last executing test programs: 2m50.132594638s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$session_to_parent(0x12) setresuid(0xee01, 0x0, 0xffffffffffffffff) 2m48.979826872s ago: executing program 2 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4000000, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x4005, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x10000, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x9, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x20005, 0xfffffffe, 0x100, 0x3, 0x9, 0x5, 0x9, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x1, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x2, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m46.109260425s ago: executing program 2 (id=25): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m44.59206021s ago: executing program 2 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/169, 0xa9) 2m44.494451767s ago: executing program 2 (id=33): fspick(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000120000000000000000000000020100000000002e"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2m42.195820849s ago: executing program 2 (id=39): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 2m41.482140196s ago: executing program 32 (id=39): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 1m25.588960204s ago: executing program 4 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m24.662397804s ago: executing program 4 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 1m22.398469848s ago: executing program 4 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000300)=0xfb66, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4, @loopback}, 0x10) 1m20.687697614s ago: executing program 4 (id=304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m20.371739356s ago: executing program 4 (id=307): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2800c12, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x261, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m18.236054959s ago: executing program 4 (id=310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6e03ac64962092fe}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc08}}, 0x120) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x4}, {0x0, 0x9}}}, 0x24}}, 0x4000004) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m17.20958374s ago: executing program 33 (id=310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6e03ac64962092fe}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc08}}, 0x120) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x4}, {0x0, 0x9}}}, 0x24}}, 0x4000004) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10.779574302s ago: executing program 3 (id=527): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 9.915872539s ago: executing program 0 (id=528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "03f27a09b5d924d2", "3219c8a647b0d3fecfa0c0eb35d3bcdc", "2ac9fae2", "d359754c201e6b66"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 9.599840479s ago: executing program 6 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 8.784627626s ago: executing program 1 (id=532): fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[0x0]) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) 8.762703043s ago: executing program 5 (id=533): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 8.647854556s ago: executing program 3 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 8.647419471s ago: executing program 0 (id=536): r0 = socket$inet_dccp(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/69, 0x45) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000010140), &(0x7f0000000740)=0x4) 7.957359627s ago: executing program 5 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000008d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x24}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', 0x8, 0x8c) syz_fuse_handle_req(r3, &(0x7f000000bdc0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x0, {0x2, 0x0, 0x2, 0x800000000000000, 0x81, 0x0, {0x4, 0x8000000000000000, 0x800, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000, 0x4000000, 0x0, r5, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.992046838s ago: executing program 6 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000440)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@discard}]}, 0x1, 0x369, &(0x7f0000000700)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 6.911451707s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 6.911056208s ago: executing program 0 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 6.88576253s ago: executing program 1 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/224, 0xe0}], 0x1}, 0x12142) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 4.962012634s ago: executing program 6 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 4.892539055s ago: executing program 1 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.891280382s ago: executing program 5 (id=544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfe) 4.890539093s ago: executing program 3 (id=545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x16, &(0x7f0000000480)=[{&(0x7f0000000780)='x', 0xfffffe2f}], 0x1}}], 0x1, 0x4008440) sendto$inet(r0, &(0x7f0000000700)='U', 0x1, 0x1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x13, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x101}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 4.539255177s ago: executing program 0 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 4.331893235s ago: executing program 6 (id=547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x9}}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) 3.657882805s ago: executing program 1 (id=548): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 3.637359369s ago: executing program 5 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.636168025s ago: executing program 6 (id=550): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000002, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}]}}}], 0x38}, 0x0) 3.515902554s ago: executing program 0 (id=551): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) 2.590540869s ago: executing program 3 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 2.338792437s ago: executing program 1 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r3, r3}, &(0x7f00000000c0)=""/50, 0x5, &(0x7f0000000000)={&(0x7f0000000280)={'xxhash64\x00'}}) 2.337502852s ago: executing program 5 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x80005520, 0x0) 2.027891217s ago: executing program 0 (id=555): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x103, 0x0, 0x1}, &(0x7f0000ffe000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 1.543931362s ago: executing program 6 (id=556): listen(0xffffffffffffffff, 0x101) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000a40), 0x26, 0x759, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x40, 0x0) open_by_handle_at(r1, 0x0, 0x10000) r2 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000004c0)={0xe, 0x54, 0x1}) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 966.308002ms ago: executing program 1 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 965.494278ms ago: executing program 3 (id=558): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000200000000000000f5000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 0s ago: executing program 5 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x2, 0x0, &(0x7f0000000000)) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0xfffffff7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 39.280802][ T6475] cgroup: Unknown subsys name 'net' [ 39.577095][ T6475] cgroup: Unknown subsys name 'cpuset' [ 39.580537][ T6475] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.938148][ T6475] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 41.422926][ T6503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.424294][ T6503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.424764][ T6503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.425130][ T6503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.425816][ T6503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.426142][ T6503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.426467][ T6503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.426771][ T6503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.427825][ T6503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.428016][ T6503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.428249][ T6503] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.428488][ T6503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.429010][ T6503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.430284][ T6503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.431159][ T6503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.441853][ T6505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.444571][ T6503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.445076][ T6503] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.446939][ T6503] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.447141][ T6503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.449424][ T6503] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.452031][ T6503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.482210][ T6501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.487455][ T6502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.490067][ T6501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.781928][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 41.805345][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 41.861356][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 41.909053][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 41.971119][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.973190][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.975033][ T6488] bridge_slave_0: entered allmulticast mode [ 41.975957][ T6488] bridge_slave_0: entered promiscuous mode [ 42.017886][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.017978][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.018111][ T6487] bridge_slave_0: entered allmulticast mode [ 42.018927][ T6487] bridge_slave_0: entered promiscuous mode [ 42.020580][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.020624][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.020731][ T6487] bridge_slave_1: entered allmulticast mode [ 42.021580][ T6487] bridge_slave_1: entered promiscuous mode [ 42.032570][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.032991][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.033134][ T6488] bridge_slave_1: entered allmulticast mode [ 42.033975][ T6488] bridge_slave_1: entered promiscuous mode [ 42.039968][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 42.117374][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.119082][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.143506][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.148075][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.149033][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.149107][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.149232][ T6489] bridge_slave_0: entered allmulticast mode [ 42.150068][ T6489] bridge_slave_0: entered promiscuous mode [ 42.151370][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.151413][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.151562][ T6489] bridge_slave_1: entered allmulticast mode [ 42.152427][ T6489] bridge_slave_1: entered promiscuous mode [ 42.168873][ T6488] team0: Port device team_slave_0 added [ 42.169625][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.169668][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.169821][ T6490] bridge_slave_0: entered allmulticast mode [ 42.170692][ T6490] bridge_slave_0: entered promiscuous mode [ 42.172629][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.172672][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.172803][ T6490] bridge_slave_1: entered allmulticast mode [ 42.173676][ T6490] bridge_slave_1: entered promiscuous mode [ 42.218278][ T6488] team0: Port device team_slave_1 added [ 42.233092][ T6487] team0: Port device team_slave_0 added [ 42.237071][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.253798][ T6487] team0: Port device team_slave_1 added [ 42.256550][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.269845][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.271721][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.274960][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.277040][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.278071][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.278095][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.278128][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.311219][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.345646][ T6489] team0: Port device team_slave_0 added [ 42.355600][ T6490] team0: Port device team_slave_0 added [ 42.357772][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.357837][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.357960][ T6493] bridge_slave_0: entered allmulticast mode [ 42.360396][ T6493] bridge_slave_0: entered promiscuous mode [ 42.361938][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.361984][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.362093][ T6493] bridge_slave_1: entered allmulticast mode [ 42.362956][ T6493] bridge_slave_1: entered promiscuous mode [ 42.372512][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.374495][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.379434][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.380534][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.380558][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.380590][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.385492][ T6489] team0: Port device team_slave_1 added [ 42.405825][ T6490] team0: Port device team_slave_1 added [ 42.410658][ T6488] hsr_slave_0: entered promiscuous mode [ 42.412850][ T6488] hsr_slave_1: entered promiscuous mode [ 42.444419][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.452330][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.454286][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.455472][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.456562][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.456587][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.456619][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.483049][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.483101][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.483140][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.489449][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.489477][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.489511][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.491382][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.526089][ T6489] hsr_slave_0: entered promiscuous mode [ 42.526610][ T6489] hsr_slave_1: entered promiscuous mode [ 42.527301][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.527404][ T6489] Cannot create hsr debugfs directory [ 42.549255][ T6487] hsr_slave_0: entered promiscuous mode [ 42.549823][ T6487] hsr_slave_1: entered promiscuous mode [ 42.550199][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.550229][ T6487] Cannot create hsr debugfs directory [ 42.574241][ T6493] team0: Port device team_slave_0 added [ 42.597682][ T6493] team0: Port device team_slave_1 added [ 42.639067][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.639125][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.639169][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.653855][ T6490] hsr_slave_0: entered promiscuous mode [ 42.654380][ T6490] hsr_slave_1: entered promiscuous mode [ 42.655303][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.655333][ T6490] Cannot create hsr debugfs directory [ 42.670931][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.670983][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.671028][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.783138][ T6493] hsr_slave_0: entered promiscuous mode [ 42.785383][ T6493] hsr_slave_1: entered promiscuous mode [ 42.787383][ T6493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.789363][ T6493] Cannot create hsr debugfs directory [ 42.939902][ T6488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.945372][ T6488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.949437][ T6488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.964398][ T6488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.011872][ T6487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.020194][ T6487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.032177][ T6487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.034466][ T6487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.070517][ T6489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.081724][ T6489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.086083][ T6489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.091955][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.101798][ T6489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.137566][ T6490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.142715][ T6490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.147159][ T6490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.153236][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.167467][ T6490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.198764][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.198901][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.204439][ T6493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.227693][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.227775][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.233495][ T6493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.237300][ T6493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.239163][ T6493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.270058][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.324280][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.347194][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.347273][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.352182][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.359160][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.378198][ T6487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.380471][ T6487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.389497][ T204] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.389588][ T204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.393691][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.393776][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.397187][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.397255][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.436664][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.450101][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.459410][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.477438][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.478653][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.478699][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.486162][ T6502] Bluetooth: hci0: command tx timeout [ 43.487780][ T6502] Bluetooth: hci1: command tx timeout [ 43.513230][ T6488] veth0_vlan: entered promiscuous mode [ 43.518064][ T6488] veth1_vlan: entered promiscuous mode [ 43.533824][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.533919][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.554454][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.570031][ T6502] Bluetooth: hci3: command tx timeout [ 43.570059][ T55] Bluetooth: hci4: command tx timeout [ 43.570410][ T55] Bluetooth: hci2: command tx timeout [ 43.578312][ T2206] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.578390][ T2206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.588572][ T6488] veth0_macvtap: entered promiscuous mode [ 43.609910][ T2206] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.610008][ T2206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.612178][ T6488] veth1_macvtap: entered promiscuous mode [ 43.634492][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.681148][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.683010][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.684531][ T6488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.684589][ T6488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.698379][ T6488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.700970][ T6488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.708176][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.809527][ T6487] veth0_vlan: entered promiscuous mode [ 43.831004][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.853987][ T6487] veth1_vlan: entered promiscuous mode [ 43.873777][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.876117][ T6487] veth0_macvtap: entered promiscuous mode [ 43.877848][ T6487] veth1_macvtap: entered promiscuous mode [ 43.880904][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.892658][ T6489] veth0_vlan: entered promiscuous mode [ 43.917443][ T6489] veth1_vlan: entered promiscuous mode [ 43.928066][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.932139][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.953547][ T6487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.953614][ T6487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.953660][ T6487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.953697][ T6487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.985547][ T6489] veth0_macvtap: entered promiscuous mode [ 43.989314][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.998174][ T6489] veth1_macvtap: entered promiscuous mode [ 43.999085][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.999114][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.069192][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.069961][ T6490] veth0_vlan: entered promiscuous mode [ 44.076840][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.076905][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.079237][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.083233][ T6490] veth1_vlan: entered promiscuous mode [ 44.102166][ T6493] veth0_vlan: entered promiscuous mode [ 44.107719][ T6489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.107789][ T6489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.108219][ T6489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.108250][ T6489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.119821][ T6488] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.132410][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.135818][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.181498][ T6490] veth0_macvtap: entered promiscuous mode [ 44.184163][ T6490] veth1_macvtap: entered promiscuous mode [ 44.204511][ T6493] veth1_vlan: entered promiscuous mode [ 44.232889][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.247002][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.251250][ T6490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.253637][ T6490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.256351][ T6490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.258684][ T6490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.282752][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.285410][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.439502][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.439553][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.960908][ T6493] veth0_macvtap: entered promiscuous mode [ 44.982872][ T6493] veth1_macvtap: entered promiscuous mode [ 45.037709][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.043027][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.045732][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.054002][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.079426][ T6493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.079498][ T6493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.080443][ T6493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.080498][ T6493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.234527][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.242150][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.296152][ T6580] overlayfs: statfs failed on './file0' [ 45.393518][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.393571][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.403416][ T310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.403464][ T310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.615203][ T6501] Bluetooth: hci1: command tx timeout [ 45.617409][ T6501] Bluetooth: hci0: command tx timeout [ 45.644928][ T55] Bluetooth: hci3: command tx timeout [ 45.645404][ T55] Bluetooth: hci4: command tx timeout [ 45.654718][ T55] Bluetooth: hci2: command tx timeout [ 47.842383][ T6501] Bluetooth: hci0: command tx timeout [ 47.842453][ T6501] Bluetooth: hci1: command tx timeout [ 47.842508][ T6501] Bluetooth: hci2: command tx timeout [ 47.842547][ T6501] Bluetooth: hci4: command tx timeout [ 47.879665][ T6501] Bluetooth: hci3: command tx timeout [ 48.033154][ T6616] loop4: detected capacity change from 0 to 4096 [ 48.839705][ T6616] NILFS (loop4): invalid segment: Checksum error in segment payload [ 48.839812][ T6616] NILFS (loop4): trying rollback from an earlier position [ 49.896115][ T55] Bluetooth: hci3: command tx timeout [ 49.896188][ T55] Bluetooth: hci4: command tx timeout [ 49.896240][ T55] Bluetooth: hci2: command tx timeout [ 49.896279][ T55] Bluetooth: hci1: command tx timeout [ 49.896317][ T55] Bluetooth: hci0: command tx timeout [ 50.086947][ T6616] NILFS (loop4): recovery complete [ 50.116794][ T6647] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.526452][ T6660] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 52.346051][ T6665] loop4: detected capacity change from 0 to 32768 [ 52.809897][ T6669] binder: 6666:6669 tried to acquire reference to desc 0, got 1 instead [ 52.810611][ T6669] binder: 6666:6669 got transaction to invalid handle, 3 [ 52.810710][ T6669] binder: 6669:6666 cannot find target node [ 52.810738][ T6669] binder: 6666:6669 transaction call to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3150 [ 52.813013][ T6494] binder: undelivered TRANSACTION_COMPLETE [ 52.813075][ T6494] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.879643][ T6477] binder: undelivered transaction 5, process died. [ 52.953454][ T6665] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 52.975036][ T6665] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 52.975036][ T6665] allowing incompatible features above 0.0: (unknown version) [ 52.975200][ T6665] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 52.975364][ T6665] bcachefs (loop4): Version upgrade required: [ 52.975364][ T6665] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 52.975364][ T6665] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 52.975364][ T6665] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 53.005968][ T6665] bcachefs (loop4): dropping and reconstructing all alloc info [ 53.018964][ T6665] bcachefs (loop4): accounting_read... done [ 54.246205][ T6665] bcachefs (loop4): alloc_read... done [ 54.248736][ T6665] bcachefs (loop4): snapshots_read... done [ 54.252552][ T6665] bcachefs (loop4): check_allocations... [ 54.279294][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.289061][ T6665] done [ 54.291905][ T6665] bcachefs (loop4): going read-write [ 54.292032][ T6665] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1 [ 54.292032][ T6665] rw journal devs: [ 54.379207][ T6699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.441179][ T6665] bcachefs (loop4): done starting filesystem [ 54.477523][ T6695] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.565410][ T6493] bcachefs (loop4): shutting down [ 56.565518][ T6493] bcachefs (loop4): going read-only [ 56.565644][ T6493] bcachefs (loop4): finished waiting for writes to stop [ 56.605633][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.611070][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.617112][ T6493] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 56.617371][ T6493] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 56.622908][ T6493] bcachefs (loop4): unclean shutdown complete, journal seq 10 [ 56.665670][ T6493] bcachefs (loop4): done going read-only, filesystem not clean [ 56.854561][ T6493] bcachefs (loop4): shutdown complete [ 57.440649][ T6591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.607149][ T6591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.685081][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.695013][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.697703][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.700604][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.703184][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.707324][ T6591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.936061][ T6591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.944304][ T6754] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 60.810135][ T6764] Cannot find add_set index 0 as target [ 60.846292][ T6501] Bluetooth: hci2: command tx timeout [ 61.243461][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.244016][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.675849][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.680131][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.193900][ T6501] Bluetooth: hci2: command tx timeout [ 63.269980][ T6754] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.270062][ T6754] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.270556][ T6754] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.270747][ T6754] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.850899][ T2391] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.852839][ T2391] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.132293][ T6790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.58'. [ 65.149447][ T6795] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 65.149647][ T6795] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 65.154449][ T6795] binder: 6795 RLIMIT_NICE not set [ 65.200293][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.201150][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.230539][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 65.254920][ T6501] Bluetooth: hci2: command tx timeout [ 65.337566][ T6801] binder: 6800:6801 ioctl 4018620d 0 returned -22 [ 65.340090][ T6801] binder: 6800:6801 tried to acquire reference to desc 0, got 1 instead [ 65.343265][ T6801] binder_alloc: 6800: binder_alloc_buf, no vma [ 65.347793][ T6801] binder: cannot allocate buffer: vma cleared, target dead or dying [ 65.348306][ T6801] binder: 6800:6801 transaction call to 6800:0 failed 11/29189/-3, code 0 size 252-0 line 3338 [ 65.381151][ T9] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.418650][ T6591] bridge_slave_1: left allmulticast mode [ 65.418744][ T6591] bridge_slave_1: left promiscuous mode [ 65.419294][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.435259][ T6591] bridge_slave_0: left allmulticast mode [ 65.435318][ T6591] bridge_slave_0: left promiscuous mode [ 65.435424][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.535542][ T6494] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.038605][ T6494] usb 1-1: device descriptor read/64, error -71 [ 66.187474][ T26] kernel write not supported for file bpf-prog (pid: 26 comm: kworker/1:1) [ 67.093586][ T6494] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.231571][ T6494] usb 1-1: device descriptor read/64, error -71 [ 67.325162][ T6501] Bluetooth: hci2: command tx timeout [ 67.334898][ T6494] usb usb1-port1: attempt power cycle [ 67.795094][ T6494] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.821332][ T6494] usb 1-1: device descriptor read/8, error -71 [ 68.106023][ T6494] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.184210][ T6494] usb 1-1: device descriptor read/8, error -71 [ 68.298133][ T6494] usb usb1-port1: unable to enumerate USB device [ 68.393252][ T6842] loop4: detected capacity change from 0 to 4096 [ 68.533604][ T6845] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.067506][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 69.174456][ T6852] loop0: detected capacity change from 0 to 2048 [ 69.205931][ T6854] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.910802][ T6591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.975973][ T1800] cfg80211: failed to load regulatory.db [ 70.063900][ T6591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.071972][ T31] audit: type=1326 audit(69.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 70.089080][ T31] audit: type=1326 audit(69.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 70.116391][ T6591] bond0 (unregistering): Released all slaves [ 70.183079][ T6827] syz_tun: entered allmulticast mode [ 70.183595][ T6827] syz_tun: left allmulticast mode [ 71.177957][ T6877] loop1: detected capacity change from 0 to 256 [ 71.196190][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.198383][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.200653][ T6737] bridge_slave_0: entered allmulticast mode [ 71.203468][ T6737] bridge_slave_0: entered promiscuous mode [ 72.277226][ T6478] IPVS: starting estimator thread 0... [ 72.466607][ T6892] IPVS: using max 34 ests per chain, 81600 per kthread [ 73.243479][ T31] audit: type=1326 audit(72.