-fs error (device loop7): ext4_get_journal_inode:5723: inode #5: comm syz.7.1042: unexpected bad inode w/o EXT4_IGET_BAD [ 443.093272][ T9097] EXT4-fs (loop7): no journal found [ 445.203141][ T9119] binder: 9118:9119 tried to acquire reference to desc 0, got 1 instead [ 445.216211][ T9119] binder_alloc: 9118: binder_alloc_buf failed to map page at 20ffe000 in userspace [ 445.220817][ T9119] binder: cannot allocate buffer: memory allocation failed [ 445.220855][ T9119] binder: 9118:9119 transaction async to 9118:0 failed 97/29201/-12, size 0-0 line 3239 [ 445.234585][ T5761] binder: undelivered TRANSACTION_COMPLETE [ 445.236165][ T5761] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.353295][ T5870] binder: undelivered transaction 96, process died. [ 446.116419][ T9131] loop0: detected capacity change from 0 to 4096 [ 446.238494][ T9134] trusted_key: encrypted_key: insufficient parameters specified [ 447.215333][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'. [ 450.121891][ T9177] netlink: 'syz.5.1061': attribute type 1 has an invalid length. [ 450.136797][ T9177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.274424][ T9177] bond4: (slave gretap1): making interface the new active one [ 450.277177][ T9177] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 450.289565][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 450.446683][ T27] audit: type=1326 audit(450.380:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 450.458287][ T27] audit: type=1326 audit(450.390:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 450.463492][ T27] audit: type=1326 audit(450.390:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 450.510341][ T27] audit: type=1326 audit(450.390:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 450.515853][ T27] audit: type=1326 audit(450.400:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 450.836276][ T27] audit: type=1326 audit(450.400:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 451.060295][ T27] audit: type=1326 audit(450.400:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 451.243566][ T27] audit: type=1326 audit(450.400:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 451.335707][ T27] audit: type=1326 audit(450.400:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 451.358070][ T27] audit: type=1326 audit(450.400:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb5a768 code=0x7ffc0000 [ 453.007204][ T9228] loop0: detected capacity change from 0 to 512 [ 453.094623][ T9228] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1071: inode #1: comm syz.0.1071: iget: illegal inode # [ 453.117520][ T9228] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1071: error while reading EA inode 1 err=-117 [ 453.130801][ T9228] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1071: inode #1: comm syz.0.1071: iget: illegal inode # [ 453.174502][ T9228] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1071: error while reading EA inode 1 err=-117 [ 453.212055][ T9228] EXT4-fs (loop0): 1 orphan inode deleted [ 453.213384][ T9228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 453.263003][ T9228] 9pnet_fd: Insufficient options for proto=fd [ 453.289939][ T9228] fuse: Bad value for 'fd' [ 453.458468][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 454.367651][ T9249] loop0: detected capacity change from 0 to 64 [ 454.466232][ T9254] set match dimension is over the limit! [ 454.643020][ T9259] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.645666][ T9259] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.647742][ T9259] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.650107][ T9259] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.670355][ T9259] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 454.855202][ T9261] loop7: detected capacity change from 0 to 2048 [ 456.638800][ T9261] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 456.790924][ T9286] loop0: detected capacity change from 0 to 2048 [ 456.873308][ T9286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.104819][ T9294] tipc: Enabled bearer , priority 10 [ 457.683308][ T5662] EXT4-fs (loop7): unmounting filesystem. [ 458.682944][ T9307] binder: 9299:9307 tried to acquire reference to desc 0, got 1 instead [ 458.685324][ T9307] binder: 9299:9307 ioctl c0306201 200003c0 returned -14 [ 459.416979][ T5870] binder: release 9299:9307 transaction 102 out, still active [ 459.509263][ T5870] binder: undelivered TRANSACTION_COMPLETE [ 459.779853][ T5870] binder: send failed reply for transaction 102, target dead [ 459.822497][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.282624][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.286048][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.288120][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.456502][ T9376] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 462.663722][ T9386] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 462.755893][ T9390] loop7: detected capacity change from 0 to 16 [ 462.772105][ T9390] erofs: (device loop7): mounted with root inode @ nid 36. [ 463.569128][ T9386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.629475][ T9391] bond3: (slave veth5): Enslaving as an active interface with a down link [ 464.093362][ T9392] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 465.369042][ T9386] device veth1 entered promiscuous mode [ 465.371078][ T9386] device veth1 left promiscuous mode [ 465.378564][ T9396] loop7: detected capacity change from 0 to 8192 [ 466.148821][ T9386] bond3: (slave vlan2): making interface the new active one [ 466.189249][ T9386] device veth1 entered promiscuous mode [ 466.201075][ T9386] device vlan2 entered promiscuous mode [ 466.202890][ T9386] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 466.258924][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 468.182010][ T9436] overlayfs: failed to clone lowerpath [ 470.043445][ T9445] loop0: detected capacity change from 0 to 1024 [ 470.099523][ T9445] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 470.102110][ T9445] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 470.238528][ T9445] EXT4-fs error (device loop0): ext4_get_journal_inode:5723: inode #5: comm syz.0.1125: unexpected bad inode w/o EXT4_IGET_BAD [ 470.651829][ T9445] EXT4-fs (loop0): no journal found [ 471.280293][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 471.486485][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 472.208351][ C1] Unable to handle kernel paging request at virtual address dfff800000000068 [ 472.210890][ C1] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 472.213137][ C1] Mem abort info: [ 472.214102][ C1] ESR = 0x0000000096000006 [ 472.215317][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 472.216808][ C1] SET = 0, FnV = 0 [ 472.217698][ C1] EA = 0, S1PTW = 0 [ 472.218802][ C1] FSC = 0x06: level 2 translation fault [ 472.220201][ C1] Data abort info: [ 472.221158][ C1] ISV = 0, ISS = 0x00000006 [ 472.222237][ C1] CM = 0, WnR = 0 [ 472.223131][ C1] [dfff800000000068] address between user and kernel address ranges [ 472.225357][ C1] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 472.227191][ C1] Modules linked in: [ 472.228175][ C1] CPU: 1 PID: 9475 Comm: syz.5.1134 Not tainted 6.1.140-syzkaller #0 [ 472.230301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.232878][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 472.234921][ C1] pc : find_match+0xa0/0xb0c [ 472.236098][ C1] lr : find_match+0x74/0xb0c [ 472.237331][ C1] sp : ffff8000080166c0 [ 472.238317][ C1] x29: ffff8000080166e0 x28: 1fffe000189b28c4 x27: dfff800000000000 [ 472.240573][ C1] x26: 0000000000000340 x25: ffff0000c4d94637 x24: 0000000000000201 [ 472.242576][ C1] x23: 0000000000000002 x22: ffff0000c4d94620 x21: 0000000000000000 [ 472.244634][ C1] x20: 1fffe000189b28c6 x19: 0000000000000000 x18: ffff800011a7bd00 [ 472.246600][ C1] x17: 0000000000000000 x16: ffff8000082d076c x15: 0000000000000000 [ 472.248538][ C1] x14: 000000000000c0fe x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 472.250589][ C1] x11: ff0080001077823c x10: 0000000000000000 x9 : ffff0000de881bc0 [ 472.252635][ C1] x8 : 0000000000000068 x7 : ffff800008016a70 x6 : 0000000000000002 [ 472.254671][ C1] x5 : ffff800008016a70 x4 : ffff800008016a60 x3 : 0000000000000002 [ 472.256691][ C1] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 472.258770][ C1] Call trace: [ 472.259591][ C1] find_match+0xa0/0xb0c [ 472.260585][ C1] rt6_nh_find_match+0xcc/0x138 [ 472.261795][ C1] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 472.263215][ C1] __find_rr_leaf+0x3b8/0x5c8 [ 472.264305][ C1] fib6_table_lookup+0x308/0x8b8 [ 472.265543][ C1] ip6_pol_route+0x1f4/0x1024 [ 472.266653][ C1] ip6_pol_route_output+0x60/0x94 [ 472.267875][ C1] fib6_rule_lookup+0x258/0x4a8 [ 472.269168][ C1] ip6_route_output_flags_noref+0x250/0x314 [ 472.270624][ C1] ip6_route_output_flags+0xe4/0x368 [ 472.271874][ C1] ip6_dst_lookup_tail+0x168/0x12c0 [ 472.273216][ C1] ip6_dst_lookup_flow+0x54/0xe0 [ 472.274479][ C1] geneve_get_v6_dst+0x648/0x954 [ 472.275709][ C1] geneve_xmit+0x970/0x2f18 [ 472.276802][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 472.278076][ C1] __dev_queue_xmit+0x155c/0x309c [ 472.279357][ C1] ip6_finish_output2+0xd2c/0x1844 [ 472.280724][ C1] ip6_finish_output+0x594/0x930 [ 472.281990][ C1] ip6_output+0x274/0x500 [ 472.283050][ C1] ndisc_send_skb+0xc38/0x1680 [ 472.284257][ C1] ndisc_send_rs+0x378/0x514 [ 472.285339][ C1] addrconf_rs_timer+0x2f4/0x574 [ 472.286624][ C1] call_timer_fn+0x1b8/0x964 [ 472.287712][ C1] __run_timers+0x460/0x6bc [ 472.288807][ C1] run_timer_softirq+0x7c/0x114 [ 472.290044][ C1] handle_softirqs+0x318/0xc6c [ 472.291186][ C1] __do_softirq+0x14/0x20 [ 472.292094][ C1] ____do_softirq+0x14/0x20 [ 472.293278][ C1] call_on_irq_stack+0x24/0x4c [ 472.294530][ C1] do_softirq_own_stack+0x20/0x2c [ 472.295841][ C1] __irq_exit_rcu+0x23c/0x43c [ 472.296954][ C1] irq_exit_rcu+0x14/0x84 [ 472.298041][ C1] el1_interrupt+0x38/0x54 [ 472.299082][ C1] el1h_64_irq_handler+0x18/0x24 [ 472.300335][ C1] el1h_64_irq+0x64/0x68 [ 472.301361][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 472.302765][ C1] __wake_up_sync_key+0x11c/0x178 [ 472.304016][ C1] __unix_dgram_recvmsg+0x37c/0xb00 [ 472.305294][ C1] unix_dgram_recvmsg+0xd0/0xe8 [ 472.306600][ C1] ____sys_recvmsg+0x62c/0x71c [ 472.307855][ C1] do_recvmmsg+0x364/0x96c [ 472.308949][ C1] __arm64_sys_recvmmsg+0x17c/0x238 [ 472.310297][ C1] invoke_syscall+0x98/0x2bc [ 472.311442][ C1] el0_svc_common+0x138/0x258 [ 472.312653][ C1] do_el0_svc+0x58/0x13c [ 472.313674][ C1] el0_svc+0x58/0x138 [ 472.314615][ C1] el0t_64_sync_handler+0x84/0xf0 [ 472.315856][ C1] el0t_64_sync+0x18c/0x190 [ 472.317070][ C1] Code: 960576aa f94002c8 910d011a d343ff48 (387b6908) [ 472.318734][ C1] ---[ end trace 0000000000000000 ]--- [ 472.844624][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 472.846756][ C1] SMP: stopping secondary CPUs [ 472.847961][ C1] Kernel Offset: disabled [ 472.849083][ C1] CPU features: 0x080000,02070084,26017203 [ 472.850556][ C1] Memory Limit: none [ 473.383978][ C1] Rebooting in 86400 seconds..