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 73.638412][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.638498][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.638654][ T6737] bridge_slave_1: entered allmulticast mode [ 73.639537][ T6737] bridge_slave_1: entered promiscuous mode [ 73.694534][ T6911] loop0: detected capacity change from 0 to 512 [ 73.707440][ T6908] loop4: detected capacity change from 0 to 2048 [ 73.711682][ T6908] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.711774][ T6908] EXT4-fs: Ignoring removed nobh option [ 73.727083][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.765304][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.868478][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.872656][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.207320][ T6493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.214208][ T6488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.069017][ T6737] team0: Port device team_slave_0 added [ 75.129229][ T6934] loop1: detected capacity change from 0 to 1024 [ 75.129850][ T6934] ======================================================= [ 75.129850][ T6934] WARNING: The mand mount option has been deprecated and [ 75.129850][ T6934] and is ignored by this kernel. Remove the mand [ 75.129850][ T6934] option from the mount to silence this warning. [ 75.129850][ T6934] ======================================================= [ 75.129953][ T6934] EXT4-fs: Ignoring removed nobh option [ 75.153587][ T6934] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.191404][ T6934] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.95: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 75.201396][ T6934] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.95: couldn't read orphan inode 11 (err -117) [ 75.206047][ T6934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.251982][ T6907] loop3: detected capacity change from 0 to 40427 [ 75.284351][ T6591] hsr_slave_0: left promiscuous mode [ 75.287055][ T6591] hsr_slave_1: left promiscuous mode [ 75.288862][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.288965][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.297575][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.297640][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.344493][ T6591] veth1_macvtap: left promiscuous mode [ 75.348739][ T6591] veth0_macvtap: left promiscuous mode [ 75.348872][ T6591] veth1_vlan: left promiscuous mode [ 75.348979][ T6591] veth0_vlan: left promiscuous mode [ 76.481147][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.265749][ T6955] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 77.265976][ T6955] CIFS mount error: No usable UNC path provided in device string! [ 77.265976][ T6955] [ 77.266376][ T6955] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.554229][ T6946] delete_channel: no stack [ 78.882315][ T6963] loop1: detected capacity change from 0 to 1024 [ 78.883596][ T6963] EXT4-fs: Ignoring removed nobh option [ 78.883631][ T6963] EXT4-fs: Ignoring removed bh option [ 78.911795][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.128714][ T6591] team0 (unregistering): Port device team_slave_1 removed [ 79.296299][ T6591] team0 (unregistering): Port device team_slave_0 removed [ 79.761789][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.819710][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.103'. [ 79.819815][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 79.819841][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.103'. [ 79.819874][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.103'. [ 79.899692][ T6972] binder: 6971:6972 tried to acquire reference to desc 0, got 1 instead [ 79.901517][ T6972] binder: 6971:6972 ioctl c0306201 200003c0 returned -14 [ 79.902151][ T6972] binder: 6971:6972 got transaction with invalid data ptr [ 79.902250][ T6972] binder: 6971:6972 transaction call to 6971:0 failed 16/29201/-14, code 0 size 0-24 line 3441 [ 79.904416][ T1800] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.984029][ T6593] Bluetooth: hci6: Frame reassembly failed (-84) [ 80.235949][ T310] Bluetooth: Error in BCSP hdr checksum [ 80.495078][ T2206] Bluetooth: Error in BCSP hdr checksum [ 80.755059][ T2206] Bluetooth: Error in BCSP hdr checksum [ 81.015830][ T2206] Bluetooth: Error in BCSP hdr checksum [ 81.275674][ T204] Bluetooth: Error in BCSP hdr checksum [ 81.360465][ T6737] team0: Port device team_slave_1 added [ 81.375865][ T6937] lo speed is unknown, defaulting to 1000 [ 81.377216][ T6937] lo speed is unknown, defaulting to 1000 [ 81.378288][ T6937] lo speed is unknown, defaulting to 1000 [ 81.455107][ T6937] infiniband syz0: set down [ 81.455202][ T6937] infiniband syz0: added lo [ 81.457585][ T6937] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 81.459196][ T6937] infiniband syz0: Couldn't open port 1 [ 81.468224][ T6937] RDS/IB: syz0: added [ 81.468460][ T6937] smc: adding ib device syz0 with port count 1 [ 81.468537][ T6937] smc: ib device syz0 port 1 has pnetid [ 81.469916][ T6937] lo speed is unknown, defaulting to 1000 [ 81.487255][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.489229][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.500955][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.506340][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.508200][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.519862][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.556726][ T6592] Bluetooth: Error in BCSP hdr checksum [ 81.598068][ T6937] lo speed is unknown, defaulting to 1000 [ 81.669868][ T6937] lo speed is unknown, defaulting to 1000 [ 81.697103][ T6978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.713720][ T6978] loop3: detected capacity change from 0 to 1024 [ 81.741477][ T6978] EXT4-fs: Ignoring removed orlov option [ 81.747580][ T6978] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 81.820495][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.823595][ T26] lo speed is unknown, defaulting to 1000 [ 81.824250][ T6477] lo speed is unknown, defaulting to 1000 [ 81.825198][ T6937] lo speed is unknown, defaulting to 1000 [ 81.897680][ T6937] lo speed is unknown, defaulting to 1000 [ 81.914451][ T6592] Bluetooth: Error in BCSP hdr checksum [ 82.001160][ T6737] hsr_slave_0: entered promiscuous mode [ 82.001697][ T6737] hsr_slave_1: entered promiscuous mode [ 82.008370][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.008431][ T6737] Cannot create hsr debugfs directory [ 82.044743][ T6501] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 82.045069][ T6501] Bluetooth: hci6: command 0xfc11 tx timeout [ 82.048850][ T55] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 82.071075][ T6978] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 82.071285][ T6978] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.106: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 82.082215][ T6978] EXT4-fs (loop3): Remounting filesystem read-only [ 82.100931][ T6502] Bluetooth: Wrong link type (-71) [ 82.102504][ T6502] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 82.104419][ T6502] Bluetooth: Wrong link type (-22) [ 82.107575][ T6996] capability: warning: `syz.4.109' uses 32-bit capabilities (legacy support in use) [ 82.122584][ T6996] capability: warning: `syz.4.109' uses deprecated v2 capabilities in a way that may be insecure [ 82.129919][ T6998] syz_tun: entered allmulticast mode [ 82.140408][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 82.176195][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.216222][ T6998] syz_tun (unregistering): left allmulticast mode [ 82.534347][ T7021] loop0: detected capacity change from 0 to 128 [ 82.541853][ T7021] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 82.686500][ T31] audit: type=1326 audit(82.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7018 comm="syz.0.114" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x0 [ 83.009677][ T7031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.015845][ T6737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.019560][ T6737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.078046][ T6737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.103093][ T6737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.971706][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.984146][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.116688][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.116781][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.121914][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.121989][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.142142][ T6737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.158604][ T7057] loop4: detected capacity change from 0 to 8 [ 84.167441][ T6737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.351962][ T7067] loop0: detected capacity change from 0 to 512 [ 85.354257][ T7067] ext4: Unknown parameter 'fscontext' [ 85.364399][ T7064] loop1: detected capacity change from 0 to 4096 [ 85.426800][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.537306][ T7057] Illegal XDP return value 3212267800 on prog (id 23) dev N/A, expect packet loss! [ 85.573019][ T7064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.593781][ T7064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.618350][ T7064] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.621475][ T7077] sch_fq: defrate 2048 ignored. [ 85.640722][ T7064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.743634][ T7085] loop0: detected capacity change from 0 to 16 [ 85.750438][ T7085] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 86.402031][ T7064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.435081][ T7064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.553909][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 86.638049][ T7064] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.687665][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.704183][ T6737] veth0_vlan: entered promiscuous mode [ 86.747708][ T6737] veth1_vlan: entered promiscuous mode [ 86.753037][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 86.761644][ T7102] process 'syz.1.128' launched '/dev/fd/4' with NULL argv: empty string added [ 86.832725][ T6737] veth0_macvtap: entered promiscuous mode [ 86.834544][ T6737] veth1_macvtap: entered promiscuous mode [ 86.896403][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.907313][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.911254][ T6737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.913893][ T6737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.916582][ T6737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.919007][ T6737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.009515][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.009574][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.224455][ T310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.224523][ T310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.261510][ T7120] loop4: detected capacity change from 0 to 64 [ 87.371117][ T7121] loop1: detected capacity change from 0 to 256 [ 87.378544][ T7121] vfat: Unknown parameter 'd' [ 88.030541][ T7124] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 88.071006][ T7120] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 88.088861][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 89.060904][ T7135] batman_adv: batadv0: Adding interface: dummy0 [ 89.063862][ T7135] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.072003][ T7135] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 89.834047][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 90.575668][ T7158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.313184][ T7163] loop1: detected capacity change from 0 to 1024 [ 91.456421][ T7172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.490848][ T7177] siw: device registration error -23 [ 91.568955][ T2206] hfsplus: b-tree write err: -5, ino 4 [ 92.747284][ T7192] loop3: detected capacity change from 0 to 16 [ 92.770691][ T7192] erofs (device loop3): mounted with root inode @ nid 36. [ 93.593871][ T7207] bridge1: entered allmulticast mode [ 93.833803][ T7214] erofs (device loop3): corrupted dir block 0 @ nid 36 [ 94.419136][ T7231] tipc: Failed to remove unknown binding: 66,3,3/0:1350451875/1350451876 [ 95.223794][ T7231] tipc: Started in network mode [ 95.223978][ T7231] tipc: Node identity a18d, cluster identity 4711 [ 95.224022][ T7231] tipc: Node number set to 41357 [ 97.108722][ T7264] syz.3.169 uses obsolete (PF_INET,SOCK_PACKET) [ 97.192985][ T31] audit: type=1326 audit(96.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7265 comm="syz.5.168" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa15a768 code=0x0 [ 97.206443][ T7262] Zero length message leads to an empty skb [ 98.030062][ T7275] bridge1: entered allmulticast mode [ 101.066141][ T7305] netlink: 156 bytes leftover after parsing attributes in process `syz.3.178'. [ 101.927431][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.180'. [ 101.931487][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 102.945401][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 102.945480][ T7333] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 102.945522][ T7333] netlink: 'syz.1.186': attribute type 8 has an invalid length. [ 102.945553][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 102.991055][ T7333] ip6gretap0: entered promiscuous mode [ 102.991862][ T7333] syz_tun: entered promiscuous mode [ 103.160494][ T7333] gretap0: entered promiscuous mode [ 104.051791][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.189'. [ 104.561807][ T7354] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.664731][ T7372] loop5: detected capacity change from 0 to 256 [ 106.119027][ T7372] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 106.632124][ T7385] veth0_vlan: left promiscuous mode [ 106.634455][ T7385] veth0_vlan: entered promiscuous mode [ 107.178936][ T7386] loop3: detected capacity change from 0 to 2048 [ 107.257201][ T7386] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 107.279004][ T7386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.460349][ T7416] loop4: detected capacity change from 0 to 512 [ 109.463817][ T7416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.464187][ T7416] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.470432][ T7416] EXT4-fs error (device loop4): __ext4_iget:5025: inode #2: block 3072: comm syz.4.205: invalid block [ 109.470745][ T7416] EXT4-fs (loop4): get root inode failed [ 109.470770][ T7416] EXT4-fs (loop4): mount failed [ 110.416555][ T7432] loop0: detected capacity change from 0 to 128 [ 110.590830][ T7432] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 112.801213][ T7461] ALSA: mixer_oss: invalid index 40000 [ 113.324998][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 113.473639][ T7465] binder: 7463:7465 tried to acquire reference to desc 0, got 1 instead [ 113.492158][ T1800] binder: release 7463:7465 transaction 22 out, still active [ 113.492293][ T1800] binder: undelivered TRANSACTION_COMPLETE [ 113.492348][ T1800] binder: undelivered TRANSACTION_COMPLETE [ 113.941588][ T7436] loop1: detected capacity change from 0 to 32768 [ 114.225391][ T26] binder: undelivered transaction 21, process died. [ 114.225479][ T26] binder: send failed reply for transaction 22, target dead [ 115.279286][ T7500] loop4: detected capacity change from 0 to 512 [ 115.285157][ T7502] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 115.285223][ T7502] Cannot find add_set index 0 as target [ 115.290599][ T7500] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.311148][ T7500] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #12: comm syz.4.222: corrupted in-inode xattr: invalid ea_ino [ 115.318074][ T7500] EXT4-fs (loop4): Remounting filesystem read-only [ 115.319009][ T7500] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.605432][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 115.645717][ T7493] loop5: detected capacity change from 0 to 4096 [ 115.852849][ T7528] loop1: detected capacity change from 0 to 256 [ 115.853488][ T7528] exfat: Deprecated parameter 'utf8' [ 115.853520][ T7528] exfat: Deprecated parameter 'utf8' [ 115.853582][ T7528] exfat: Deprecated parameter 'utf8' [ 115.871652][ T7528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 116.041266][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.044050][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.050825][ T7532] binder: 7531:7532 tried to acquire reference to desc 0, got 1 instead [ 116.057315][ T7532] loop5: detected capacity change from 0 to 256 [ 116.064358][ T7530] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.230'. [ 116.069727][ T7530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.230'. [ 116.070095][ T7532] binder: 7531:7532 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 116.070138][ T7532] binder: 7532 RLIMIT_NICE not set [ 116.070163][ T7532] binder: 7532 RLIMIT_NICE not set [ 116.070191][ T7532] binder: send failed reply for transaction 27 to 7531:7532 [ 116.070301][ T7532] binder: 7531:7532 ioctl c0306201 20000180 returned -14 [ 116.074082][ T6494] binder: undelivered TRANSACTION_COMPLETE [ 116.074125][ T6494] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.119537][ T6493] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 116.213351][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 118.560038][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 118.560108][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 118.619176][ T7575] loop3: detected capacity change from 0 to 1024 [ 120.064781][ T7612] loop5: detected capacity change from 0 to 16 [ 121.923160][ T31] audit: type=1326 audit(121.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 121.931074][ T31] audit: type=1326 audit(121.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 121.947085][ T7601] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 121.947961][ T7614] bridge_slave_0: left allmulticast mode [ 121.954486][ T7614] bridge_slave_0: left promiscuous mode [ 121.963693][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.992119][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.022956][ T7614] bridge_slave_1: left allmulticast mode [ 122.024571][ T7614] bridge_slave_1: left promiscuous mode [ 122.027513][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.030612][ T31] audit: type=1326 audit(121.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030692][ T31] audit: type=1326 audit(121.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030732][ T31] audit: type=1326 audit(121.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030770][ T31] audit: type=1326 audit(121.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030807][ T31] audit: type=1326 audit(121.650:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030844][ T31] audit: type=1326 audit(121.650:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030880][ T31] audit: type=1326 audit(121.650:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.030930][ T31] audit: type=1326 audit(121.650:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255a768 code=0x7fc00000 [ 122.081246][ T7614] bond0: (slave bond_slave_0): Releasing backup interface [ 122.320241][ T7614] bond0: (slave bond_slave_1): Releasing backup interface [ 123.042395][ T7614] team0: Port device team_slave_0 removed [ 123.172098][ T7614] team0: Port device team_slave_1 removed [ 123.182296][ T7614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.182392][ T7614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.216244][ T7614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.216314][ T7614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.228872][ T7642] mmap: syz.0.258 (7642) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.314349][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.323183][ T7601] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.622389][ T7650] loop4: detected capacity change from 0 to 8 [ 124.028071][ T7650] SQUASHFS error: zlib decompression failed, data probably corrupt [ 124.039608][ T7650] SQUASHFS error: Failed to read block 0x9b: -5 [ 124.049339][ T7650] SQUASHFS error: Unable to read metadata cache entry [99] [ 124.062231][ T7650] SQUASHFS error: Unable to read inode 0x127 [ 124.451822][ T7661] loop5: detected capacity change from 0 to 512 [ 124.452396][ T7661] EXT4-fs: Ignoring removed bh option [ 124.452436][ T7661] EXT4-fs: Ignoring removed orlov option [ 124.484309][ T7661] EXT4-fs (loop5): blocks per group (255) and clusters per group (8192) inconsistent [ 126.618127][ T2391] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.618214][ T2391] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.949104][ T9] IPVS: starting estimator thread 0... [ 127.437551][ T7689] IPVS: using max 30 ests per chain, 72000 per kthread [ 127.741512][ T7690] loop5: detected capacity change from 0 to 8 [ 127.748430][ T7690] Filesystem uses "unknown" compression. This is not supported [ 127.833028][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 127.957036][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 128.679760][ T6502] Bluetooth: hci2: link tx timeout [ 128.679897][ T6502] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 128.680694][ T6502] Bluetooth: hci2: link tx timeout [ 128.680723][ T6502] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.715949][ T7713] loop1: detected capacity change from 0 to 16 [ 128.723246][ T7713] erofs (device loop1): mounted with root inode @ nid 36. [ 129.440037][ T7713] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 129.440577][ T7713] syz.1.275: attempt to access beyond end of device [ 129.440577][ T7713] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 129.440742][ T7713] erofs (device loop1): read error -5 @ 0 of nid 36 [ 129.440772][ T7713] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 129.445660][ T7713] erofs (device loop1): readahead error at folio 12 @ nid 36 [ 129.451046][ T7713] erofs (device loop1): readahead error at folio 10 @ nid 36 [ 129.451662][ T7713] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 129.451718][ T7713] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 129.451873][ T7713] syz.1.275: attempt to access beyond end of device [ 129.451873][ T7713] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 129.452512][ T7713] syz.1.275: attempt to access beyond end of device [ 129.452512][ T7713] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 129.452601][ T7713] syz.1.275: attempt to access beyond end of device [ 129.452601][ T7713] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 129.452720][ T7713] syz.1.275: attempt to access beyond end of device [ 129.452720][ T7713] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 129.452799][ T7713] syz.1.275: attempt to access beyond end of device [ 129.452799][ T7713] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 129.452873][ T7713] syz.1.275: attempt to access beyond end of device [ 129.452873][ T7713] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 129.452998][ T7713] syz.1.275: attempt to access beyond end of device [ 129.452998][ T7713] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 129.573031][ T7723] loop4: detected capacity change from 0 to 64 [ 130.688050][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 130.833518][ T7745] bridge_slave_0: entered promiscuous mode [ 131.575079][ T7745] bridge_slave_0: left promiscuous mode [ 131.602970][ T7751] loop1: detected capacity change from 0 to 32768 [ 131.605208][ T7751] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.281 (7751) [ 131.641288][ T7751] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.641476][ T7751] BTRFS info (device loop1 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 131.641523][ T7751] BTRFS info (device loop1 state S): using free-space-tree [ 133.020642][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 133.102877][ T6628] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0x2ed603e1c7020c26560d5b67cb583d18728f31e4c19fda36b9e72f3cdfabcbb2 level 0, ignored [ 133.104517][ T204] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xab50a883c2dfab45bd85a24e53a0335bb16e0a6752950c82e3cc5e74c36012ef level 0, ignored [ 133.123879][ T204] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0, ignored [ 133.123963][ T204] page: refcount:4 mapcount:0 mapping:0000000048fe662e index:0x517 pfn:0x12f215 [ 133.124004][ T204] memcg:ffff0000f26b0000 [ 133.124028][ T204] aops:btree_aops ino:1 [ 133.124059][ T204] flags: 0x5ffc00000004000(private|node=0|zone=2|lastcpupid=0x7ff) [ 133.124093][ T204] raw: 05ffc00000004000 0000000000000000 dead000000000122 ffff0000f1f805c0 [ 133.124121][ T204] raw: 0000000000000517 ffff0000c74485a0 00000004ffffffff ffff0000f26b0000 [ 133.124144][ T204] page dumped because: eb page dump [ 133.124221][ T204] BTRFS critical (device loop1 state S): corrupt leaf: root=2 block=5337088 slot=0, invalid flag for leaf, WRITTEN not set [ 133.124304][ T204] BTRFS error (device loop1 state S): read time tree block corruption detected on logical 5337088 mirror 1 [ 133.154929][ T6628] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0, ignored [ 133.154996][ T6628] page: refcount:4 mapcount:0 mapping:0000000048fe662e index:0x518 pfn:0x10bf34 [ 133.155021][ T6628] memcg:ffff0000f26b0000 [ 133.155039][ T6628] aops:btree_aops ino:1 [ 133.155064][ T6628] flags: 0x5ffc00000004000(private|node=0|zone=2|lastcpupid=0x7ff) [ 133.155093][ T6628] raw: 05ffc00000004000 0000000000000000 dead000000000122 ffff0000f1f805c0 [ 133.155116][ T6628] raw: 0000000000000518 ffff0000c7448780 00000004ffffffff ffff0000f26b0000 [ 133.155134][ T6628] page dumped because: eb page dump [ 133.155155][ T6628] BTRFS critical (device loop1 state CS): corrupt leaf: root=10 block=5341184 slot=0, invalid flag for leaf, WRITTEN not set [ 133.155183][ T6628] BTRFS error (device loop1 state CS): read time tree block corruption detected on logical 5341184 mirror 1 [ 133.168842][ T204] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x8232fb5c98b1bbba7d6d7f6513a12a12f9f13952467f7fd798e5d02936714ba0 level 0, ignored [ 133.168894][ T204] BTRFS critical (device loop1 state CS): corrupted leaf, root=4 block=5328896 owner mismatch, have 6218626660468523012 expect 4 [ 133.172669][ T6628] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0, ignored [ 133.207388][ T14] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0xc6ec8d53b0f68594cbbc99c053ab7a478ff9ce414f14cc3da5ea0063383d2b51 level 0, ignored [ 133.241676][ T7751] BTRFS info (device loop1 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 134.306655][ T7801] loop0: detected capacity change from 0 to 256 [ 134.336500][ T7801] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.336550][ T7801] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 134.387298][ T7801] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 137.679760][ T7841] loop0: detected capacity change from 0 to 512 [ 138.123694][ T7841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.283758][ T7860] loop4: detected capacity change from 0 to 128 [ 138.399969][ T7845] loop5: detected capacity change from 0 to 40427 [ 138.418672][ T7845] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff [ 138.421334][ T7845] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2 [ 138.423385][ T7845] F2FS-fs (loop5): Image doesn't support compression [ 138.425751][ T7845] F2FS-fs (loop5): Image doesn't support compression [ 138.488389][ T7845] F2FS-fs (loop5): invalid crc value [ 138.532930][ T6488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.305603][ T7845] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 140.855746][ T6737] syz-executor: attempt to access beyond end of device [ 140.855746][ T6737] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.856736][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 140.856763][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.856770][ T6737] Call trace: [ 140.856775][ T6737] show_stack+0x2c/0x3c (C) [ 140.856792][ T6737] __dump_stack+0x30/0x40 [ 140.856804][ T6737] dump_stack_lvl+0xd8/0x12c [ 140.856814][ T6737] dump_stack+0x1c/0x28 [ 140.856824][ T6737] f2fs_handle_critical_error+0x34c/0x4b8 [ 140.856839][ T6737] f2fs_stop_checkpoint+0x58/0x6c [ 140.856851][ T6737] f2fs_write_end_io+0x794/0xadc [ 140.856865][ T6737] bio_endio+0x81c/0x858 [ 140.856879][ T6737] submit_bio_noacct+0x158/0x176c [ 140.856899][ T6737] submit_bio+0x354/0x4d4 [ 140.856910][ T6737] f2fs_submit_write_bio+0x13c/0x324 [ 140.856923][ T6737] __submit_merged_bio+0x254/0x704 [ 140.856936][ T6737] __submit_merged_write_cond+0x23c/0x4ac [ 140.856949][ T6737] f2fs_write_data_pages+0x1e9c/0x27ac [ 140.856963][ T6737] do_writepages+0x2c0/0x6a8 [ 140.856977][ T6737] filemap_fdatawrite+0x144/0x1e8 [ 140.856988][ T6737] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 140.857000][ T6737] f2fs_write_checkpoint+0x684/0x1694 [ 140.857012][ T6737] kill_f2fs_super+0x21c/0x584 [ 140.857026][ T6737] deactivate_locked_super+0xc4/0x12c [ 140.857038][ T6737] deactivate_super+0xe0/0x100 [ 140.857049][ T6737] cleanup_mnt+0x31c/0x3ac [ 140.857062][ T6737] __cleanup_mnt+0x20/0x30 [ 140.857073][ T6737] task_work_run+0x1dc/0x260 [ 140.857085][ T6737] do_notify_resume+0x16c/0x1ec [ 140.857098][ T6737] el0_svc+0xb4/0x17c [ 140.857112][ T6737] el0t_64_sync_handler+0x78/0x108 [ 140.857125][ T6737] el0t_64_sync+0x198/0x19c [ 140.906255][ T6737] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 141.526020][ T7895] loop3: detected capacity change from 0 to 8 [ 141.558749][ T7895] SQUASHFS error: Unable to read inode 0x11f [ 141.619445][ T7894] lo speed is unknown, defaulting to 1000 [ 141.788508][ T204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.929698][ T7880] SET target dimension over the limit! [ 142.223426][ T204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.968133][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.969791][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.970609][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.976717][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.979219][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.984092][ T7909] fuse: root generation should be zero [ 143.328795][ T204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.817869][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.818197][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.057557][ T6494] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.181425][ T7943] loop3: detected capacity change from 0 to 8 [ 144.194870][ T7943] SQUASHFS error: lzo decompression failed, data probably corrupt [ 144.197027][ T7943] SQUASHFS error: Failed to read block 0x28d: -5 [ 144.198876][ T7943] SQUASHFS error: Unable to read metadata cache entry [28b] [ 144.200944][ T7943] SQUASHFS error: Unable to read inode 0x11f [ 144.204850][ T6494] usb 1-1: Using ep0 maxpacket: 16 [ 144.213336][ T6494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.217958][ T6494] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.218015][ T6494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.218058][ T6494] usb 1-1: Product: syz [ 144.218086][ T6494] usb 1-1: Manufacturer: syz [ 144.218113][ T6494] usb 1-1: SerialNumber: syz [ 144.231725][ T6494] usb 1-1: config 0 descriptor?? [ 144.241083][ T6494] em28xx 1-1:0.0: audio device (2040:0264): interface 0, class 1 [ 144.345098][ T6477] kernel write not supported for file bpf-prog (pid: 6477 comm: kworker/1:3) [ 145.045944][ T6502] Bluetooth: hci4: command tx timeout [ 145.234142][ T204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.262517][ T7944] syz_tun: entered allmulticast mode [ 145.262673][ T7944] syz_tun: left allmulticast mode [ 145.305011][ T7950] dvmrp1: entered allmulticast mode [ 145.343673][ T7910] lo speed is unknown, defaulting to 1000 [ 146.374038][ T7978] binder: 7977:7978 tried to acquire reference to desc 0, got 1 instead [ 146.377345][ T7978] binder: 7977:7978 got transaction to invalid handle, 3 [ 146.379287][ T7978] binder: 7978:7977 cannot find target node [ 146.380998][ T7978] binder: 7977:7978 transaction call to 0:0 failed 33/29201/-22, code 0 size 0-0 line 3150 [ 146.386563][ T6494] binder: undelivered TRANSACTION_COMPLETE [ 146.388366][ T6494] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.399081][ T6494] binder: undelivered transaction 32, process died. [ 146.477370][ T1800] usb 1-1: USB disconnect, device number 6 [ 146.700372][ T7994] loop3: detected capacity change from 0 to 512 [ 146.725800][ T7994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.728410][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 146.782166][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.866367][ T8006] loop3: detected capacity change from 0 to 256 [ 147.086009][ T6502] Bluetooth: hci4: command tx timeout [ 147.402782][ T8016] loop3: detected capacity change from 0 to 1024 [ 147.403490][ T8016] EXT4-fs: Ignoring removed nobh option [ 147.403522][ T8016] EXT4-fs: Ignoring removed bh option [ 147.429615][ T8016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.591169][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.127969][ T204] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 148.208943][ T204] bond0 (unregistering): Released all slaves [ 148.323091][ T8030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.338'. [ 148.490994][ T8034] tipc: Started in network mode [ 148.491058][ T8034] tipc: Node identity 4, cluster identity 4711 [ 148.491097][ T8034] tipc: Node number set to 4 [ 148.536300][ T8044] binder: 8040:8044 tried to acquire reference to desc 0, got 1 instead [ 148.539949][ T8044] binder: 8040:8044 got transaction with invalid offset (40, min 24 max 112) or object. [ 148.540080][ T8044] binder: 8040:8044 transaction call to 8040:0 failed 38/29201/-22, code 0 size 112-24 line 3454 [ 148.540130][ T8044] binder: 8040:8044 ioctl c0306201 200001c0 returned -14 [ 148.544768][ T6494] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.592075][ T6502] Bluetooth: hci4: command tx timeout [ 150.773828][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.779625][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.798170][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.808344][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.851072][ T8072] loop3: detected capacity change from 0 to 4096 [ 150.880946][ T8078] loop1: detected capacity change from 0 to 512 [ 150.883962][ T8078] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.890242][ T8072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.922772][ T8078] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 150.922859][ T8078] System zones: 0-2, 18-18, 34-34 [ 150.933666][ T8072] fs-verity: sha256 using implementation "sha256-ce" [ 150.949165][ T8078] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.347: bad orphan inode 15 [ 150.973721][ T8078] ext4_test_bit(bit=14, block=18) = 1 [ 150.973778][ T8078] is_bad_inode(inode)=0 [ 150.973816][ T8078] NEXT_ORPHAN(inode)=2264924160 [ 150.973841][ T8078] max_ino=32 [ 150.973864][ T8078] i_nlink=0 [ 150.998715][ T8078] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 151.009066][ T8078] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.347: bg 0: block 80: padding at end of block bitmap is not set [ 151.030183][ T8072] fs-verity (loop3, inode 16): Error -27 writing Merkle tree block 6493178910 [ 151.030400][ T8072] fs-verity (loop3, inode 16): Error -27 building Merkle tree [ 151.044041][ T8078] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 151.075635][ T8078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.123342][ T8068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.157836][ T7910] chnl_net:caif_netlink_parms(): no params data found [ 151.694766][ T6502] Bluetooth: hci4: command tx timeout [ 152.175765][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.226138][ T8115] loop0: detected capacity change from 0 to 2048 [ 152.231784][ T8115] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 152.255219][ T204] hsr_slave_0: left promiscuous mode [ 152.257105][ T8117] binder: 8116:8117 tried to acquire reference to desc 0, got 1 instead [ 152.257824][ T8117] binder: 8116:8117 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.257869][ T8117] binder: 8117 RLIMIT_NICE not set [ 152.270788][ T204] hsr_slave_1: left promiscuous mode [ 152.310182][ T8123] loop5: detected capacity change from 0 to 256 [ 152.338094][ T204] veth1_macvtap: left promiscuous mode [ 152.342501][ T204] veth0_macvtap: left promiscuous mode [ 152.346552][ T204] veth1_vlan: left promiscuous mode [ 152.351127][ T204] veth0_vlan: left promiscuous mode [ 152.353365][ T8123] FAT-fs (loop5): Directory bread(block 64) failed [ 152.356265][ T8123] FAT-fs (loop5): Directory bread(block 65) failed [ 152.359364][ T8123] FAT-fs (loop5): Directory bread(block 66) failed [ 152.361524][ T8123] FAT-fs (loop5): Directory bread(block 67) failed [ 152.364172][ T8123] FAT-fs (loop5): Directory bread(block 68) failed [ 152.364249][ T8123] FAT-fs (loop5): Directory bread(block 69) failed [ 152.364324][ T8123] FAT-fs (loop5): Directory bread(block 70) failed [ 152.364375][ T8123] FAT-fs (loop5): Directory bread(block 71) failed [ 152.379307][ T8123] FAT-fs (loop5): Directory bread(block 72) failed [ 152.379379][ T8123] FAT-fs (loop5): Directory bread(block 73) failed [ 153.327948][ T8129] loop3: detected capacity change from 0 to 512 [ 153.346573][ T8129] EXT4-fs (loop3): bad block size 8192 [ 162.294754][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.294836][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.295034][ T7910] bridge_slave_0: entered allmulticast mode [ 162.295871][ T7910] bridge_slave_0: entered promiscuous mode [ 162.297033][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.297090][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.304352][ T7910] bridge_slave_1: entered allmulticast mode [ 162.305363][ T7910] bridge_slave_1: entered promiscuous mode [ 162.427538][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.427841][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.519446][ T7910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.521214][ T7910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.532119][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 163.386381][ T8207] binder: 8206:8207 tried to acquire reference to desc 0, got 1 instead [ 163.401487][ T9] binder: undelivered TRANSACTION_COMPLETE [ 163.439901][ T6478] binder: undelivered transaction 49, process died. [ 163.476069][ T7910] team0: Port device team_slave_0 added [ 163.502251][ T7910] team0: Port device team_slave_1 added [ 163.736460][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.738421][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.652650][ T6505] Bluetooth: hci0: command 0x0406 tx timeout [ 164.652746][ T6505] Bluetooth: hci3: command 0x0406 tx timeout [ 164.652789][ T6505] Bluetooth: hci1: command 0x0406 tx timeout [ 164.665736][ T7910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.666986][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.667025][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.667074][ T7910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.203223][ T7910] hsr_slave_0: entered promiscuous mode [ 165.357144][ T7910] hsr_slave_1: entered promiscuous mode [ 165.460538][ T7910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.460601][ T7910] Cannot create hsr debugfs directory [ 165.660725][ T204] IPVS: stop unused estimator thread 0... [ 165.710465][ T8252] loop0: detected capacity change from 0 to 1024 [ 165.714552][ T8252] hfsplus: failed to load extents file [ 167.599163][ T8269] loop0: detected capacity change from 0 to 2048 [ 167.612035][ T8269] udf: Unknown parameter 'rootdir-00000000000000000004' [ 167.676811][ T8272] loop3: detected capacity change from 0 to 128 [ 167.687271][ T8269] loop0: detected capacity change from 0 to 512 [ 167.761270][ T7910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.852170][ T7910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.921190][ T7910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.927054][ T7910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.931420][ T8269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.935931][ T8272] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.761265][ T7910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.784375][ T7910] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.823472][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.823557][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.837154][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.837228][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.847700][ T6490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.002911][ T6488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.022869][ T8306] loop3: detected capacity change from 0 to 512 [ 169.094220][ T8306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.354519][ T7910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.137983][ T55] Bluetooth: hci1: unexpected event for opcode 0x200b [ 171.230609][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.776399][ T7910] veth0_vlan: entered promiscuous mode [ 172.779448][ T7910] veth1_vlan: entered promiscuous mode [ 172.791022][ T7910] veth0_macvtap: entered promiscuous mode [ 172.792819][ T7910] veth1_macvtap: entered promiscuous mode [ 172.974178][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.104566][ T8365] CIFS mount error: No usable UNC path provided in device string! [ 173.104566][ T8365] [ 173.104674][ T8365] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 173.750202][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.785991][ T7910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.786074][ T7910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.791220][ T7910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.791279][ T7910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.813877][ T8371] loop5: detected capacity change from 0 to 1024 [ 173.814502][ T8371] EXT4-fs: Ignoring removed nobh option [ 173.842560][ T8371] EXT4-fs: Ignoring removed bh option [ 173.912155][ T8378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.931762][ T8371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.720758][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.723003][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.778235][ T6592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.781043][ T6592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.886871][ T8389] delete_channel: no stack [ 174.897648][ T8387] loop0: detected capacity change from 0 to 4096 [ 175.435377][ T6737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.543879][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.547903][ T6478] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 176.548022][ T6478] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 176.554540][ T8409] loop3: detected capacity change from 0 to 1024 [ 176.562655][ T8409] EXT4-fs: Ignoring removed nobh option [ 176.579416][ T6502] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 176.581833][ T8409] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.588425][ T8409] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 176.588661][ T8409] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.416: couldn't read orphan inode 11 (err -117) [ 176.589590][ T8409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.620106][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.622971][ T45] wlan1: authenticated [ 176.625197][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.628228][ T14] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 176.650751][ T8419] loop0: detected capacity change from 0 to 1024 [ 176.651404][ T8419] EXT4-fs: Ignoring removed orlov option [ 176.652830][ T8419] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 176.663917][ T8419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.730680][ T8419] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.417: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 176.736259][ T341] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 176.737223][ T8419] EXT4-fs (loop0): Remounting filesystem read-only [ 176.787634][ T6488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.847571][ T14] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 176.914512][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.955396][ T14] wlan1: association with 08:02:11:00:00:00 timed out [ 177.009584][ T8432] loop0: detected capacity change from 0 to 8 [ 177.020013][ T8436] loop3: detected capacity change from 0 to 128 [ 177.026143][ T8436] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 177.234103][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 177.236146][ T31] audit: type=1326 audit(176.850:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8435 comm="syz.3.419" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffafd5a768 code=0x0 [ 177.330787][ T8445] syz_tun: entered allmulticast mode [ 177.337348][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.424'. [ 177.418217][ T8445] syz_tun (unregistering): left allmulticast mode [ 177.889455][ T2206] Bluetooth: Error in BCSP hdr checksum [ 178.143751][ T341] Bluetooth: Error in BCSP hdr checksum [ 178.242768][ T8484] loop3: detected capacity change from 0 to 16 [ 178.249412][ T8484] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 178.822927][ T341] Bluetooth: Error in BCSP hdr checksum [ 178.977467][ T6593] Bluetooth: Error in BCSP hdr checksum [ 179.033367][ T8489] batman_adv: batadv0: Adding interface: dummy0 [ 179.033431][ T8489] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.033501][ T8489] batman_adv: batadv0: Interface activated: dummy0 [ 179.644966][ T6502] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.726414][ T6502] Bluetooth: hci6: command 0xfc11 tx timeout [ 179.774844][ T55] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 179.802867][ T6592] Bluetooth: Error in BCSP hdr checksum [ 179.805613][ T8489] batadv0: mtu less than device minimum [ 179.808610][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.811535][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.814382][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.817263][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.820107][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.822966][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.825850][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.828697][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.831568][ T8489] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.076580][ T8493] loop3: detected capacity change from 0 to 4096 [ 180.097949][ T8493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.151256][ T8493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.151315][ T8493] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.836905][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 180.836982][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 180.864393][ T8493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.903852][ T8514] loop6: detected capacity change from 0 to 256 [ 180.939306][ T8493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.941180][ T8493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.125770][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 182.040559][ T8493] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 182.246553][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.495837][ T55] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 183.505698][ T8562] siw: device registration error -23 [ 185.174800][ T8575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.966454][ T8606] loop6: detected capacity change from 0 to 2048 [ 187.152117][ T8606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.345011][ T8606] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.361050][ T8606] EXT4-fs (loop6): Remounting filesystem read-only [ 187.364088][ T8624] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 188.352519][ T2391] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.352600][ T2391] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.640301][ T7910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.823307][ T8649] loop0: detected capacity change from 0 to 2048 [ 190.858286][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 190.860815][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 191.878640][ T8649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.185427][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.470'. [ 192.185603][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.470'. [ 192.185663][ T8649] net_ratelimit: 10 callbacks suppressed [ 192.185689][ T8649] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 192.407838][ T8682] loop3: detected capacity change from 0 to 256 [ 192.553263][ T8682] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 192.943530][ T6488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.041439][ T8706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'. [ 194.780697][ T8719] loop5: detected capacity change from 0 to 256 [ 194.782413][ T8719] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.782447][ T8719] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 194.802855][ T8719] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 195.849103][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.849420][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.882682][ T8735] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.182308][ T8728] 9pnet_fd: p9_fd_create_tcp (8728): problem connecting socket to 127.0.0.1 [ 198.907710][ T8765] netfs: Couldn't get user pages (rc=-14) [ 199.886799][ T55] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 199.923813][ T8789] loop3: detected capacity change from 0 to 256 [ 199.939997][ T8789] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.940815][ T8789] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 199.944599][ T8789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 201.994812][ T6502] Bluetooth: hci0: command 0x0406 tx timeout [ 202.048084][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.048384][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.077085][ T8821] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 202.083880][ T8817] netlink: 4344 bytes leftover after parsing attributes in process `syz.6.509'. [ 202.085290][ T8817] netlink: 104 bytes leftover after parsing attributes in process `syz.6.509'. [ 203.127239][ T8831] loop5: detected capacity change from 0 to 64 [ 203.586235][ T8847] tipc: Started in network mode [ 203.587799][ T8847] tipc: Node identity d6142c062fed, cluster identity 4711 [ 203.590831][ T8847] tipc: Enabled bearer , priority 0 [ 204.341758][ T8847] syzkaller0: entered promiscuous mode [ 204.343496][ T8847] syzkaller0: entered allmulticast mode [ 204.349559][ T8847] tipc: Resetting bearer [ 204.353970][ T8842] tipc: Resetting bearer [ 204.578008][ T8842] tipc: Disabling bearer [ 204.789814][ T8858] tipc: Failed to remove unknown binding: 66,1,1/4:166129196/166129198 [ 204.792383][ T8858] tipc: Failed to remove unknown binding: 66,1,1/4:166129196/166129198 [ 205.145969][ T8860] loop0: detected capacity change from 0 to 16 [ 206.259138][ T8884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.310131][ T8890] loop5: detected capacity change from 0 to 2048 [ 207.877233][ T8891] loop6: detected capacity change from 0 to 256 [ 207.877992][ T8891] exfat: Deprecated parameter 'namecase' [ 207.878030][ T8891] exfat: Bad value for 'uid' [ 207.878051][ T8891] exfat: Bad value for 'uid' [ 208.951044][ T8890] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 208.955831][ T8890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.986246][ T8896] syzkaller0: entered promiscuous mode [ 208.989477][ T8896] syzkaller0: entered allmulticast mode [ 208.992573][ T8896] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 210.222756][ T8920] binder: 8918:8920 tried to acquire reference to desc 0, got 1 instead [ 210.230635][ T9] binder: release 8918:8920 transaction 61 out, still active [ 210.230689][ T9] binder: undelivered TRANSACTION_COMPLETE [ 210.230732][ T9] binder: undelivered TRANSACTION_COMPLETE [ 210.942983][ T9] binder: undelivered transaction 60, process died. [ 210.947263][ T9] binder: send failed reply for transaction 61, target dead [ 212.070421][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 212.372761][ T8950] loop6: detected capacity change from 0 to 256 [ 212.373493][ T8950] vfat: Unknown parameter 'd' [ 215.119867][ T310] Bluetooth: (null): Invalid header checksum [ 215.119967][ T310] Bluetooth: (null): Invalid header checksum [ 215.120030][ T310] Bluetooth: (null): Invalid header checksum [ 215.120077][ T310] Bluetooth: (null): Invalid header checksum [ 215.120122][ T310] Bluetooth: (null): Invalid header checksum [ 215.120163][ T310] Bluetooth: (null): Invalid header checksum [ 215.139136][ T8968] loop3: detected capacity change from 0 to 1024 [ 215.143715][ T8965] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 215.157535][ T8968] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 215.157599][ T8968] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 215.157754][ T8968] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 215.164131][ T8968] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.545: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 215.165172][ T8968] EXT4-fs (loop3): no journal found [ 215.165198][ T8968] EXT4-fs (loop3): can't get journal size [ 215.184170][ T8968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.368137][ T8984] loop6: detected capacity change from 0 to 2048 [ 215.395519][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.416390][ T8984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.749616][ T9023] Unable to handle kernel paging request at virtual address dfff800000000018 [ 218.750780][ T9023] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 218.751000][ T9023] Mem abort info: [ 218.751122][ T9023] ESR = 0x0000000096000005 [ 218.751247][ T9023] EC = 0x25: DABT (current EL), IL = 32 bits [ 218.751378][ T9023] SET = 0, FnV = 0 [ 218.751498][ T9023] EA = 0, S1PTW = 0 [ 218.751628][ T9023] FSC = 0x05: level 1 translation fault [ 218.751758][ T9023] Data abort info: [ 218.751874][ T9023] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 218.752082][ T9023] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 218.752207][ T9023] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 218.752335][ T9023] [dfff800000000018] address between user and kernel address ranges [ 218.752617][ T9023] Internal error: Oops: 0000000096000005 [#1] SMP [ 218.774647][ T9023] Modules linked in: [ 218.775702][ T9023] CPU: 1 UID: 0 PID: 9023 Comm: syz.1.557 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 218.778636][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.781371][ T9023] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.783487][ T9023] pc : find_match+0xa0/0xacc [ 218.784745][ T9023] lr : find_match+0x74/0xacc [ 218.786000][ T9023] sp : ffff80009cc96bc0 [ 218.787126][ T9023] x29: ffff80009cc96be0 x28: 1fffe00019af1ba6 x27: 1fffe00019af1ba4 [ 218.789311][ T9023] x26: 00000000000000c0 x25: ffff0000cd78dd37 x24: 0000000000000201 [ 218.791467][ T9023] x23: 0000000000000002 x22: ffff0000cd78dd20 x21: 0000000000000000 [ 218.793658][ T9023] x20: dfff800000000000 x19: 0000000000000000 x18: 1fffe0003386f276 [ 218.795824][ T9023] x17: ffff80008f31e000 x16: ffff80008051c10c x15: 0000000000000001 [ 218.798001][ T9023] x14: 1fffe00033871ce8 x13: 0000000000000000 x12: 0000000000000000 [ 218.800183][ T9023] x11: 0000000000080000 x10: 0000000000ff0100 x9 : 0000000000000002 [ 218.802343][ T9023] x8 : 0000000000000018 x7 : ffff800080485878 x6 : 0000000000000000 [ 218.804486][ T9023] x5 : ffff80009cc96f70 x4 : ffff80009cc96f60 x3 : 0000000000000002 [ 218.806673][ T9023] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.808834][ T9023] Call trace: [ 218.809709][ T9023] find_match+0xa0/0xacc (P) [ 218.810977][ T9023] rt6_nh_find_match+0xcc/0x138 [ 218.812294][ T9023] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 218.813797][ T9023] __find_rr_leaf+0x3b8/0x5c8 [ 218.815069][ T9023] fib6_table_lookup+0x308/0x8b8 [ 218.816392][ T9023] ip6_pol_route+0x1f8/0x1014 [ 218.817657][ T9023] ip6_pol_route_output+0x60/0x94 [ 218.819021][ T9023] fib6_rule_lookup+0x258/0x45c [ 218.820331][ T9023] ip6_route_output_flags+0x2e4/0x578 [ 218.821772][ T9023] ip6_dst_lookup_tail+0x168/0x12e4 [ 218.823191][ T9023] ip6_dst_lookup_flow+0x54/0xe0 [ 218.824534][ T9023] sctp_v6_get_dst+0x668/0x16cc [ 218.825855][ T9023] sctp_transport_route+0xe8/0x258 [ 218.827247][ T9023] sctp_assoc_add_peer+0x4e0/0x133c [ 218.828656][ T9023] sctp_connect_new_asoc+0x2e8/0x620 [ 218.830097][ T9023] __sctp_connect+0x4ac/0xb38 [ 218.831349][ T9023] sctp_getsockopt_connectx3+0x28c/0x538 [ 218.832855][ T9023] sctp_getsockopt+0x414/0x968 [ 218.834169][ T9023] sock_common_getsockopt+0xa8/0xc4 [ 218.835581][ T9023] do_sock_getsockopt+0x248/0x3c4 [ 218.836953][ T9023] __arm64_sys_getsockopt+0x168/0x1d8 [ 218.838405][ T9023] invoke_syscall+0x98/0x2b8 [ 218.839653][ T9023] el0_svc_common+0x130/0x23c [ 218.840915][ T9023] do_el0_svc+0x48/0x58 [ 218.842041][ T9023] el0_svc+0x58/0x17c [ 218.843117][ T9023] el0t_64_sync_handler+0x78/0x108 [ 218.844517][ T9023] el0t_64_sync+0x198/0x19c [ 218.845738][ T9023] Code: 97978776 f94002c8 9103011a d343ff48 (38746908) [ 218.847598][ T9023] ---[ end trace 0000000000000000 ]--- [ 219.241620][ T9023] Kernel panic - not syncing: Oops: Fatal exception [ 219.243491][ T9023] SMP: stopping secondary CPUs [ 219.244844][ T9023] Kernel Offset: disabled [ 219.246044][ T9023] CPU features: 0x0800,000040e0,01000250,82017203 [ 219.247781][ T9023] Memory Limit: none [ 219.630343][ T9023] Rebooting in 86400 seconds..